Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa
File:                     03efc2c4-f35c-4ff9-aefe-135c62760950.roa (raw, json)
Hash identifier:          3e1FTjtkRD3uKwxiPaoqZDZPbru2SEkn6evRnoEVyq4=
Subject key identifier:   B2:E3:EF:80:BA:72:92:30:A9:90:A7:2A:CE:C3:CF:9A:62:D5:76:DF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       472A9E4F91D1E60347AEAA3665D307CD329D0BAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa
Signing time:             Tue 19 May 2026 02:31:50 +0000
ROA not before:           Tue 19 May 2026 02:31:50 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2a:9e:4f:91:d1:e6:03:47:ae:aa:36:65:d3:07:cd:32:9d:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 02:31:50 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=5fb2da1ee9568be88d707381061dba05129fcb67dba6fa12aa7fbfb0f7c769d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:1f:02:81:72:11:ca:ab:71:89:16:78:2d:
                    51:06:7f:e0:b7:6d:92:67:84:a0:88:e8:ab:6b:b7:
                    f6:25:e4:f7:b6:df:c0:ef:6d:cf:6b:59:9c:c4:f2:
                    3d:99:59:87:62:ad:98:07:70:1b:87:75:f1:4f:0b:
                    99:a3:54:ca:b3:f6:1e:a5:ef:7f:40:df:48:ec:b1:
                    f1:ed:76:d8:6c:b1:99:ff:b9:b4:f3:99:8d:a9:42:
                    b3:0b:69:a9:73:ff:14:3a:48:ab:9e:41:09:a1:ef:
                    4f:1e:b4:02:a5:30:b1:0f:76:58:f5:2d:46:77:86:
                    f7:57:99:84:5d:26:51:b0:9c:79:d5:aa:03:b2:ac:
                    f4:1a:18:94:3b:d4:0a:32:b9:8f:9c:83:45:74:5d:
                    1e:40:da:a6:b7:1b:50:bc:0e:d9:91:2a:df:d6:73:
                    32:4c:23:46:db:1e:0e:f5:7c:2b:ae:3d:37:2c:c1:
                    fd:cf:05:35:5c:de:88:e8:4c:79:73:5a:6d:e8:94:
                    71:bb:86:5e:a2:b6:34:59:69:f8:83:34:ab:61:31:
                    1c:0c:a5:a4:d6:ea:16:60:05:d6:b6:84:f3:4a:d7:
                    41:72:ba:70:fc:b7:93:62:ec:86:28:48:27:24:49:
                    7e:1c:de:0a:a8:27:e3:4a:d1:c2:8d:6d:ae:c4:00:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:EF:80:BA:72:92:30:A9:90:A7:2A:CE:C3:CF:9A:62:D5:76:DF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:21:82:38:8f:d7:1a:e9:da:78:32:79:23:2a:66:30:2c:
         b4:8c:a4:b3:f3:c1:7b:db:a7:91:7f:47:c6:b2:fc:81:fe:4c:
         9b:48:3d:2b:98:18:06:b7:e1:f8:4b:30:f6:ea:41:1d:8b:73:
         7a:d5:b1:9d:ba:35:da:51:e1:53:f1:17:a7:56:a6:f2:39:44:
         2d:33:18:a1:3a:fa:1c:82:5c:23:ce:de:68:07:1b:1f:a6:a0:
         be:d0:a1:79:d8:b0:3e:96:05:e4:88:c8:a3:dd:89:3a:b8:21:
         5d:da:6d:20:8d:5c:0a:64:14:57:1a:38:21:06:3d:37:5f:f7:
         b3:cd:a3:b4:4a:6e:80:1f:24:7a:ef:41:52:67:27:c2:b5:08:
         dd:91:0e:b4:e9:85:39:68:9d:3e:ae:8c:11:10:9d:3c:8c:65:
         fd:3a:ba:2a:65:e3:7f:45:be:ce:14:90:e0:41:4d:2f:87:65:
         ed:fb:a5:a5:bc:cd:c1:bf:4b:a3:63:f6:91:f6:04:68:c7:6f:
         ef:2f:75:e3:c0:a6:6e:da:4d:41:dc:98:b1:7e:c2:fe:ad:08:
         eb:7b:bf:4b:bb:50:91:d6:4f:ca:75:f4:ac:1a:eb:8a:84:21:
         c4:43:dd:fc:df:00:b7:ba:70:8f:57:27:af:03:9f:8f:73:46:
         7d:d9:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:47 2026 by rpki-client