Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44d5bf80-0da3-42b5-9b05-26cba920d608.roa
File:                     44d5bf80-0da3-42b5-9b05-26cba920d608.roa (raw, json)
Hash identifier:          hGnB1R8Hp1V1f1XQktY11pYGvoasFjXuz/610DTOOQE=
Subject key identifier:   B0:BC:94:C2:D7:29:EB:F1:6A:BD:2B:B1:19:5D:51:99:1E:AF:41:EB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D692669CC6B232E7B2671430E29F7A9C5099386
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44d5bf80-0da3-42b5-9b05-26cba920d608.roa
Signing time:             Mon 12 Oct 2026 01:10:47 +0000
ROA not before:           Mon 12 Oct 2026 01:10:47 +0000
ROA not after:            Sun 10 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.181.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:69:26:69:cc:6b:23:2e:7b:26:71:43:0e:29:f7:a9:c5:09:93:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 12 01:10:47 2026 GMT
            Not After : Jan 10 23:59:59 2027 GMT
        Subject: serialNumber=1e6f5a4ab1b9031bff461b8e56320e1e22bb4621ec18c38f00b35536a932bc52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:07:2c:be:a7:b5:8c:d0:9b:37:02:be:c4:
                    ab:cf:13:8b:c2:66:76:63:2a:d6:ec:16:bb:93:7e:
                    0a:00:85:70:e9:ed:7c:78:d9:59:91:20:17:00:8f:
                    a4:3c:a5:b7:bf:89:78:df:8c:7b:ff:5c:25:6c:49:
                    50:16:ac:8c:19:96:7e:93:85:bd:4f:d3:f6:cd:f7:
                    16:55:31:36:45:ad:f8:13:99:18:9a:0c:78:1f:5c:
                    28:3f:ff:49:a6:e1:e8:a9:05:05:42:ac:b5:8e:5a:
                    8b:72:eb:35:f6:91:f9:87:60:34:e0:80:a2:3b:36:
                    14:26:e0:43:9b:7f:14:76:6e:f0:d4:1c:1d:42:1e:
                    12:dd:12:dd:ab:0a:eb:e6:e3:53:3b:08:74:df:ca:
                    12:54:44:67:a0:bb:63:78:2c:39:ba:57:42:10:71:
                    dd:8c:68:32:68:59:dc:1d:59:35:29:73:09:fa:47:
                    ad:4e:95:47:51:0e:18:5b:0a:b3:df:c4:6c:12:43:
                    9d:25:65:ab:2d:bb:86:e7:6c:a6:e9:16:3c:5a:c4:
                    59:3c:e0:5a:d6:e3:c5:5d:fb:30:80:96:c5:22:ba:
                    ad:f9:a0:78:b1:4b:00:c3:a9:ca:8c:4e:b1:a6:fe:
                    bd:06:02:5a:93:90:df:33:3e:85:e8:46:13:c9:87:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:94:C2:D7:29:EB:F1:6A:BD:2B:B1:19:5D:51:99:1E:AF:41:EB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44d5bf80-0da3-42b5-9b05-26cba920d608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:8f:82:f2:19:a2:d8:51:9b:cc:0d:9a:5a:4d:c4:c6:53:
         8a:28:ab:a1:c9:3a:3e:7f:70:bd:ad:66:a4:d4:21:20:2a:a5:
         b8:34:86:9c:2b:1f:c1:c6:cb:aa:33:fe:9e:6a:59:a3:9a:39:
         05:6f:00:cf:29:0e:0e:5e:98:35:55:43:ff:64:15:ae:49:df:
         25:4f:84:f6:39:bd:be:7c:65:dd:1d:f9:bd:05:9d:6e:96:07:
         a7:cf:b0:9d:78:22:e8:80:48:b9:ef:31:d1:ef:17:c8:96:23:
         6f:02:d8:d1:8c:0b:69:49:57:c7:a0:69:02:c5:33:c1:1b:a0:
         d2:ae:49:af:3f:60:ee:a2:b5:14:7d:e5:88:d0:b1:f9:a2:b3:
         4b:fc:47:56:9c:ae:dc:2c:fb:c4:68:ff:93:47:e4:24:95:9f:
         34:89:1b:7b:99:c2:3e:f1:74:46:1d:d0:04:4e:1a:ee:62:26:
         4f:c5:29:39:12:e2:59:b7:66:04:8f:49:40:c1:f5:be:df:53:
         e8:92:f8:38:01:aa:e5:3c:fd:81:34:68:2a:a8:45:1c:ad:cc:
         9d:92:21:c4:d1:4c:31:e7:04:df:9e:2b:4e:75:08:86:9a:4b:
         46:5e:c5:3a:ea:f5:f2:10:25:ca:92:2e:1c:77:9e:93:39:8e:
         de:2f:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:30:27 2026 by rpki-client