Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa
File:                     d0201ae9-7b85-4c12-b337-47ed3ede1720.roa (raw, json)
Hash identifier:          kSkFRl3eRyix+Ql9gfFe2EgG6tqmOEzPN/sIFp2NLro=
Subject key identifier:   6A:2F:67:7B:90:A9:56:BB:E7:3B:62:7F:12:A7:17:F4:FE:7C:6E:72
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3DAEC2FAC204CEB2C6B4568D51F885673C555840
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa
Signing time:             Tue 19 May 2026 03:21:46 +0000
ROA not before:           Tue 19 May 2026 03:21:46 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.101.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:c2:fa:c2:04:ce:b2:c6:b4:56:8d:51:f8:85:67:3c:55:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 03:21:46 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=9ddca19891904976dd699bc4558493f07ab6c07d0b1d8351693be665311129a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:52:fa:8a:58:99:b5:e5:d8:c8:44:a0:d4:
                    8c:c3:2b:62:da:bd:40:ff:57:f4:ac:d9:11:5c:fe:
                    fa:09:16:9d:b0:74:7b:e0:4d:e8:b9:27:79:07:e6:
                    d4:57:31:98:99:11:8b:b7:cf:43:e5:9b:8d:14:75:
                    7a:55:c3:ef:1a:19:19:7b:2a:d9:80:51:76:11:7d:
                    69:4c:71:d8:13:aa:19:62:2a:10:c3:dd:55:83:35:
                    00:29:30:7b:06:3a:6a:1f:99:2e:ec:44:60:ea:f9:
                    9f:a1:34:2a:ec:6e:b8:b7:89:86:9c:b1:b6:b7:44:
                    5d:72:f2:c8:9b:df:24:54:ab:4e:fc:11:42:38:13:
                    4a:d3:ca:97:7c:90:79:f1:b8:46:0f:9c:e1:b4:b6:
                    d4:4e:9b:67:ad:c4:77:19:39:e0:cd:1b:d2:dc:f6:
                    62:b1:23:e7:83:5c:ed:a2:34:70:2f:c9:16:5b:d1:
                    50:67:3f:00:84:3a:19:83:92:f2:8a:fe:77:ff:1c:
                    6d:5c:51:eb:5f:a3:8c:62:f0:ce:7d:68:2e:87:87:
                    74:11:28:92:d1:ed:21:cc:46:0e:61:a5:f6:fd:82:
                    e8:a5:8e:94:4d:2b:96:a0:0f:62:34:e3:58:a1:95:
                    ae:44:08:47:3c:38:06:98:34:61:71:2b:8d:2d:3f:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:67:7B:90:A9:56:BB:E7:3B:62:7F:12:A7:17:F4:FE:7C:6E:72
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.101.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:a1:48:38:fc:aa:58:59:1e:5e:c1:23:3a:14:6f:db:ba:
         d8:2a:01:ca:cf:69:ed:e2:b0:48:ad:09:47:4c:db:15:18:82:
         85:71:da:54:95:8c:50:4f:3a:df:0d:9f:81:a8:17:fe:f9:c9:
         2a:d9:09:4c:f5:eb:89:d7:bf:d7:26:27:76:20:42:af:83:eb:
         b8:28:2e:1c:7c:9e:b6:bd:97:1b:20:97:0b:0f:29:0f:13:97:
         f8:b6:05:3e:a2:2d:1f:13:b7:46:33:c8:e3:5d:72:c1:47:f6:
         21:33:5f:dd:86:d0:c9:81:8f:74:ab:f0:30:10:2f:d7:2e:c8:
         34:4f:87:9f:0e:43:6e:ec:5f:dd:c8:05:d1:85:59:a3:b4:bb:
         91:ff:5d:e3:1d:c1:1a:9f:54:f9:9f:66:cd:ef:44:c4:5c:ad:
         0c:cd:cd:ac:a5:f2:1e:65:e2:2a:e0:a5:98:7a:ed:1e:da:56:
         88:9f:e8:09:b7:81:9e:f3:e1:b6:91:f2:aa:58:72:86:39:dc:
         5e:23:06:0f:7c:b4:47:1b:66:1b:53:fe:f9:ac:13:35:ea:e9:
         0a:66:fb:86:e9:d6:ed:9f:c5:5c:5c:ad:06:df:d0:0e:1f:5b:
         64:86:0f:46:13:b2:6c:3a:3c:40:e7:a6:fa:67:33:f3:06:a5:
         cb:7b:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:00:18 2026 by rpki-client