Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa
File:                     67f608cb-5ec5-4705-951e-e51e20a86d55.roa (raw, json)
Hash identifier:          9fKHUUEIy8zW3dXBZsHi0QNSN1ez9LRPfJWbbAFuAds=
Subject key identifier:   02:41:F2:FE:A6:36:8D:C4:76:3A:3C:E6:2F:27:CC:6A:AC:53:D0:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1BB402ACE3DDF62C13341B105B0CA0781EA55AB6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa
Signing time:             Thu 15 Oct 2026 01:31:07 +0000
ROA not before:           Thu 15 Oct 2026 01:31:07 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b4:02:ac:e3:dd:f6:2c:13:34:1b:10:5b:0c:a0:78:1e:a5:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 01:31:07 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=7b10bb35d5d80790ee66ca2b02154bac8f0002c4fbf30c214856e4f551f5af42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:d0:90:9b:65:e2:5e:64:98:36:c5:43:52:
                    d8:35:45:6a:1d:65:49:ca:96:ba:2a:cd:3e:17:93:
                    1d:93:e4:b3:ad:f2:12:90:07:4c:87:98:08:66:e7:
                    a7:95:cd:45:90:6f:3f:b0:c9:a9:56:25:7a:af:08:
                    3f:b7:7a:75:f2:06:73:0e:71:02:2c:7d:9e:fa:2b:
                    50:58:36:f9:6e:d9:1f:29:fe:52:94:0e:17:a0:6e:
                    c6:20:9d:fc:c5:56:38:f7:ef:ba:31:36:01:95:ab:
                    16:fe:5a:64:eb:cc:3b:27:10:02:dd:16:61:b9:aa:
                    e0:0f:58:b3:82:a3:34:10:3a:ec:d2:ca:83:86:26:
                    bc:89:de:4a:4b:ed:a7:5f:a0:b2:13:e4:a7:fc:0e:
                    01:a6:52:bd:0a:f5:48:06:2d:1a:6c:c1:a2:ce:5f:
                    1b:69:f5:86:46:17:d7:06:c4:f4:62:43:68:6f:88:
                    91:0f:9c:a7:5b:20:44:68:2f:34:c5:03:75:43:1f:
                    08:83:c8:4f:ff:30:df:3a:3a:d5:43:53:6e:24:72:
                    11:15:f5:f0:22:cb:bb:b5:4e:6c:6d:a3:ea:2b:5a:
                    a4:97:0f:f8:36:f8:97:78:99:0d:39:a2:02:30:b3:
                    7f:a2:ea:b4:62:2c:a3:52:d1:4c:6b:41:84:c9:45:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:F2:FE:A6:36:8D:C4:76:3A:3C:E6:2F:27:CC:6A:AC:53:D0:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67f608cb-5ec5-4705-951e-e51e20a86d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ef:95:80:47:fe:2b:e0:09:07:40:3d:e5:c4:a1:7f:b7:2e:
         36:30:78:3b:ab:fe:97:3c:bf:f4:aa:96:fe:f0:9f:bd:17:65:
         3f:32:e9:f3:41:7c:67:2a:40:76:6e:3d:f7:93:31:12:b5:c8:
         ec:7b:c4:07:fb:94:6c:1f:fe:1d:33:b3:c8:d2:47:8c:d6:9c:
         f1:7e:46:2e:39:a0:b4:a8:f5:f2:23:f5:90:ab:d2:f6:f6:83:
         89:24:e4:27:bf:e8:b1:11:ea:e7:ed:f4:b7:02:45:50:e2:9a:
         6b:6e:9b:6f:9f:38:2f:85:dd:d2:d0:d5:87:09:82:7a:63:1f:
         28:53:c4:92:c7:06:6d:17:f3:0b:0a:8e:f2:e1:00:28:0a:4e:
         ee:96:4a:11:f0:03:48:35:04:4e:b3:60:be:25:d8:57:12:1b:
         fe:c5:8b:83:68:42:2d:15:bb:a3:df:49:06:e2:f1:ef:b0:ba:
         cf:e3:05:e4:81:c1:7b:3b:0b:df:79:41:62:18:67:d6:6c:b6:
         73:8c:61:27:27:16:d1:d7:5c:ca:2c:19:7c:35:72:f5:a6:e5:
         28:bc:08:94:74:20:af:a7:8f:7e:f9:7b:ff:df:48:fc:da:bd:
         c6:05:8a:4e:b9:af:32:46:d3:99:6f:fb:0e:63:16:7a:db:17:
         58:e1:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:23 2026 by rpki-client