Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa
File:                     8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa (raw, json)
Hash identifier:          wj6ZuUauXCoPVS9WKayhCpQJbdULbqlKl98bML6EhN4=
Subject key identifier:   25:5C:A4:67:58:D1:4C:85:72:21:73:B6:57:FF:C0:E2:1E:88:A6:CC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4D1DDF7090B833D1B40C35E4118F93862346E555
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa
Signing time:             Mon 27 Jul 2026 00:10:11 +0000
ROA not before:           Mon 27 Jul 2026 00:10:11 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.136.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:df:70:90:b8:33:d1:b4:0c:35:e4:11:8f:93:86:23:46:e5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 00:10:11 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=7cb283c65d5020623ae9e61e0a2ddddc2126765ca451f69b228350801e9140df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:6e:7c:37:3c:1a:35:54:54:d6:ce:d2:c9:
                    6b:e2:34:a9:18:28:88:09:6d:62:39:36:4b:a5:36:
                    5e:9f:ae:9e:cd:b5:37:5a:a9:53:c8:3a:9f:26:f0:
                    fc:39:ca:73:7b:e9:20:8e:53:f6:b4:9a:cc:e2:52:
                    e9:e6:ba:c6:30:af:81:4e:5b:6d:c4:15:c9:b2:29:
                    06:3d:ca:02:8d:23:99:76:91:d2:ef:09:b3:7b:6d:
                    68:49:d9:1d:b7:41:08:69:5d:02:8d:de:fd:4c:0c:
                    08:20:4c:3d:d0:53:54:7c:fe:b0:1e:bf:22:89:d5:
                    19:7c:6f:cf:2f:76:5b:5a:3a:75:52:96:1e:dc:1c:
                    c3:ce:77:85:bf:26:9b:c0:3b:83:f9:0e:b7:d1:ab:
                    4d:f5:83:18:c8:93:08:7e:24:98:2c:dc:77:5a:ef:
                    3c:e0:fd:78:20:83:73:b7:f0:0e:ae:9b:5a:fb:60:
                    c1:a4:0f:fd:b7:97:5f:8c:b3:f6:66:aa:b9:1e:f6:
                    cf:5f:7c:4f:0f:76:41:3c:f2:2d:45:9b:a5:51:13:
                    41:0f:a5:b8:1a:da:54:81:b0:cb:7d:f3:5e:1e:8e:
                    8d:3b:8b:8d:8a:4e:95:80:01:28:84:f5:af:3b:62:
                    f0:50:5b:ab:d2:17:83:19:61:3b:26:37:3f:bd:f6:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:A4:67:58:D1:4C:85:72:21:73:B6:57:FF:C0:E2:1E:88:A6:CC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.136.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:4b:aa:fd:29:b0:9b:46:11:26:88:92:f3:58:79:05:b8:
         4d:a8:9f:d9:89:39:82:66:20:14:a3:20:1d:29:78:62:49:ae:
         a1:84:24:55:43:90:3f:38:87:b0:0c:d2:f4:aa:ac:bb:9e:ab:
         59:93:d3:56:68:b6:fe:fd:a2:9f:a4:44:70:24:b3:84:ad:e5:
         b1:00:8d:0e:a2:a6:69:83:3e:2a:5d:4c:08:a8:c8:99:c0:c2:
         b2:e2:88:4c:91:73:36:f7:77:48:4c:72:c2:59:cd:a4:b7:36:
         21:25:9b:7b:39:86:5b:75:9b:5c:9a:40:a5:10:0f:6a:29:99:
         0c:57:76:57:7a:0c:f5:1a:11:44:7a:f1:94:0c:08:df:6d:72:
         43:3b:d8:66:4c:5d:0e:bf:4d:e9:ed:4e:de:cf:90:70:4c:97:
         49:9a:e6:5d:76:ee:23:61:e0:6e:a9:6d:d8:63:06:5f:da:7d:
         8d:29:b3:8a:df:c5:b1:64:e8:98:31:d2:e6:13:19:c7:24:d0:
         e4:e8:b6:bf:30:6b:8c:c1:5e:42:02:82:e3:a7:f3:3a:1f:99:
         3f:f1:30:3e:d4:a6:de:38:7c:97:8b:f2:8f:aa:3a:fd:9a:7e:
         c9:22:a0:b8:4c:0d:2c:b2:17:3d:ff:80:12:c4:ec:5e:da:a6:
         5a:b1:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:32 2026 by rpki-client