Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa
File:                     6d14ed34-613c-490b-9514-4f4d19486a18.roa (raw, json)
Hash identifier:          6BSYFE4fqocO9seveL4k0+uOW/NbnOFzxJ2oRkVKpeQ=
Subject key identifier:   EA:BC:D3:98:7D:3E:AA:00:8B:52:C5:00:44:D7:9E:52:B5:6D:F3:7E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4AD3873ED4ABCDD75140425B7504D1745B4B0292
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa
Signing time:             Thu 15 Oct 2026 02:11:16 +0000
ROA not before:           Thu 15 Oct 2026 02:11:16 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        52.70.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d3:87:3e:d4:ab:cd:d7:51:40:42:5b:75:04:d1:74:5b:4b:02:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 02:11:16 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=12c1ef03e244db96cad8855c1082c9a72afcc287a73fe45e0189e1e4b3074741, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:fe:78:94:3a:85:53:b2:fb:d1:4f:65:13:
                    eb:a1:ea:96:2c:be:11:4a:6d:db:fa:d0:26:d4:2c:
                    c0:6e:85:2c:41:5d:64:e3:ac:69:75:71:53:be:53:
                    f5:5f:d2:2f:db:2a:a0:4f:a5:1a:1d:42:42:cb:ef:
                    81:fd:5a:87:86:2c:0b:43:f4:3e:8b:37:cc:e6:7f:
                    c8:6e:6f:2a:cc:3c:ba:45:7b:9f:a4:1d:99:55:48:
                    35:21:b2:57:d7:71:a9:6c:73:d5:60:e3:fc:b1:bd:
                    8a:41:23:03:0c:93:8c:31:e3:21:74:98:f9:bf:50:
                    29:4d:e7:6b:55:70:6b:2e:8e:72:05:90:38:25:43:
                    74:29:45:4f:e0:6f:0d:02:1d:ca:e4:9c:7c:92:02:
                    6d:e3:99:04:dd:f7:79:1b:cb:7b:5f:05:63:2d:bb:
                    fc:f1:dc:d2:6e:00:0c:d4:5e:d4:04:bf:b6:af:4a:
                    34:fd:e9:19:94:a5:4e:4a:11:16:3e:80:5e:d8:e2:
                    be:04:41:f2:07:9e:7d:6b:0c:b0:5b:50:79:f5:59:
                    20:a2:aa:ec:20:76:b5:5b:30:48:a9:f1:c6:74:4b:
                    38:11:7f:14:19:ec:28:a4:d0:2b:3a:d2:89:f4:43:
                    53:4c:0a:be:07:86:51:38:2a:45:bd:67:30:ad:56:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:D3:98:7D:3E:AA:00:8B:52:C5:00:44:D7:9E:52:B5:6D:F3:7E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         88:11:3a:20:e1:05:88:86:1d:3e:cf:b8:13:9f:13:1c:4b:43:
         8e:71:87:3c:7a:da:f3:e6:39:cb:a8:d9:f1:2b:5f:fc:ac:43:
         a9:e2:97:54:a2:09:f5:e3:bd:78:c8:17:39:c5:f9:87:e4:ca:
         a5:56:50:84:8f:47:be:34:96:aa:a4:49:5c:79:61:f0:fa:c5:
         2a:6c:c8:07:84:69:8e:10:cb:fa:d1:28:92:9f:f0:6a:68:45:
         c8:42:c9:3e:e4:93:41:cd:09:61:62:d7:41:43:93:7f:dd:38:
         95:5e:c8:d5:ad:fd:69:e8:11:41:f3:86:71:3a:b3:26:2a:2f:
         3b:f6:d1:13:15:ae:b9:e1:6e:f6:ae:70:44:46:ab:d9:6b:9f:
         83:40:77:b7:4c:5d:04:90:15:89:fe:e5:ae:02:40:9b:a1:e0:
         f1:47:95:d8:b1:cd:c0:ca:b1:f7:5c:a8:d6:67:96:06:e7:92:
         53:8d:24:aa:c9:ac:a1:8f:e2:f1:d6:66:13:dd:9c:d0:75:ee:
         10:93:fc:0b:bf:32:fa:bd:f7:c5:25:73:68:55:47:94:13:db:
         34:b1:6c:e8:ec:c1:b5:e6:b0:38:12:1a:65:86:f1:b2:5c:fe:
         6c:e4:aa:90:a2:00:e0:c6:d4:da:a2:f2:3f:61:de:c9:f1:2f:
         60:e9:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:04:19 2026 by rpki-client