Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adf4ebc-bc11-42b2-95e4-666ff0e3393c.roa
File:                     6adf4ebc-bc11-42b2-95e4-666ff0e3393c.roa (raw, json)
Hash identifier:          E1x6JOCpk+OK38+m/DorOpY/CepuEXAZATKTdpWyRjw=
Subject key identifier:   A0:6B:DF:4F:A6:05:B4:02:7F:60:B1:EA:8F:F8:15:D3:B7:3C:79:05
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7B4C10ACB925B7818A7928F0C0AA977803558AA7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adf4ebc-bc11-42b2-95e4-666ff0e3393c.roa
Signing time:             Thu 14 May 2026 00:30:49 +0000
ROA not before:           Thu 14 May 2026 00:30:49 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:10:ac:b9:25:b7:81:8a:79:28:f0:c0:aa:97:78:03:55:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 00:30:49 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=a2e1d398c6656ce070861186e4ff84bea4fa7a22c7f8514ff2b54ecf1f97453a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:38:5f:1f:1c:cb:28:4b:e1:da:05:48:eb:
                    dd:01:da:3a:e7:8c:2f:8d:5b:bf:2a:64:90:e8:13:
                    77:75:86:b6:c7:fa:09:ed:c7:e4:28:29:5f:79:1d:
                    db:f2:a0:0f:02:d9:d1:e7:45:ec:fa:a8:df:4d:3d:
                    02:ad:d3:4b:67:55:cb:b0:58:e9:cd:a1:54:6d:11:
                    ce:8e:f8:ff:99:76:17:c6:99:dc:a7:68:27:2d:9e:
                    20:09:b5:15:df:e4:86:56:56:0e:e6:17:73:7b:e5:
                    3a:03:51:5a:77:28:0b:aa:ef:98:8e:fe:9a:ef:e2:
                    17:a3:60:fb:f4:d7:6e:b8:76:8c:e6:a1:eb:ec:d3:
                    59:e1:d9:0e:d9:f6:0a:88:8e:d7:9a:91:89:7f:9e:
                    e1:52:43:c9:03:d7:95:d7:3f:a6:3a:e5:3b:fc:5d:
                    7b:4c:2b:19:0f:4e:c0:fb:b3:ba:74:ce:fb:85:85:
                    a0:8f:ac:dd:d8:79:b9:3f:eb:58:12:80:81:ae:ce:
                    d2:8d:54:9f:2f:2a:87:94:0a:2a:48:ab:ed:5a:c8:
                    97:be:1b:a8:a7:b3:1d:04:91:18:cf:f1:7f:33:66:
                    e9:56:84:ce:a1:0c:68:00:c8:20:4b:1d:ab:d5:96:
                    5b:cb:cc:25:21:19:aa:b7:5a:3e:52:f7:07:d5:73:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:DF:4F:A6:05:B4:02:7F:60:B1:EA:8F:F8:15:D3:B7:3C:79:05
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6adf4ebc-bc11-42b2-95e4-666ff0e3393c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:60:22:32:e1:fc:26:f7:88:8a:a2:4f:93:ce:d4:f4:59:
         07:de:bd:76:45:9b:c6:81:93:ac:cf:a4:e2:36:87:ca:68:b3:
         0e:30:a7:3e:4d:26:67:a3:0d:19:b6:42:5c:df:18:d2:33:37:
         6a:3b:ee:d4:6c:50:b7:5a:d8:4b:57:77:ce:ea:40:7c:61:00:
         79:bd:51:98:89:f4:9b:8c:b1:f0:d7:d4:69:04:07:bb:46:b6:
         9c:40:be:f9:d4:31:79:3a:8a:57:8a:6d:dc:10:fc:3c:6b:bc:
         a1:06:70:4f:b9:13:47:6d:8a:f1:ea:2e:72:40:e5:f8:9c:6a:
         24:98:1f:2a:6a:0a:dc:30:04:bd:f1:65:8a:28:eb:28:16:4b:
         c8:6e:06:6d:95:5d:d3:0d:e3:19:9c:26:a7:74:e6:e2:aa:f5:
         6b:cf:28:2f:4b:ad:38:ed:38:1b:a1:ce:ec:40:52:d7:82:5d:
         4b:ea:a6:ba:56:b6:c0:99:27:60:5a:b9:93:1d:40:93:06:9b:
         f1:0b:8a:60:cd:ef:c1:b1:2c:6e:99:42:b3:ed:c6:78:18:75:
         52:f3:f3:ef:25:5f:19:f5:da:df:78:55:03:c0:6b:03:2e:b5:
         fc:50:63:86:30:4c:d3:1d:98:b4:db:d3:ce:a6:89:c5:3c:bd:
         5c:a3:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:17 2026 by rpki-client