Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa
File:                     dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa (raw, json)
Hash identifier:          vb84UJHhPudJmuZO3Kitfto3nt5Ze7JRIzZt0pOkedE=
Subject key identifier:   BD:38:EC:F0:24:92:04:16:95:1B:BA:60:02:0B:CB:E1:DA:2B:54:8D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6003F1EF872F89532D254B222D87CA03D5175E45
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa
Signing time:             Sun 17 May 2026 01:10:38 +0000
ROA not before:           Sun 17 May 2026 01:10:38 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.192.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:03:f1:ef:87:2f:89:53:2d:25:4b:22:2d:87:ca:03:d5:17:5e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 17 01:10:38 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=83d06a91d71b0c88d06a75126c180cbd6281a9f6ebf271e52a1dd4e35eeb9f0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:14:20:22:d9:89:8f:fe:80:3f:98:1b:14:
                    91:3d:1b:9c:be:c0:75:31:8e:be:f3:4a:0b:03:6e:
                    45:81:5d:13:9a:58:e4:4f:53:3b:06:d7:54:e5:e0:
                    26:ff:fc:b1:3e:18:91:92:fb:93:b1:9f:6c:86:4c:
                    97:19:08:f5:5a:ad:ff:5e:d5:53:e8:bf:74:07:7f:
                    43:77:bb:85:78:a4:b2:12:f0:0a:1d:ac:6a:e8:ba:
                    55:f9:7c:3f:09:8e:77:96:0c:a3:0b:af:2d:62:82:
                    2a:1d:aa:ba:9b:8a:ff:29:4e:2d:30:42:eb:33:2c:
                    33:57:d2:13:67:26:8e:c8:eb:1c:82:e8:d2:ff:f0:
                    5a:fb:e6:a8:ca:5d:79:4b:12:17:97:67:43:e9:36:
                    d0:ba:2c:b9:96:ff:a7:50:0f:a5:dd:ce:0c:24:79:
                    bc:64:89:36:3f:34:1a:79:60:d5:37:a8:54:a2:71:
                    5e:6e:16:05:2b:be:00:8d:eb:b6:96:cb:07:0c:fb:
                    33:10:25:fe:28:9d:9b:b4:8e:b5:93:6f:3a:7c:4a:
                    bf:0e:e2:37:fb:8b:22:02:97:8c:45:5e:f2:38:cf:
                    04:40:ce:c7:ca:73:e3:23:a6:05:aa:90:6f:c5:b1:
                    97:82:ee:c4:cd:3b:b0:14:f5:93:1c:84:ea:fa:e7:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:EC:F0:24:92:04:16:95:1B:BA:60:02:0B:CB:E1:DA:2B:54:8D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:ef:5b:8e:b2:47:3a:be:4d:05:2d:58:51:3b:e7:7f:22:
         4b:5f:eb:a2:89:51:80:ad:4f:68:e6:bb:4b:1d:73:96:83:7c:
         91:c8:c8:03:3c:7a:24:f4:d9:cd:a1:78:c5:61:63:91:2a:d3:
         52:e5:bf:39:3b:f6:0a:b5:f8:8b:60:3f:ff:6b:29:c1:87:eb:
         c9:f1:bf:d5:71:66:ce:d9:52:7d:60:b5:98:80:00:05:c8:4f:
         f6:2d:0c:80:f8:01:d0:ec:75:7c:26:b4:2a:48:3d:30:83:bb:
         0f:49:fc:8c:a6:33:d1:89:ea:7f:4d:1d:b6:17:69:80:2e:85:
         51:6d:c5:6d:42:a8:53:7f:75:75:29:66:03:74:e0:47:7d:59:
         3c:9c:50:61:cf:0c:b4:1e:b8:6b:57:5e:c8:11:27:4d:76:da:
         95:d3:ad:f6:70:48:78:81:8e:68:3a:fd:b9:c1:92:dd:fa:48:
         08:1f:44:8b:fe:bb:21:62:1a:b1:f4:09:73:97:8c:07:01:e1:
         09:4d:f1:0e:f2:dc:16:fc:24:4d:5e:f3:5e:6c:64:c2:22:48:
         27:80:00:1f:d0:4c:e4:69:7a:91:8f:47:26:3e:b8:e0:50:7b:
         35:08:84:34:6b:7b:b8:87:ee:18:a3:b1:3d:ab:e5:42:9b:a1:
         ff:3e:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:49:32 2026 by rpki-client