Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa
File:                     503e4ea6-1eb7-413e-af4f-6643fc009258.roa (raw, json)
Hash identifier:          dG8hJguob/aPh+Clcqy4OlZpbpw1p4yssFjNM4dvT8Q=
Subject key identifier:   0C:FB:FA:9E:B1:3C:7C:3D:8D:27:D8:5D:6E:F1:AA:03:F7:E3:F8:07
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6D1C34A4C7E0E51B1A31EB4EF7F3E6C9C9002E35
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa
Signing time:             Tue 19 May 2026 02:20:33 +0000
ROA not before:           Tue 19 May 2026 02:20:33 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:34:a4:c7:e0:e5:1b:1a:31:eb:4e:f7:f3:e6:c9:c9:00:2e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 02:20:33 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=39338be9b317c307462f8a395ca26f835e76b9b8e1b2c2b63bd57c42032ea206, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:46:2d:83:99:fa:cb:c2:27:c2:ca:b9:a0:
                    55:9d:54:ad:19:d6:92:ff:0e:fc:43:6d:4d:6f:60:
                    00:16:29:ca:d9:65:fd:74:5a:16:ba:8c:3b:a6:06:
                    27:0d:42:49:e6:91:33:87:48:b4:8e:4d:e0:41:37:
                    35:ae:9c:39:06:c8:f8:93:db:43:e2:13:66:c8:e7:
                    0c:e3:04:e2:ce:d3:66:f0:08:0e:c8:e5:e6:9a:ad:
                    eb:e6:f6:c5:0f:9f:31:5e:ca:db:3f:14:80:79:3b:
                    f1:e3:8c:98:a1:05:fe:ac:9d:4c:66:b9:2f:a6:77:
                    55:f3:3e:88:e1:e8:63:30:af:86:15:66:0b:4d:80:
                    6a:a0:1e:87:db:c8:db:35:06:e2:08:bc:5d:cb:6f:
                    8d:89:d9:6f:07:1d:d5:4f:87:6a:1e:d5:26:a3:6c:
                    21:45:5f:23:55:1f:ff:af:7c:99:75:d9:a9:32:91:
                    21:ca:c7:f7:46:8e:bc:8f:75:1c:7f:17:6c:7a:5c:
                    bc:3f:d6:78:22:93:34:73:8d:a7:87:91:59:bf:9f:
                    63:f9:9c:de:06:9a:83:be:4f:5f:23:75:75:c1:62:
                    48:61:69:cf:c5:a2:1b:a6:ed:a9:35:19:84:7b:a9:
                    b9:ba:e7:f2:71:82:45:d8:d4:17:66:60:e9:ce:3d:
                    96:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FB:FA:9E:B1:3C:7C:3D:8D:27:D8:5D:6E:F1:AA:03:F7:E3:F8:07
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:23:d9:12:68:76:a9:c6:81:70:9a:b6:e5:91:d2:ec:59:
         b7:c3:b6:04:ab:5f:8f:99:d0:d2:f9:41:15:02:03:39:32:20:
         9d:ed:8e:0e:e9:03:24:14:a1:32:9f:2d:2f:ae:b1:6b:cf:23:
         9a:95:c2:95:02:79:76:79:83:72:0d:25:f1:cd:3f:92:5e:f4:
         bc:00:e3:0b:9d:0f:e5:30:89:ea:cb:5b:66:e6:b5:8a:dd:5b:
         75:29:f5:de:1e:49:28:9d:d1:a1:46:cd:dd:37:9e:e1:4d:f1:
         97:38:7a:3e:3f:af:a7:0d:f3:cb:3c:6a:a7:33:d6:84:8c:11:
         82:ee:f8:f5:af:d1:dd:81:bf:46:bd:7c:34:d9:3b:5c:f4:64:
         4f:56:2b:7d:fe:38:cb:f1:95:66:c7:19:33:8b:68:ae:c6:b5:
         5e:45:5a:eb:c1:85:6d:2f:e7:1b:a6:27:6a:c4:87:b2:da:15:
         14:f5:34:ab:65:f8:a0:26:69:3f:e0:54:ff:24:8f:b7:ce:9b:
         bc:dc:8a:a7:7d:47:86:bd:af:e2:06:09:ac:93:be:c3:3d:fa:
         43:db:54:11:35:ba:2d:8c:e7:28:6f:09:f9:98:bc:dd:ec:42:
         75:94:9c:10:a4:81:60:fc:df:a8:a9:ba:e3:ee:4b:c3:ba:1f:
         b8:b0:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:59:05 2026 by rpki-client