Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d5b791-cb68-446e-917b-7b29c04fba98.roa
File:                     e4d5b791-cb68-446e-917b-7b29c04fba98.roa (raw, json)
Hash identifier:          88cAijQr4uVIZGllYOdmnFTIaJlheyzbS7LAFU5Cp8k=
Subject key identifier:   8A:A7:A3:91:FC:AE:9D:C0:80:1A:B8:B1:FB:14:98:E1:23:1B:27:0F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7C558B9039A234E74C51BD4777842D65075BE6F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d5b791-cb68-446e-917b-7b29c04fba98.roa
Signing time:             Fri 07 Aug 2026 02:50:11 +0000
ROA not before:           Fri 07 Aug 2026 02:50:11 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.86.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:55:8b:90:39:a2:34:e7:4c:51:bd:47:77:84:2d:65:07:5b:e6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:50:11 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=b0f9d547cebd854311a6b93cfd3cdc208747f2e3576eb01204afb4b76aa1d228, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:b2:ce:37:17:67:2d:0c:38:76:c3:f0:4c:
                    cc:dd:86:26:b3:eb:cf:cf:8d:03:48:94:6b:f2:0a:
                    9f:50:e7:67:25:97:78:61:17:1b:27:b6:09:9c:e9:
                    b4:0a:01:42:96:ce:35:f8:48:d6:7f:21:cf:c7:b2:
                    d8:4a:27:be:1c:43:fd:5e:60:33:3e:33:11:fd:44:
                    11:6b:3f:ce:b8:1c:f6:ed:58:f1:1b:05:c0:c6:4b:
                    20:66:aa:b3:9e:a8:70:0b:e1:29:78:53:73:7c:d5:
                    f0:65:02:1f:60:9d:d3:c8:c4:5a:4f:90:2d:68:f0:
                    d0:ee:fd:0a:cf:c5:c0:ba:1e:57:d3:78:ec:1f:e1:
                    1d:ff:a8:05:23:98:d8:0c:53:22:ea:08:0a:62:18:
                    7a:ff:1f:9d:4a:8d:1b:1a:76:73:59:68:89:93:4f:
                    01:98:1b:e6:8c:a4:53:cc:70:22:8a:23:2b:33:23:
                    51:28:9f:db:16:a9:8e:4b:1c:35:ee:96:3e:e6:eb:
                    22:2d:46:e2:90:3c:3d:8a:15:ec:54:51:21:c0:7c:
                    4f:32:53:60:2f:96:cc:3f:2a:ac:f8:fc:7f:e4:9c:
                    72:1f:96:f7:b7:53:08:18:4c:28:7a:03:ee:6e:f9:
                    f9:44:88:2a:fc:5f:49:c2:a8:f4:fc:e0:38:be:31:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:A3:91:FC:AE:9D:C0:80:1A:B8:B1:FB:14:98:E1:23:1B:27:0F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d5b791-cb68-446e-917b-7b29c04fba98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:7e:51:2a:4c:a5:a6:db:d1:f7:48:f3:6c:b3:b7:6a:af:
         db:fe:85:51:c3:4c:64:0d:08:ce:8b:bc:78:74:99:66:20:39:
         8c:1f:0c:ec:c2:19:ef:7c:52:60:d0:ec:05:fc:e5:0d:af:4a:
         7d:b0:52:e4:ea:3f:66:5e:c1:e2:cf:ea:66:83:4b:e9:89:91:
         05:8c:1b:a1:60:43:73:7a:cc:c1:ca:4b:37:4e:77:51:d1:fc:
         ff:0d:e9:94:81:c4:79:aa:a9:d2:09:34:26:f3:9d:ab:99:a2:
         03:92:57:d5:00:1b:76:fe:c7:1c:42:95:76:46:e4:c3:4a:b6:
         a7:3b:ad:bb:f2:a4:68:c1:2b:f1:43:5b:13:17:75:fe:54:9b:
         0b:71:31:87:b7:04:cd:a9:75:49:29:0d:92:59:e2:b9:02:1b:
         86:90:03:b9:22:27:50:11:14:65:25:1e:f9:d2:48:b3:bd:2b:
         67:26:65:82:06:9d:9b:d9:8a:a8:e0:8f:27:19:e6:0c:f4:ef:
         43:ea:87:9b:d5:05:13:f6:14:ee:11:4b:f3:a4:45:d8:4b:d6:
         7e:66:fd:6d:e4:14:56:37:25:6a:2f:61:24:5b:cd:ac:72:ae:
         03:39:19:56:ea:9b:17:e7:49:82:73:15:56:08:46:42:b3:7d:
         54:a8:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:29:54 2026 by rpki-client