Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/313c4a59-903a-4c61-9a15-20ab7fb593b7.roa
File:                     313c4a59-903a-4c61-9a15-20ab7fb593b7.roa (raw, json)
Hash identifier:          mxAWkXpGQiQPnWP2L02es8aBqvJkEXY5EpDSDfcsdYk=
Subject key identifier:   A7:7A:96:2B:AC:0F:AA:18:9D:BB:EE:C1:14:45:9E:48:61:F0:9D:F1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A5059B36203A5DB7FBF99976404065F2E12B288
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/313c4a59-903a-4c61-9a15-20ab7fb593b7.roa
Signing time:             Thu 15 Oct 2026 00:50:06 +0000
ROA not before:           Thu 15 Oct 2026 00:50:06 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        15.230.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:50:59:b3:62:03:a5:db:7f:bf:99:97:64:04:06:5f:2e:12:b2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 00:50:06 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=2b0e460b3dc76c9eafcca3cceee2d1263b71169002e22d0d1304c22dca77cb09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:c8:3d:7b:d9:96:37:78:5d:2a:d2:df:a9:
                    32:7b:fd:14:21:dc:74:35:21:2b:f7:77:de:72:5e:
                    b8:69:a8:67:00:04:30:9e:d2:4b:a0:2f:b9:30:b3:
                    fa:ae:b9:b8:06:4a:48:3c:85:23:d6:5c:4a:b1:2c:
                    72:98:9a:04:cc:c2:9a:8c:00:9a:2c:40:df:31:bb:
                    8d:9f:aa:5f:72:cf:39:2d:eb:23:33:b7:d7:d0:0e:
                    34:06:c1:e6:d4:b7:b7:f7:0b:db:ff:13:a4:13:da:
                    f8:01:94:5c:0d:9a:35:4d:8b:3a:c3:4f:0e:9d:98:
                    3a:19:69:e0:ae:34:8b:a6:28:74:65:8b:76:07:27:
                    8c:0d:83:f7:8c:d4:4e:95:1a:c3:68:0f:a0:6f:29:
                    31:c1:8b:cf:47:78:e4:e4:55:65:4a:31:98:66:5b:
                    0b:93:c8:ad:a4:ba:2b:8c:9d:f2:0f:3e:9a:ba:5d:
                    61:7d:05:ba:36:f3:d2:27:9c:08:0a:63:8b:77:81:
                    c4:83:79:87:36:06:36:4e:d1:61:b6:82:a9:19:7e:
                    58:40:be:53:df:64:b2:dd:c5:d2:83:61:54:0d:e1:
                    48:17:06:ab:a4:f7:b0:1a:4f:15:41:c7:ba:c2:35:
                    1e:5f:f4:67:7b:9f:fb:3e:e9:49:2c:83:bb:7c:c0:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:96:2B:AC:0F:AA:18:9D:BB:EE:C1:14:45:9E:48:61:F0:9D:F1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/313c4a59-903a-4c61-9a15-20ab7fb593b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:91:1f:d9:ce:c3:a7:18:86:99:d6:2d:64:7e:c6:b8:06:b5:
         61:63:e8:24:fe:ec:8d:f3:c9:d3:96:1f:34:da:8f:e7:be:c4:
         76:ec:91:89:0a:e1:6d:93:54:c3:7a:f9:f7:cd:5f:3c:6e:df:
         70:b3:5a:fe:c7:00:4e:24:37:c4:1c:65:f1:48:5c:c7:65:a1:
         85:81:20:00:6f:3a:cd:e4:c5:ba:02:d0:6f:01:68:72:52:48:
         a6:2c:13:26:b9:cd:20:da:cd:dc:c6:aa:91:4f:65:98:34:64:
         ac:ff:78:78:83:77:15:18:90:5b:17:05:7b:9e:3f:0a:54:13:
         6d:be:a6:f5:45:b8:df:4e:c0:f0:b6:7b:f7:ad:84:19:5b:ce:
         fd:ed:9f:8a:d5:be:6b:32:60:7f:74:0a:e3:33:ca:3e:c1:b7:
         ea:b8:9d:f3:00:30:bc:e1:b5:89:e9:20:85:66:6d:74:68:9d:
         f8:f9:0e:18:6a:e8:92:b5:63:46:df:a4:7f:45:9c:80:87:00:
         e0:3b:42:7d:56:33:40:48:95:c4:86:b5:7b:57:d9:49:53:45:
         d5:5d:91:da:0e:29:f1:75:81:b8:8f:e4:e9:94:f0:04:ac:b2:
         55:95:af:49:c9:bf:50:56:67:2d:06:94:f1:f9:ac:2d:9b:ed:
         27:08:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:42:50 2026 by rpki-client