Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa
File:                     5448a2b7-3770-48bc-856f-a34d7d51e778.roa (raw, json)
Hash identifier:          HRPWmqP0I7f65nItMVn9iW9iUV/Ct5SAGy4UvB5FzpY=
Subject key identifier:   60:41:5D:90:46:07:97:94:D0:F9:93:E6:7E:C4:36:15:09:E1:1C:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A959D2AC16BF008C3F62B38157AACDBB462DD49
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa
Signing time:             Sun 11 Oct 2026 14:20:11 +0000
ROA not before:           Sun 11 Oct 2026 14:20:11 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        3.102.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:9d:2a:c1:6b:f0:08:c3:f6:2b:38:15:7a:ac:db:b4:62:dd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 11 14:20:11 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=ee19ae0d9e535d4c6e99cf1228dc74f2fbf036516db317182deaef810e006308, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:c9:66:5c:da:f2:ed:24:1d:98:3c:e5:4d:
                    c4:50:9c:5c:ea:4a:f0:48:78:de:8b:84:fb:bf:77:
                    bc:51:05:28:ce:58:a0:d9:59:c0:fb:81:9a:e7:97:
                    28:40:62:56:45:a3:0d:c2:27:11:c4:fe:63:f6:5c:
                    6e:27:e9:2d:d9:3e:ee:24:87:d0:b7:ff:ed:46:1e:
                    ee:bd:e6:34:6c:7d:06:3c:c0:fc:c5:7e:f4:4f:8b:
                    57:52:7e:4f:6f:c9:5c:ee:19:f4:78:92:d9:9b:29:
                    b9:8c:4c:55:ff:07:89:11:00:4e:84:47:64:8c:43:
                    6f:5e:b0:0c:6f:31:fd:f0:bb:d4:59:f5:ea:b4:0c:
                    0c:47:b2:8f:e3:3a:1c:c1:e8:07:3a:c5:a9:03:a4:
                    a0:35:69:b7:32:0b:a0:f1:d6:8c:13:ed:9f:dd:24:
                    5a:08:7d:70:4a:83:c1:df:02:dc:90:39:13:2a:97:
                    03:6f:40:55:22:05:66:b1:8b:b4:44:93:23:31:b6:
                    cc:95:f1:26:03:e9:49:d3:64:db:c4:a4:5d:ac:51:
                    69:76:19:80:b7:50:ac:54:4e:4e:60:45:72:5b:1f:
                    d5:73:49:16:f9:5b:0d:05:cb:c6:9e:0b:ce:02:2d:
                    a1:c8:74:fd:3f:e1:f3:2b:90:ee:67:26:56:f0:d5:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:5D:90:46:07:97:94:D0:F9:93:E6:7E:C4:36:15:09:E1:1C:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.102.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:b6:24:d4:c4:04:21:e7:23:da:1a:24:e5:56:af:3f:e0:
         92:d1:51:f1:a6:f7:91:47:47:64:11:c1:48:2a:40:d2:df:d7:
         8f:36:8b:2d:56:17:14:9a:30:74:40:c6:2d:1a:39:5d:af:f0:
         e9:0f:fa:1a:57:a9:c1:14:35:ad:ad:e3:71:1d:9f:58:12:2b:
         f8:8b:b0:4e:49:73:76:4f:fb:63:59:ca:52:67:53:da:8d:2d:
         61:ec:cb:d9:60:ce:8d:38:f9:14:7f:de:ea:8c:87:c7:b4:27:
         08:ba:5e:5f:8c:12:8e:31:bb:07:97:df:06:31:6d:35:2b:a2:
         ca:76:99:a8:5d:f2:67:b9:80:f1:03:43:f0:e0:be:57:74:e3:
         bb:34:c1:4e:28:75:40:12:81:5b:f2:2e:98:da:36:44:56:55:
         8c:3b:48:5e:99:6b:2e:db:e9:00:5c:5e:02:cd:e1:78:32:eb:
         b4:07:f1:7c:f8:69:2b:9c:87:78:b2:40:b8:b4:aa:87:12:20:
         49:2c:f5:a0:34:bf:93:95:8d:1f:56:57:b1:48:e8:b5:40:64:
         87:4b:83:0c:27:64:0d:02:00:74:c0:93:4e:d5:d6:06:b0:88:
         75:c0:6a:16:11:b1:14:4a:2e:04:1a:eb:64:ce:4b:3e:8a:9c:
         0c:3e:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:52:23 2026 by rpki-client