Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a9c95-1656-4cc4-87fd-a03b1b959404.roa
File:                     285a9c95-1656-4cc4-87fd-a03b1b959404.roa (raw, json)
Hash identifier:          Oigcu+ewO1m5ZH0ZxJcwloIxh1vyCXJwKBR89jultqg=
Subject key identifier:   A6:1B:2B:CA:6E:FC:5B:21:DE:AE:2A:9E:2E:A6:CD:62:03:81:E9:D8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1CD97D99ABBE9984C5CAF0E411E98FDB999ABCFA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a9c95-1656-4cc4-87fd-a03b1b959404.roa
Signing time:             Wed 21 Oct 2026 01:21:26 +0000
ROA not before:           Wed 21 Oct 2026 01:21:26 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d9:7d:99:ab:be:99:84:c5:ca:f0:e4:11:e9:8f:db:99:9a:bc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 01:21:26 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=e66d509f1183a6b173ee32266b578d09f577ecb90f79945aefe6c7dd98f97bc3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:a1:1e:2a:0f:50:68:ec:81:91:44:92:d4:
                    43:04:28:af:66:9a:06:02:1e:54:4c:48:e0:c8:b5:
                    5f:a8:86:89:f7:e7:f7:0e:bb:8f:18:c1:57:ef:53:
                    4c:76:29:d3:37:72:12:f3:75:d5:ed:f7:18:f3:91:
                    8a:1e:d2:db:5e:92:b5:88:01:cf:b9:62:87:0f:e2:
                    d3:02:9c:21:08:0f:91:e4:fa:5c:d4:ce:27:07:3e:
                    b7:2b:6d:85:af:2d:7e:8f:64:d9:db:e0:07:20:8f:
                    c7:19:ff:dc:5c:4e:4a:53:7d:38:80:d9:c0:a8:9b:
                    bc:12:f3:4a:cb:7f:44:2e:30:0a:23:2a:97:8c:45:
                    64:b5:61:c7:a3:2e:8e:a3:0c:19:4d:93:f8:a1:54:
                    79:31:97:cd:25:0b:54:53:7a:6c:ed:96:4f:4e:b2:
                    ba:79:ce:5a:e7:40:04:76:20:32:ea:3a:c5:05:1c:
                    24:c0:6c:57:74:c1:74:51:98:15:7d:7d:41:4d:64:
                    c8:22:d5:49:b4:a9:06:bc:fc:aa:6c:40:f6:9d:c9:
                    df:70:37:63:64:f1:dc:44:82:32:ff:37:8b:1e:a4:
                    9c:c8:a3:f2:67:e9:90:bb:6c:72:ce:26:75:a6:25:
                    2a:b5:34:f7:cf:c6:bb:16:72:fb:5a:61:c1:74:ed:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:2B:CA:6E:FC:5B:21:DE:AE:2A:9E:2E:A6:CD:62:03:81:E9:D8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/285a9c95-1656-4cc4-87fd-a03b1b959404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:c4:a4:d0:ca:5f:4e:5b:3c:a4:f2:c6:e1:8d:3a:39:4c:
         b3:4e:c2:e1:7f:b0:1b:8f:b7:7e:44:3a:b1:d1:e2:dc:9b:42:
         64:65:20:e6:47:01:18:36:f9:d5:f7:ab:12:09:92:19:37:e3:
         30:6a:d5:f2:06:ff:2a:48:d1:a4:27:27:b9:3f:b2:2d:9f:25:
         e7:09:c2:a5:8e:5c:12:eb:72:66:56:65:2f:c0:2d:77:a1:b0:
         63:f4:da:bb:cd:b8:a8:38:9b:e4:de:44:de:09:79:14:3c:ed:
         34:4f:8c:9c:4d:76:00:da:b8:07:4a:ec:15:e9:9a:01:b1:64:
         a6:9f:43:6d:f9:c8:ee:b6:4b:b3:3b:c4:a6:f8:7d:2e:ad:dd:
         77:33:34:3e:93:2f:7b:3b:5f:ae:c9:d3:dd:79:63:43:04:ed:
         0d:fc:32:ce:a7:c3:9f:18:22:c7:f9:f5:81:5c:16:30:c2:45:
         1c:28:4d:54:91:51:cc:e7:6d:fe:6e:4a:fe:23:f0:f4:4d:05:
         81:fd:73:ed:87:68:7b:04:2a:e6:63:71:60:e6:a1:eb:5d:73:
         5c:72:3b:0a:69:e3:07:06:92:a5:e2:89:76:9b:93:50:5a:af:
         bb:97:d3:7f:86:13:e3:1c:db:41:3e:d7:ea:87:59:58:28:7f:
         ce:c1:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:14:44 2026 by rpki-client