Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b76eb9-5ca9-456c-97c2-1fe70c19dde8.roa
File:                     d2b76eb9-5ca9-456c-97c2-1fe70c19dde8.roa (raw, json)
Hash identifier:          qiHp/FqY/eLjjMa5KMNtqNJ3toH/j36wBaks+9zyid0=
Subject key identifier:   8A:F3:28:5A:14:8E:BB:01:DF:A9:3E:59:89:81:68:37:0D:BA:05:AC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5BBEF86D7FABF7C31D4440E92E8A50D89B88C937
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b76eb9-5ca9-456c-97c2-1fe70c19dde8.roa
Signing time:             Sun 02 Aug 2026 00:41:03 +0000
ROA not before:           Sun 02 Aug 2026 00:41:03 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:be:f8:6d:7f:ab:f7:c3:1d:44:40:e9:2e:8a:50:d8:9b:88:c9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  2 00:41:03 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=ebaa53c327b2bc228c49ebd2bb51f979f17349a281d490516f07f8613d28a518, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c1:0b:b0:b9:28:72:26:0b:1b:bd:35:fe:e0:
                    ba:f1:f2:8a:64:78:d4:18:33:2a:55:d3:82:1a:f2:
                    71:9d:eb:e4:2b:56:db:d0:e4:07:9d:bf:b1:35:09:
                    4e:e4:f7:53:63:5c:a2:24:b3:11:12:5a:25:1c:3b:
                    86:f4:f8:f6:4e:d7:93:f7:30:cb:23:f8:63:36:04:
                    26:ba:06:d6:6b:09:68:4d:e0:14:02:d6:b1:18:85:
                    5d:b2:6c:2d:7e:79:a0:48:24:eb:5c:32:2a:ed:b2:
                    12:ec:83:d1:b8:9a:79:c3:92:db:a9:2f:a6:2a:ed:
                    e9:27:ce:dd:d7:22:4f:bd:ec:78:35:37:04:8e:2f:
                    31:72:aa:68:4b:39:4e:3e:8c:54:f4:20:b0:e7:15:
                    a2:8e:af:a3:08:93:38:33:68:5c:a4:31:06:7a:db:
                    36:6b:a7:63:03:61:23:87:eb:8b:82:2a:f5:60:df:
                    19:73:2e:22:3e:3b:5c:d6:bc:06:b6:34:6c:90:fb:
                    6c:e2:60:c9:c0:38:fa:7a:9b:37:33:98:bf:7a:11:
                    e1:c6:c9:55:b9:2d:a1:e8:78:e0:d9:e1:7b:11:4d:
                    5f:38:fc:ca:c6:17:58:71:b5:4e:13:b4:ad:9b:af:
                    e2:80:7c:b7:b0:57:3e:65:1f:a4:05:79:46:d8:26:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F3:28:5A:14:8E:BB:01:DF:A9:3E:59:89:81:68:37:0D:BA:05:AC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2b76eb9-5ca9-456c-97c2-1fe70c19dde8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:dd:56:5f:ca:a7:86:b5:d6:95:28:2e:3c:eb:8e:3c:cc:
         35:fc:23:8c:af:cc:f8:3e:f3:9f:ba:f8:36:16:a0:d7:47:d1:
         1e:2d:c3:b2:67:c4:7f:c7:9e:1e:13:bb:9c:c0:38:30:6e:f2:
         18:3f:ec:66:5b:9d:b3:1f:97:9b:f6:8a:cd:39:ef:84:dd:8e:
         d2:b1:1d:08:88:98:9d:fc:49:5f:55:38:57:77:87:f0:e6:25:
         18:c5:d9:eb:c0:3d:6a:6f:0c:de:b5:06:d0:e9:7d:5b:5f:92:
         d2:94:9a:0b:98:fc:d8:5b:8c:ae:be:2f:46:28:50:38:31:65:
         12:74:00:c3:2f:16:39:54:78:37:e7:c8:f8:37:b4:1a:ef:51:
         c0:06:c2:c4:db:ea:e5:e5:28:51:c0:a4:ca:86:f2:8a:b5:41:
         df:05:c5:f5:f9:9d:7c:65:4b:34:ba:c1:cf:c3:d9:8c:b5:e0:
         66:fc:93:84:c9:c2:2f:de:29:09:75:2d:5e:68:ac:a7:7c:79:
         39:78:86:67:29:08:2c:87:11:f4:35:70:2c:b8:98:40:e6:4a:
         cc:74:35:4a:34:b7:1b:bf:e2:ea:d0:b3:c2:2a:7f:6e:fa:d9:
         a1:56:88:86:3f:57:60:33:5b:59:52:04:a6:34:0e:90:a8:dc:
         b7:97:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:18 2026 by rpki-client