Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7804a89b-a41e-4a49-a3dd-6f22e7714556.roa
File:                     7804a89b-a41e-4a49-a3dd-6f22e7714556.roa (raw, json)
Hash identifier:          fRw+jxiWHa5d0AoEY73BLyBGgzti1yqyIwNc1+EJIZw=
Subject key identifier:   C9:A2:3B:D1:90:9B:EE:B6:6B:13:9D:44:8E:E0:CA:FF:77:00:E1:A7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E83220D41FB61601F2376F5CE535E154A90DFF7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7804a89b-a41e-4a49-a3dd-6f22e7714556.roa
Signing time:             Thu 14 May 2026 00:30:49 +0000
ROA not before:           Thu 14 May 2026 00:30:49 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:83:22:0d:41:fb:61:60:1f:23:76:f5:ce:53:5e:15:4a:90:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 00:30:49 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=1c8bc4101de09f67f49d542fec33951a1efd4fd6498f820e1a19f8825cd638eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:69:f4:27:de:39:70:70:e6:c8:d6:bd:75:
                    39:7e:11:bd:c4:d2:dd:fb:50:70:2c:31:62:f1:80:
                    ce:af:cd:f1:49:e2:6f:cd:57:74:06:5c:8d:24:5c:
                    ef:e3:77:b0:4b:2f:69:5d:43:4e:cc:74:80:4c:3d:
                    59:4e:3b:de:86:75:6c:ca:ee:e2:5c:d0:75:43:04:
                    d0:ec:25:2b:c2:bb:a6:e4:88:5c:8a:85:4f:31:16:
                    55:43:0d:e4:aa:b4:1f:63:30:32:8e:1c:a1:86:1e:
                    05:7f:35:49:c3:24:2b:09:f6:7e:2c:d0:4a:61:f8:
                    18:02:c5:c0:13:de:dc:4b:06:97:e1:dd:7b:73:55:
                    d7:06:00:fb:b9:85:97:f6:6b:47:58:87:ce:bc:5e:
                    35:8b:df:06:3a:38:ca:c4:3f:17:d3:ac:fa:c0:db:
                    87:40:79:2b:0f:4f:09:9c:35:2b:ee:ad:44:94:7f:
                    73:7c:07:a2:5d:80:e0:5b:5b:72:84:ad:f1:09:42:
                    58:71:db:85:39:31:d4:4f:6c:e4:a4:e5:41:19:73:
                    cf:39:8d:9f:19:33:a7:3c:b4:1e:2d:89:2c:80:d7:
                    12:2f:f3:b2:f7:28:c6:68:11:51:3b:e8:21:a9:23:
                    bd:86:43:fe:c9:9a:60:b8:0b:66:3c:a3:9a:35:8f:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:3B:D1:90:9B:EE:B6:6B:13:9D:44:8E:E0:CA:FF:77:00:E1:A7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7804a89b-a41e-4a49-a3dd-6f22e7714556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:7d:6e:11:03:12:6e:8f:7b:93:ba:86:93:f7:1d:fa:47:
         2b:f7:ab:14:72:c5:65:8d:ed:ba:b4:a7:f1:51:54:ff:fb:0d:
         66:3a:f9:eb:c5:cf:a0:83:3b:b3:8c:dd:9f:de:6a:00:df:63:
         da:0b:23:1b:36:ba:89:ab:12:1c:f5:bd:ec:2c:e7:55:19:03:
         29:47:15:2b:16:25:28:b6:3c:a0:b8:eb:89:ae:5a:55:f4:d1:
         7f:c1:98:f9:80:8a:b8:f2:4b:31:b6:34:38:5c:6b:e5:f8:d8:
         f1:a2:70:47:19:cc:1a:50:89:f1:bc:20:55:8a:77:71:c5:dd:
         ea:57:5a:96:d5:cc:59:62:0f:1c:e7:17:6b:3b:52:0b:b8:9a:
         f4:88:3c:6d:52:68:08:49:b3:40:89:a5:28:36:43:13:ed:9e:
         02:6d:36:e3:62:58:2a:73:b3:a6:b8:af:f9:bd:08:77:49:32:
         96:c7:d7:6e:49:24:6c:13:c7:d6:1e:27:ab:83:ef:0b:37:50:
         75:71:30:63:4c:e8:d7:48:43:3a:c8:59:b3:4c:4d:0a:6e:f4:
         d7:d0:ad:58:35:f2:ef:60:00:c9:e4:62:00:0b:72:7c:d8:7e:
         be:c3:cc:15:c8:8c:42:78:c4:d4:3a:4c:fc:6f:0f:3d:06:5f:
         a5:b2:33:b3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPoMiDUH7YWAfI3b1zlNeFUqQ3/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDAzMDQ5WhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzhiYzQxMDFkZTA5ZjY3ZjQ5ZDU0MmZlYzMzOTUxYTFl
ZmQ0ZmQ2NDk4ZjgyMGUxYTE5Zjg4MjVjZDYzOGViMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC27Gn0J945cHDmyNa9dTl+Eb3E0t37UHAsMWLxgM6vzfFJ
4m/NV3QGXI0kXO/jd7BLL2ldQ07MdIBMPVlOO96GdWzK7uJc0HVDBNDsJSvCu6bk
iFyKhU8xFlVDDeSqtB9jMDKOHKGGHgV/NUnDJCsJ9n4s0Eph+BgCxcAT3txLBpfh
3XtzVdcGAPu5hZf2a0dYh868XjWL3wY6OMrEPxfTrPrA24dAeSsPTwmcNSvurUSU
f3N8B6JdgOBbW3KErfEJQlhx24U5MdRPbOSk5UEZc885jZ8ZM6c8tB4tiSyA1xIv
87L3KMZoEVE76CGpI72GQ/7JmmC4C2Y8o5o1j6+tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyaI70ZCb7rZrE51EjuDK/3cA4acwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc4MDRhODliLWE0MWUtNGE0OS1hM2RkLTZmMjJlNzcxNDU1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPnv4wDQYJKoZIhvcNAQELBQADggEBAE5MfW4RAxJuj3uTuoaT9x36Ryv3
qxRyxWWN7bq0p/FRVP/7DWY6+evFz6CDO7OM3Z/eagDfY9oLIxs2uomrEhz1vews
51UZAylHFSsWJSi2PKC464muWlX00X/BmPmAirjySzG2NDhca+X42PGicEcZzBpQ
ifG8IFWKd3HF3epXWpbVzFliDxznF2s7Ugu4mvSIPG1SaAhJs0CJpSg2QxPtngJt
NuNiWCpzs6a4r/m9CHdJMpbH125JJGwTx9YeJ6uD7ws3UHVxMGNM6NdIQzrIWbNM
TQpu9NfQrVg18u9gAMnkYgALcnzYfr7DzBXIjEJ4xNQ6TPxvDz0GX6WyM7M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:49:53 2026 by rpki-client