Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fae25d4e-ae91-4474-9abb-02aac4073e5d.roa
File:                     fae25d4e-ae91-4474-9abb-02aac4073e5d.roa (raw, json)
Hash identifier:          QdlG2t4RiQVbEgOOwdxuf4ToFOL2NKa0toFphA3ujOk=
Subject key identifier:   AA:4C:12:61:F4:DB:2A:8B:52:8F:2E:58:69:C1:71:A2:F5:38:97:7E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       64B5A19403173990FCC82450B1DDD7342500B890
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fae25d4e-ae91-4474-9abb-02aac4073e5d.roa
Signing time:             Thu 14 May 2026 01:30:19 +0000
ROA not before:           Thu 14 May 2026 01:30:19 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:a1:94:03:17:39:90:fc:c8:24:50:b1:dd:d7:34:25:00:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 01:30:19 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=fcfdf1935e78e77b49b5afa23b9b1195420aefa937c1dc5e842c894c8af67966, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:52:c1:40:16:0a:b7:c4:04:92:98:a1:a4:
                    a4:e9:53:59:15:39:f1:89:b3:b7:3c:81:5e:ef:ab:
                    ce:fe:34:fe:9c:88:59:d4:32:af:78:ff:47:ea:a1:
                    27:8c:1c:ca:f7:75:8e:c0:d9:91:bb:b3:7f:5f:3a:
                    aa:97:5e:e5:4c:33:79:0d:93:08:3a:cf:cc:ea:46:
                    24:34:5c:99:22:20:fe:1d:d7:a4:8c:50:91:a6:d2:
                    6a:cf:66:1e:5a:7f:47:ef:9f:c7:2c:0c:b6:fe:3f:
                    02:2a:5f:e4:21:2b:2c:07:cf:69:ba:0e:de:ea:d2:
                    f0:fa:b9:3d:9e:e4:90:f2:57:b2:52:5c:eb:8c:51:
                    2b:fa:b2:35:a5:3c:3e:2d:f3:5f:bb:e5:92:17:c0:
                    65:f4:0f:de:f3:2c:47:4b:69:fd:e6:51:c6:e3:96:
                    ea:92:f7:9d:1a:16:a0:52:b1:15:bb:f8:fb:f5:93:
                    ee:c4:7a:3c:27:cb:54:d8:97:a8:1c:7f:ba:ae:82:
                    bc:fe:c4:e1:67:48:2b:19:02:34:95:f1:42:c4:3f:
                    6c:45:8a:dd:82:14:d0:ca:4e:ee:5f:ad:2c:d8:93:
                    99:c5:ca:1a:40:87:8f:60:ed:37:03:cd:8b:34:67:
                    8c:66:2a:6e:43:9f:76:a7:0b:f4:76:78:7f:81:e5:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:12:61:F4:DB:2A:8B:52:8F:2E:58:69:C1:71:A2:F5:38:97:7E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fae25d4e-ae91-4474-9abb-02aac4073e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:10:8c:32:e1:32:df:c4:34:9d:51:8c:4d:a8:d3:d4:61:
         88:3d:29:99:cb:2b:c2:52:da:68:d2:10:8c:38:86:91:a3:18:
         fe:3a:fe:54:77:a2:b4:ef:06:94:b3:f9:e5:17:67:e9:d3:74:
         6e:27:d2:fd:d6:91:5b:28:a4:9f:97:9a:38:8d:b2:02:fd:cb:
         78:cf:83:03:f6:36:f8:4b:45:c4:5e:21:75:95:60:03:42:11:
         f2:6b:4d:8e:87:b8:6e:9a:06:8a:dc:c0:cc:db:94:cd:e2:79:
         b1:64:aa:f0:f3:cb:42:e1:b8:a8:74:5e:46:c8:d1:3b:0d:1c:
         3f:c4:c2:26:ae:ae:0d:ff:0c:e2:4a:2a:32:0e:f4:b9:68:bb:
         30:49:18:4d:d1:40:27:fa:33:6d:69:f4:14:f9:88:09:07:d2:
         57:1a:bc:ac:58:59:40:64:0b:02:e2:47:da:a7:ed:bf:1b:9e:
         b6:49:de:f4:a2:21:29:b9:28:e9:8b:e4:e4:f9:10:c9:b1:f2:
         62:c4:6b:87:7b:ac:33:9d:eb:7d:61:9e:1c:c9:30:f0:a1:43:
         1a:f0:ba:26:3f:21:b9:45:bf:35:ca:a6:fb:3c:7b:ea:9b:6f:
         e6:c6:50:d8:71:e4:2b:f6:06:0c:e7:b7:0d:81:15:89:9f:fa:
         e2:a6:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:51 2026 by rpki-client