Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/801a14b9-e343-438c-850d-625595380228.roa
File:                     801a14b9-e343-438c-850d-625595380228.roa (raw, json)
Hash identifier:          hTMzlceNeKcdL3t2sLE4L7mfUlq1DO0+QMLUCvduJi8=
Subject key identifier:   17:F7:17:DC:CE:A7:A5:59:6E:6C:F5:0F:39:C3:0A:81:4E:59:94:73
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3695B7527B008A7C4D5969716597BCC5E3E82350
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/801a14b9-e343-438c-850d-625595380228.roa
Signing time:             Sun 11 Oct 2026 14:07:10 +0000
ROA not before:           Sun 11 Oct 2026 14:07:10 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        3.2.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:95:b7:52:7b:00:8a:7c:4d:59:69:71:65:97:bc:c5:e3:e8:23:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 11 14:07:10 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=b7e67da655658bf97325c3cd5461064650931960d6b5b5524fc98711605ef84f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:18:b3:01:40:54:86:b0:34:a3:2d:bc:fa:
                    82:ec:11:df:e2:89:06:f3:96:91:b0:cf:6a:9b:f3:
                    49:ee:d5:1b:19:99:54:17:0f:ce:9b:3d:d8:0a:c3:
                    68:87:8e:78:e8:09:6a:48:41:13:1a:e3:9c:c0:00:
                    b9:e2:b1:ba:f3:5c:9c:ec:f1:24:ed:43:a0:12:dd:
                    a8:fb:a6:91:08:18:50:83:c0:ca:e5:8d:dc:3a:3b:
                    53:49:1d:9f:3a:60:f8:7b:da:cf:ef:fb:5d:60:12:
                    33:00:fa:04:04:01:b7:e7:65:d6:a4:b3:f9:8c:9b:
                    fa:ec:2f:9e:46:54:ee:a8:a3:34:d3:88:7e:00:51:
                    45:2a:e2:4d:8d:92:43:58:21:89:34:18:93:1f:90:
                    2d:34:26:50:eb:b6:69:37:15:73:0b:1f:0f:cb:c3:
                    fb:5a:10:19:12:b5:4c:fc:f0:de:f9:c9:2e:77:c5:
                    65:f5:66:1b:f7:0b:2f:0c:48:dd:0a:61:af:79:73:
                    d1:94:45:2c:6a:7f:1e:cd:d4:6c:40:03:eb:62:87:
                    c4:00:25:39:10:c6:7d:78:0c:92:65:10:5b:70:15:
                    70:14:f9:01:ba:3a:85:b1:db:8d:a9:c2:9d:bf:6b:
                    de:a4:c9:95:19:9a:ff:f9:d1:65:b5:88:f5:72:d8:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F7:17:DC:CE:A7:A5:59:6E:6C:F5:0F:39:C3:0A:81:4E:59:94:73
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/801a14b9-e343-438c-850d-625595380228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:a5:c3:48:a1:64:af:20:76:5a:78:2e:86:34:5f:48:6c:
         b1:a1:10:ae:3e:51:74:5e:2e:27:d9:14:c3:4f:17:af:2d:73:
         23:a5:1b:e9:6d:fc:5d:53:4d:0a:e9:d5:a8:6a:8c:9a:8c:28:
         92:99:84:f6:de:83:60:ad:22:1b:b7:2c:81:79:48:0f:2c:2a:
         1e:8e:b2:52:41:c6:ac:ee:85:98:e9:8e:20:13:38:16:a5:30:
         5f:e9:98:0b:52:f0:99:83:9d:67:f2:34:c0:76:d6:8d:76:ff:
         40:f3:6b:cc:21:28:5a:75:fe:df:0f:3c:36:59:25:9e:58:46:
         a9:48:a0:32:d8:10:51:ac:35:f6:23:3e:c9:84:23:a3:6d:56:
         27:de:d7:47:cc:b5:e8:59:b8:5d:f2:13:0f:d0:7f:2b:1b:33:
         16:4f:be:73:fd:8f:a5:10:3c:7a:8b:84:86:6b:c4:60:9b:64:
         95:2a:60:2f:24:e5:84:57:eb:71:fd:b4:95:0c:65:3e:83:4e:
         48:88:29:f3:90:3f:0d:d9:7c:e9:a7:c3:a9:2f:d0:93:16:8a:
         87:4e:3a:87:d5:78:8a:4e:6e:ea:ab:7e:f2:a4:12:c6:fa:d2:
         4e:d5:73:aa:fb:0e:6d:46:32:61:32:c5:05:c9:a3:55:7b:aa:
         05:66:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:38:36 2026 by rpki-client