Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebafd44a-902f-4ffd-ac8a-a78dff1d2ae7.roa
File:                     ebafd44a-902f-4ffd-ac8a-a78dff1d2ae7.roa (raw, json)
Hash identifier:          vVmWQVVDNzQGP7w3x0aeheZS+PyNS1b/H3ZgIRnfi6Y=
Subject key identifier:   E2:71:A6:AB:4C:A8:1A:78:4A:5F:14:0F:4F:1E:E4:1A:AA:31:E9:70
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5581082A3AA309F64670A8CB97316F5E8BDC2827
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebafd44a-902f-4ffd-ac8a-a78dff1d2ae7.roa
Signing time:             Mon 27 Jul 2026 01:50:32 +0000
ROA not before:           Mon 27 Jul 2026 01:50:32 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:08:2a:3a:a3:09:f6:46:70:a8:cb:97:31:6f:5e:8b:dc:28:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 01:50:32 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=030672a42d6a0679a2c8446766f5d786ea7098f818098867244ec54e78ffdccc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:ca:e7:c2:0b:56:f2:43:fa:cd:69:9f:b5:
                    84:37:d0:c8:93:d2:4f:52:f4:a1:16:8b:db:89:c2:
                    6c:2f:32:6e:41:2a:c8:54:9c:96:87:5d:9b:d4:14:
                    d9:57:bd:dc:f3:36:b0:ce:66:5b:01:12:5f:39:e0:
                    59:8d:20:3c:2b:48:be:6a:5f:2a:78:b9:64:15:2c:
                    e3:96:a4:b9:80:fe:af:a1:e1:81:bd:ee:a0:1f:42:
                    63:10:d9:2c:e6:e7:6f:1b:1b:88:66:98:52:25:7a:
                    32:d1:2b:4b:b6:83:d5:20:81:bb:3b:44:b7:9b:fa:
                    c7:11:e5:21:cc:f2:8c:e5:13:27:e0:83:aa:35:7e:
                    f9:05:ff:4f:2a:bd:87:9a:5c:e2:bf:dc:a2:bc:2a:
                    d7:b4:3e:5f:66:7e:ec:5c:bb:33:03:7b:bd:03:0b:
                    3f:0f:6d:0d:65:62:dc:66:f4:05:f1:60:af:e1:af:
                    d8:76:4d:18:77:21:ca:33:95:49:da:00:68:c7:a2:
                    82:92:8b:1b:48:e5:4b:6a:df:5a:bc:0b:5d:1e:c8:
                    99:70:ab:84:c5:da:c9:be:19:32:d4:0b:6d:f4:51:
                    ce:c9:17:48:c6:95:53:d3:c1:32:57:ba:e4:98:a2:
                    1b:fe:4b:57:6e:6b:c7:05:d5:bb:74:ac:b2:d4:ca:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:A6:AB:4C:A8:1A:78:4A:5F:14:0F:4F:1E:E4:1A:AA:31:E9:70
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebafd44a-902f-4ffd-ac8a-a78dff1d2ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:13:33:8f:2f:2f:03:62:0d:d9:2c:ad:c8:98:a2:f8:34:
         21:af:f3:54:f2:ce:c3:0c:7d:c3:d9:26:8c:b2:1e:cb:cc:4d:
         5f:7a:bb:aa:51:3b:f5:b6:b8:f6:c0:d6:ad:8e:ae:fc:75:c1:
         1a:c6:b5:d3:64:b1:79:1f:58:b3:7f:0c:cb:85:d2:5d:7e:9d:
         6e:89:a1:ac:bc:f5:90:3f:9a:bc:6c:d2:fa:d7:ac:50:06:03:
         56:e0:cc:7a:16:6f:fe:23:8b:f2:c9:f7:bb:a0:0f:2d:4a:cd:
         10:bb:88:b2:ce:34:d9:07:52:75:20:9e:12:b9:a0:bf:b3:d6:
         bc:b4:7d:86:31:95:dc:d1:0d:04:7f:4f:99:d3:92:fa:3e:b5:
         b8:7a:c5:b8:93:45:fe:82:07:b5:d4:e9:1d:89:bb:4a:dd:3b:
         67:75:39:98:64:06:14:69:f8:da:6f:4a:8b:e1:59:14:c8:c9:
         08:42:04:b9:ac:68:ac:b1:44:5b:d7:ce:a8:62:a2:16:04:38:
         0b:d7:be:17:f3:0e:ef:0d:7a:75:36:16:c0:a6:5b:c7:cd:61:
         26:fe:9e:b8:dc:54:67:23:58:b4:c1:80:f6:1e:d8:c5:de:29:
         bb:c3:dd:cc:d6:64:18:d6:f7:13:9f:5a:20:52:3d:e1:23:4a:
         aa:6c:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:18:07 2026 by rpki-client