Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa
File:                     cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa (raw, json)
Hash identifier:          19+a44yM0SWa+TkiDh1PNMvn5G/7+Gn01oh3Cy/cacg=
Subject key identifier:   CE:1A:76:18:BF:D2:2D:5A:F5:3D:16:57:73:6D:71:7D:BD:08:3F:0D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       49DE58C4EECA0680FED7EBAD6D53891E7556521F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa
Signing time:             Tue 19 May 2026 01:10:53 +0000
ROA not before:           Tue 19 May 2026 01:10:53 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        158.141.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:58:c4:ee:ca:06:80:fe:d7:eb:ad:6d:53:89:1e:75:56:52:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 01:10:53 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=9730eb3c45c4245654c3bbbe773218b5c923b0608c07841718957320436c7876, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:e4:bc:bf:23:6b:ce:ef:02:d1:f5:0a:1e:
                    06:91:32:f5:dc:37:f6:12:cc:5b:28:e9:f7:9c:b6:
                    b2:0e:55:61:25:f7:47:04:cb:cc:fb:65:b0:8c:c6:
                    95:b7:6b:db:45:f6:8e:ad:6a:4e:b1:f1:3b:ba:8d:
                    23:82:2c:31:f4:49:be:9b:d5:be:07:0c:d7:f7:b3:
                    ec:87:a8:2c:7b:e7:c6:60:e7:33:df:8e:4d:63:cc:
                    52:01:25:af:86:98:d4:a4:20:39:3b:28:cb:d1:d9:
                    f7:ac:cb:e7:86:5f:b8:c0:cd:38:8d:25:89:4b:77:
                    85:77:22:2e:44:17:f4:97:fe:c4:30:da:eb:9b:64:
                    81:10:c6:8a:50:de:e3:f2:ad:50:6a:30:f0:b5:a7:
                    dd:09:9b:8a:c9:dc:43:7e:d8:cd:0c:8a:ff:b7:c9:
                    4b:37:8f:bf:66:7e:8a:87:35:86:f7:9d:ab:35:3a:
                    ba:6e:43:af:76:f1:96:e9:eb:7c:78:a5:b7:0b:9c:
                    b6:ee:e2:91:91:d9:d5:ac:59:30:d3:02:01:08:ce:
                    c8:76:f9:33:16:99:63:ff:ab:6f:53:2e:66:06:45:
                    d0:2e:37:84:7f:c9:3b:ed:0d:f6:b2:00:7b:29:d5:
                    a8:b8:ca:90:11:74:d5:bf:73:10:60:52:90:8c:17:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:76:18:BF:D2:2D:5A:F5:3D:16:57:73:6D:71:7D:BD:08:3F:0D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:a5:bb:04:30:c4:12:b2:75:e4:ee:23:96:b7:7b:96:b0:
         55:fd:91:54:18:b5:ba:7d:c0:e4:0c:73:82:c3:18:92:c1:3a:
         d0:d4:fe:45:2b:1f:6a:89:f7:c4:09:24:f1:16:96:25:c5:a8:
         a6:16:03:9f:ac:3e:c0:f6:37:44:ec:49:83:3d:57:49:db:ad:
         c2:ba:e9:ad:5a:fb:35:1f:b0:94:60:1a:1b:df:43:66:51:67:
         77:1f:66:97:7f:1d:4a:8b:9d:e0:a8:56:a0:91:fc:8d:fd:61:
         f2:d8:96:4a:55:6c:67:43:91:28:b4:6d:8f:d5:53:2c:e9:83:
         e7:37:56:a5:f2:5e:b2:42:d7:20:95:ce:d5:06:cd:7e:fc:31:
         0f:ab:08:07:87:67:e6:ac:b3:76:ed:48:35:6d:b5:08:e0:a0:
         d2:0c:c8:d4:ff:08:34:11:85:9f:e8:96:91:4f:7a:55:39:5c:
         9e:4e:9f:f0:c1:a1:45:b5:55:27:9a:73:84:fa:8f:2d:34:a5:
         53:76:ba:45:da:85:fe:8a:17:af:c6:9d:1e:7f:3a:88:b3:5c:
         5d:22:e6:e0:43:5a:a2:7a:60:40:40:29:ac:a3:a3:60:8a:75:
         c9:53:89:dd:db:b7:94:d1:99:4c:94:cc:90:21:d7:fd:12:c6:
         e8:77:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:41 2026 by rpki-client