Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa
File:                     307addd7-6720-48e7-a2aa-cc1b7205153e.roa (raw, json)
Hash identifier:          sWPIPeU4Hfr3qOSL7d30RhO+f/ayxQavDbqnROoDTGQ=
Subject key identifier:   2A:54:E1:52:FB:3C:5A:6E:FA:4C:39:9C:B2:E2:2A:26:DE:8A:BB:28
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       46F5A4DBF7E6BFA69644A7183701DFA580A15B4A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa
Signing time:             Mon 26 Oct 2026 01:51:28 +0000
ROA not before:           Mon 26 Oct 2026 01:51:28 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.131.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:a4:db:f7:e6:bf:a6:96:44:a7:18:37:01:df:a5:80:a1:5b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:51:28 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=484f64b3e4bd7cb6b4b2f9429b49297c42617176458eeffaa995002c466c5114, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:ba:ce:41:f6:3f:53:5d:7b:fc:63:23:57:
                    e0:15:96:f4:06:8d:50:b1:c6:a5:f6:83:9d:f1:dc:
                    14:89:64:d8:ea:02:2c:7f:46:37:9c:66:a7:da:4d:
                    37:20:d4:1f:8b:fd:ec:c5:ef:25:1b:f6:69:81:a8:
                    ad:28:d3:7d:ee:e5:d4:ca:3c:19:54:aa:50:cb:0c:
                    6a:2c:e3:24:10:0d:e8:e0:23:51:33:2c:f8:ff:d7:
                    91:7f:1a:57:55:d0:06:70:ca:03:07:e5:ab:58:09:
                    c5:0d:f2:da:6e:b7:fa:e5:81:ce:20:a7:9f:2e:3e:
                    ce:f9:ea:94:15:53:8f:83:6a:6f:2a:f9:af:5d:18:
                    6e:5b:ab:90:dc:4e:95:f0:b4:c8:51:c5:dd:43:50:
                    f0:46:81:cd:56:9e:80:5f:1b:01:dc:6c:8f:45:38:
                    bd:9e:ff:e6:e2:8d:df:84:03:76:14:51:d3:0c:bc:
                    93:bd:5c:f2:b7:52:c0:6e:f7:bf:12:ad:ad:5b:fa:
                    7f:09:01:ee:40:08:98:a6:59:40:6c:43:8d:32:31:
                    05:f1:b1:74:b9:5a:ff:14:63:68:74:df:62:22:f9:
                    c0:8d:16:d7:53:51:c8:46:dc:ef:80:d1:35:b1:7d:
                    44:a1:cf:6f:d9:ec:98:2d:4a:6b:2a:d0:75:c6:29:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:54:E1:52:FB:3C:5A:6E:FA:4C:39:9C:B2:E2:2A:26:DE:8A:BB:28
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:7b:c6:f9:10:7a:44:81:f5:d8:36:d7:02:20:97:26:dc:e0:
         d8:78:c5:4d:61:45:77:1d:c8:ec:83:f9:30:6f:3a:b3:4f:40:
         a9:10:b2:86:87:10:38:d6:15:80:c2:4f:cb:ae:dc:b1:57:ac:
         11:29:3c:00:c6:fd:cd:0c:0d:0d:00:03:0b:71:a8:c0:a8:4e:
         df:60:65:8b:aa:42:1e:cf:55:1d:61:36:cd:5c:05:9a:5d:fa:
         ee:9e:6c:33:5b:21:00:dc:c2:2a:a3:37:9f:18:22:47:61:bb:
         53:22:01:8e:72:38:e2:24:e3:ad:0d:40:19:b3:8a:05:fe:9c:
         e6:32:63:e9:08:90:23:f7:2d:a2:6f:ed:47:34:68:e7:1a:2b:
         91:72:2a:58:71:ef:19:bb:98:48:f9:18:33:3f:15:58:30:e8:
         71:56:c0:06:c6:66:75:ce:f3:ab:81:36:b4:a0:c9:2a:8d:ea:
         24:03:ae:14:31:02:23:39:9e:0c:45:a5:1f:b5:64:18:32:1a:
         eb:1f:aa:e9:1f:5c:d5:ad:a1:e8:56:d1:88:47:cf:4c:6d:ae:
         44:b4:69:bc:4b:7a:b6:e1:18:0a:6a:ca:46:54:52:c1:86:22:
         5c:8d:c5:d9:38:dc:5d:58:4c:32:e5:0f:15:e5:af:84:d6:0f:
         3e:06:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:54:41 2026 by rpki-client