Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa
File:                     003286f2-c9bd-43a7-b5be-9753eb9aab82.roa (raw, json)
Hash identifier:          HdVn+xLRdCneZQF++UZ2n7Q3OYhWLCzgK3dE56rPDP0=
Subject key identifier:   51:05:D0:DD:0B:14:3D:23:83:3B:C3:E3:09:91:A3:F0:40:38:A4:BC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       47C3C2910488392B56B9A783F1195A50C21E0E50
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa
Signing time:             Mon 26 Oct 2026 01:51:29 +0000
ROA not before:           Mon 26 Oct 2026 01:51:29 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.70.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:c2:91:04:88:39:2b:56:b9:a7:83:f1:19:5a:50:c2:1e:0e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:51:29 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=0df95b9aca1aed1a4c78f7fb3b09e45662a26354dee1305c2f9ad00d8818a74a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:83:36:ab:9a:e1:f0:29:e7:84:a8:c8:28:
                    c9:83:d2:c8:91:dd:b4:c4:eb:c6:d4:65:b3:70:14:
                    93:43:4c:1a:a3:2c:91:39:59:1c:fa:c4:c4:9f:15:
                    fd:7a:f9:f9:c0:06:b0:fe:8f:8e:ff:9d:ed:25:1e:
                    31:f7:f8:04:4f:f4:56:b7:b8:f6:8d:89:6e:36:cb:
                    1b:a9:1c:41:90:98:8b:6a:bf:5d:67:9e:17:2a:5e:
                    bf:4e:dd:a6:33:b3:dc:98:ca:f5:fe:f5:f5:e4:cd:
                    11:e4:63:b9:42:07:6b:ec:05:e7:10:03:6c:ae:b0:
                    c7:f6:03:3b:c9:a1:a6:bb:28:1e:bb:79:42:1e:16:
                    35:c3:69:4a:0b:c3:43:0c:0f:6c:a0:e5:ec:df:7a:
                    c0:a3:85:08:84:df:9d:98:a3:59:0a:ef:2c:ec:73:
                    4e:e7:52:1d:34:a6:b5:a0:db:35:96:e2:52:0f:43:
                    b6:0f:73:98:d4:e9:6e:3c:ef:ca:dd:cb:37:26:19:
                    e7:af:52:73:5c:4e:4f:85:4c:77:d4:75:4e:d4:99:
                    2b:e5:59:bd:f2:78:7e:23:19:93:de:1d:13:83:fe:
                    03:dd:80:44:11:9b:1e:6c:a4:83:95:6f:a6:e8:13:
                    3f:dd:da:64:89:4c:37:b8:33:0d:fd:b1:19:ad:e3:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:05:D0:DD:0B:14:3D:23:83:3B:C3:E3:09:91:A3:F0:40:38:A4:BC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:a4:4f:f7:8f:90:38:63:ed:df:df:67:a1:85:1f:77:53:
         cd:0d:7a:fb:39:05:fd:d1:fa:70:a8:98:58:9d:0d:21:b0:ec:
         ef:8d:57:36:3f:61:cb:b9:5b:23:7d:dc:e6:7b:01:15:f5:a8:
         18:d0:04:63:0b:35:77:ba:b8:04:af:71:b7:f5:2b:e4:08:f2:
         49:de:5e:62:45:ef:96:b4:83:44:60:39:ee:35:57:1d:4e:22:
         b8:ed:ec:d3:d7:12:52:0f:0c:6d:02:53:b0:e6:eb:9b:54:67:
         97:d4:d3:92:2c:50:4c:73:23:60:28:73:70:5d:7b:32:da:4f:
         9e:9f:08:03:eb:86:c5:4b:8a:ac:97:ea:18:e6:dd:3a:38:3b:
         91:42:d6:05:f5:cf:e7:ae:77:1d:19:e6:67:0f:46:de:4c:3c:
         f4:21:64:e7:d5:b5:01:fd:40:04:1a:4a:c5:ba:0f:49:91:ab:
         8e:3f:d3:49:f5:94:cf:9d:36:f6:9f:e4:c6:90:19:04:be:bf:
         06:82:b0:f9:4c:c1:c0:bc:f9:60:04:52:d5:91:12:22:05:f2:
         ff:0d:fe:8f:19:8d:85:87:ec:38:0f:1b:92:bc:0e:9b:a7:7a:
         34:2c:92:65:e9:66:b6:fd:de:c6:6e:42:e1:6a:43:25:d8:9c:
         cb:43:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 22:57:18 2026 by rpki-client