Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa
File:                     79caf66b-d602-40c0-95f1-2957236e21ed.roa (raw, json)
Hash identifier:          5KElYLEiwVU3Oad4y05njzh9CZ6e9mXNaMldPJYcVAk=
Subject key identifier:   93:99:B0:C7:AF:FD:57:47:93:CC:C4:F7:A3:6F:A9:81:69:95:7A:98
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       526911C282E63D1E99DF5C1CC767AE9F2DFE5EDE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa
Signing time:             Wed 05 Aug 2026 01:00:09 +0000
ROA not before:           Wed 05 Aug 2026 01:00:09 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.69.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:69:11:c2:82:e6:3d:1e:99:df:5c:1c:c7:67:ae:9f:2d:fe:5e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  5 01:00:09 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=bd2ead48db45bd3b18ea50648819e4a52d62b6b642069a48a29929c06b54141e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:26:d1:64:fa:a0:25:72:65:1f:e1:a9:81:
                    91:2c:70:2c:b2:92:04:ce:c0:dc:79:21:37:a5:3f:
                    a3:82:7f:c1:25:9e:8f:6f:5b:b6:26:63:78:ab:0a:
                    30:d2:a7:91:9f:24:9f:26:c6:13:c6:85:e2:ba:d0:
                    af:8c:83:eb:ca:74:92:79:53:7e:c3:74:d9:15:09:
                    39:5f:b3:cc:46:f7:84:05:ef:d6:88:1d:4d:ce:5c:
                    7f:2c:a4:b3:7d:2b:42:df:46:a0:f1:46:2b:45:5c:
                    3b:78:4f:3f:8b:62:fd:86:1a:bd:ac:cf:67:66:1c:
                    b4:5b:19:8e:98:5e:f4:6c:61:77:7f:c6:dd:3c:c7:
                    d4:4d:28:63:0d:71:d4:45:06:e4:20:e4:65:1f:3d:
                    3a:a0:d3:d9:a2:3c:44:2e:b5:1f:dc:6b:31:6f:a1:
                    13:b8:45:ca:15:79:ae:56:23:f0:bc:a5:e5:06:22:
                    b4:01:64:73:a5:f7:a4:7f:3e:88:3a:9a:f0:b7:c1:
                    f1:24:24:30:54:74:ad:56:b5:fa:c6:29:2e:70:65:
                    15:ee:9a:a6:5a:ee:0a:ac:5e:16:6a:51:8f:6b:82:
                    69:7c:03:9c:b8:36:05:0d:fd:a9:a7:f9:23:d6:a5:
                    ee:1d:ad:2a:5a:75:11:7d:89:35:19:e6:be:3b:85:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:B0:C7:AF:FD:57:47:93:CC:C4:F7:A3:6F:A9:81:69:95:7A:98
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79caf66b-d602-40c0-95f1-2957236e21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:13:c8:51:5c:db:d7:c9:49:5e:c1:ce:cd:db:6a:b3:59:
         15:9f:d7:9d:1e:b3:56:32:5d:83:01:a1:97:fd:f1:03:a9:a2:
         2f:1d:a7:36:2c:20:d0:23:52:7c:49:fb:ac:bc:d4:d3:17:b7:
         15:58:d5:50:b2:90:ee:12:4e:bd:4e:89:ab:67:4a:f7:b2:58:
         fe:5a:a9:d1:6e:f9:78:14:aa:90:5b:73:07:7e:56:31:f0:4f:
         cf:d4:12:13:5e:65:4d:ca:ff:8a:1c:74:b5:91:e2:47:c8:68:
         b3:6f:ed:b9:5d:2d:5a:da:69:1d:57:42:9d:6b:a4:98:24:2d:
         d6:50:31:99:1f:bb:16:c9:0a:0e:7b:dc:9a:c3:1b:c1:09:23:
         79:99:80:fa:a0:e6:89:b1:5f:4f:84:d5:35:64:ae:91:01:15:
         44:ae:6d:2e:c1:13:ed:d5:40:9f:29:a1:21:a1:20:1b:6b:5e:
         f4:30:39:1c:b8:dc:83:10:c5:99:59:63:02:79:32:21:3a:7d:
         25:60:18:32:f7:e9:7c:2b:57:4e:23:62:86:5e:7d:ff:cb:e4:
         3c:11:23:78:d7:84:1a:3f:73:c9:76:26:18:58:0b:91:36:27:
         f6:6f:8c:16:9a:94:9a:15:b3:6d:af:5b:5d:12:dc:b0:59:0f:
         77:61:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:43:54 2026 by rpki-client