Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea37f660-1ef2-42e3-9d1b-d9516c6bef83.roa
File:                     ea37f660-1ef2-42e3-9d1b-d9516c6bef83.roa (raw, json)
Hash identifier:          736mmQf/lHVsdqAnwsTEo1JCLwZbOtRzNjMnolG2yIo=
Subject key identifier:   5E:D9:33:7B:12:1C:47:0A:1E:01:49:15:4C:F2:D3:5C:67:9B:E2:7D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0C6A275D13DDA3380AD4E79318D3D19214061442
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea37f660-1ef2-42e3-9d1b-d9516c6bef83.roa
Signing time:             Tue 19 May 2026 01:11:20 +0000
ROA not before:           Tue 19 May 2026 01:11:20 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.248.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:27:5d:13:dd:a3:38:0a:d4:e7:93:18:d3:d1:92:14:06:14:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 01:11:20 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=06fa8ad0c39d0bc08a52ce9a14b9a6325875c687bf29fbbd651e7b5d1a206187, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:6e:e0:a0:11:0e:cd:bc:ba:f7:c1:a5:41:
                    ba:59:02:14:1b:5c:6a:33:73:3c:1f:3c:f7:0c:3c:
                    96:f9:a6:7f:bf:06:94:ed:34:75:28:8f:97:74:94:
                    fd:46:22:81:e9:a5:2e:75:3d:bf:4c:e1:05:67:e8:
                    a0:19:92:57:83:2f:6d:d9:7b:ca:a7:60:25:09:3d:
                    68:69:e8:84:0c:2b:7b:a5:60:9c:76:3e:02:47:33:
                    c3:1f:1a:3a:e6:63:2b:00:66:77:80:d0:9b:65:c6:
                    fa:d0:11:87:8a:4d:a6:8b:30:5a:3a:c9:a3:23:2a:
                    e0:3b:48:97:a2:84:be:b4:b8:a1:40:26:56:11:20:
                    86:24:cb:f7:7a:98:21:d6:4d:42:37:ae:af:1f:b2:
                    f0:dd:f0:5c:fa:c2:01:ea:46:f7:ff:c3:27:08:61:
                    59:e0:b4:cf:98:d4:f4:cd:43:89:f5:88:43:d1:f4:
                    90:40:94:51:44:a9:70:64:b9:61:ca:9f:e0:22:de:
                    9a:21:60:fd:14:df:ca:3e:6b:b2:a2:f0:be:ec:db:
                    c9:8b:88:15:af:6c:05:1c:85:8c:3f:94:fa:55:51:
                    d4:ec:cf:35:4d:b8:1d:8e:21:ac:62:6a:ef:51:f5:
                    f4:f2:6f:05:5d:9a:b0:19:77:c6:67:d5:57:12:44:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D9:33:7B:12:1C:47:0A:1E:01:49:15:4C:F2:D3:5C:67:9B:E2:7D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea37f660-1ef2-42e3-9d1b-d9516c6bef83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:e6:2b:5e:6d:00:ed:6e:cc:4e:2f:3a:ef:46:85:db:99:
         f0:cb:3d:26:d9:ec:15:57:7e:a7:59:3a:a0:47:87:e5:1e:e2:
         40:27:47:f7:73:8a:e6:e9:7d:9a:8f:0c:8e:c4:d0:6f:44:37:
         00:35:bd:4b:9f:86:f9:1a:12:81:9a:b9:9c:48:00:e3:67:b8:
         b7:21:2c:16:dd:d3:46:95:3e:e0:c1:87:a6:7c:09:3a:f2:ec:
         af:33:a0:28:56:57:00:63:65:95:4e:88:d0:9e:75:7d:3f:78:
         38:dd:c3:52:76:1f:9d:7b:02:26:31:1a:90:34:a7:e5:84:85:
         41:c4:7c:86:a7:c9:12:cc:21:7a:3b:3e:cd:b0:e0:6e:3c:58:
         9f:75:5c:bc:31:f5:90:b2:4e:cb:70:2d:cd:6b:d8:e2:fa:26:
         f9:88:7e:c8:6e:52:75:1a:3c:1f:05:f8:ce:d7:85:ff:1a:f4:
         c4:f0:f0:74:b8:36:f5:b9:cc:9e:b4:4f:de:41:11:7d:c2:3c:
         cc:f6:15:2f:06:63:e0:df:28:94:0c:37:75:8e:1a:73:0c:83:
         aa:c9:43:a5:a5:e6:10:56:61:18:8b:23:ff:fe:6f:9e:5e:93:
         4f:19:72:11:2b:d3:9e:d9:f3:85:ea:21:5a:0e:7e:d2:75:f4:
         c8:c2:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:04 2026 by rpki-client