Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/594796ff-ae5c-472b-aa7e-d30961c2e6ff.roa
File:                     594796ff-ae5c-472b-aa7e-d30961c2e6ff.roa (raw, json)
Hash identifier:          CHzptG7zjjX8h/ly6EaRK866KYqUUVQdM/tUEDq0V3A=
Subject key identifier:   65:41:F1:EE:37:0D:27:59:0E:F8:7B:58:CD:F9:5F:4B:16:EE:83:E0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6792CE8359A12C4C4EE428993C5B64D37F5D3B2B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/594796ff-ae5c-472b-aa7e-d30961c2e6ff.roa
Signing time:             Thu 14 May 2026 01:11:28 +0000
ROA not before:           Thu 14 May 2026 01:11:28 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.68.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:92:ce:83:59:a1:2c:4c:4e:e4:28:99:3c:5b:64:d3:7f:5d:3b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 01:11:28 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=50b66823d6ec5bf8842807fc302840c165711d27bb42f8a4a3b2ae27cdff8e5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:eb:58:b1:d3:39:1c:95:18:f9:a2:8e:5f:
                    24:9a:99:45:fa:f9:30:97:34:a4:a8:8f:8d:ef:23:
                    06:7e:d7:3a:93:63:96:e9:5a:f2:2f:09:82:84:fa:
                    43:64:e1:f5:78:a1:f2:05:a2:2d:db:02:c1:40:c3:
                    bd:d5:9a:56:8f:89:b1:34:09:2d:53:8a:6b:e9:77:
                    ac:80:8e:ba:1f:25:ea:5a:d5:2a:ee:5e:b8:fa:d1:
                    cd:6e:6b:f1:0a:9f:fd:95:68:e8:7c:3d:f6:70:8a:
                    34:6b:81:9a:30:d1:fd:5a:23:6a:6e:90:ec:25:20:
                    ca:74:f7:61:9c:c6:68:e8:1e:91:21:22:0a:1a:a6:
                    dc:6c:77:b0:0f:4e:68:51:64:ea:fa:35:16:b2:85:
                    32:05:08:c7:45:6b:7a:43:68:70:ab:84:57:7e:fe:
                    f7:75:59:0f:28:98:5e:f8:6f:0a:90:6c:1f:44:90:
                    2b:bd:e8:4f:6f:32:26:f5:9f:cc:a0:d4:72:a1:0d:
                    74:65:65:b3:2f:0b:5d:fb:a3:6d:89:46:3a:a3:97:
                    d4:77:a0:7f:bb:0e:8f:19:33:85:ac:bd:c6:9b:03:
                    18:4a:bd:84:70:55:3a:34:34:3f:74:14:fc:c8:ac:
                    eb:fa:ab:b7:39:21:b9:1f:81:ef:23:a6:ed:75:df:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:F1:EE:37:0D:27:59:0E:F8:7B:58:CD:F9:5F:4B:16:EE:83:E0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/594796ff-ae5c-472b-aa7e-d30961c2e6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:c8:bb:9e:be:37:75:5d:e1:f7:d6:9c:4e:7e:cb:5b:b4:
         1a:bb:94:01:3e:a7:d6:21:79:35:4e:f4:cd:3a:a2:9f:f8:d8:
         00:7a:50:c8:d5:91:c4:e2:e3:57:cf:b5:7c:d4:6d:c0:b1:8c:
         4f:f1:78:1d:88:fe:ce:c2:44:11:20:98:b5:68:3c:8a:94:1c:
         f2:98:af:7b:47:6e:13:6a:fd:3c:cf:64:26:31:e2:8e:0c:97:
         ee:a5:17:14:d3:84:8e:c1:1f:1c:8d:fd:c8:99:c4:21:1d:6a:
         96:f8:f3:10:c2:d9:a0:d3:73:90:3a:05:ba:b9:c0:3c:21:0a:
         95:43:3d:32:17:90:37:b2:5a:00:12:32:b9:3f:c2:d8:c5:7c:
         05:17:41:27:3c:17:b8:6a:53:f8:8b:e4:f5:3c:3b:1e:4c:c3:
         e0:1a:2d:c6:05:f1:50:6c:20:90:b7:af:2d:dd:81:cb:ad:ae:
         8d:22:1f:80:5c:cb:ee:60:4d:37:0a:78:7e:81:95:c8:af:9f:
         76:24:53:b6:c5:75:5e:63:4f:50:d2:67:48:7c:05:8a:c7:49:
         bd:99:3b:8b:83:21:7a:73:0d:12:13:80:24:65:db:4a:d2:b9:
         10:14:b7:d1:b1:af:78:27:18:9a:47:31:93:32:d7:8e:73:1d:
         01:91:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:44 2026 by rpki-client