Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
File:                     393be035-f403-42bb-8667-f8b643af501c.roa (raw, json)
Hash identifier:          UYz6j0wyDF3eWHpYUs5Dbj7/m/GEzy0AlGlIc7rrkg4=
Subject key identifier:   F4:CC:16:CB:40:75:4C:E2:93:3B:3C:1C:6C:50:FB:2F:8C:7C:26:4A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0BF58656205A9EFE09C08AC9A9A2B4DDAD35D98A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa
Signing time:             Thu 22 Oct 2026 03:30:47 +0000
ROA not before:           Thu 22 Oct 2026 03:30:47 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        54.226.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:86:56:20:5a:9e:fe:09:c0:8a:c9:a9:a2:b4:dd:ad:35:d9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 03:30:47 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=e12b8856a1716ba5b5c088938fb823ca96fd56bb73df141049a0ab0d13c7f859, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:26:a0:2d:93:52:d6:84:c4:85:4e:80:25:
                    45:8b:6f:b1:fb:51:f7:49:ce:54:e4:09:af:e9:a4:
                    55:a0:87:a7:f2:c2:19:56:d3:36:ef:1e:14:fa:e3:
                    89:01:f7:15:95:48:66:f6:f5:b3:1d:1e:76:e4:eb:
                    00:60:ae:e0:e5:bd:a1:de:33:a2:94:83:c5:77:4c:
                    61:da:23:6c:e1:33:97:c7:9a:da:82:95:eb:a8:27:
                    ea:fa:bb:0b:37:41:37:b3:85:42:6a:59:00:ac:95:
                    60:f0:ba:e9:07:10:98:34:39:f5:4a:f6:3d:82:c5:
                    2a:4b:26:63:7c:46:0a:e5:1b:5a:32:6c:14:9a:da:
                    38:a9:bd:31:13:e6:37:24:6d:e8:58:bc:07:78:94:
                    fe:5c:42:00:20:fe:d2:0a:f4:69:4c:0f:40:8e:83:
                    06:9f:fe:b7:86:a6:1c:1e:82:3d:b2:bd:76:b3:8a:
                    2c:f1:e5:8c:24:63:23:35:43:45:73:3a:ed:c1:48:
                    97:8b:83:c8:3a:46:49:e7:08:2b:c7:b5:46:39:e3:
                    45:ce:1d:1a:3d:13:5c:bd:80:3f:e2:79:27:31:d1:
                    77:3c:39:fd:c7:03:50:03:cd:42:b5:cb:6e:9e:6b:
                    dc:de:d3:4f:4d:05:ff:a4:c2:69:2f:0d:49:6b:9c:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CC:16:CB:40:75:4C:E2:93:3B:3C:1C:6C:50:FB:2F:8C:7C:26:4A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393be035-f403-42bb-8667-f8b643af501c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:5e:2a:d6:a1:80:f9:f2:5f:63:dc:bb:5a:3b:7b:38:9c:
         e3:2f:ff:f4:b0:47:1e:5a:5b:fb:7c:5b:32:63:6c:21:9b:77:
         b8:eb:c5:b4:52:3e:6c:5e:c0:a1:29:6a:b2:02:dc:99:02:25:
         e9:94:46:4d:3d:8b:a7:fa:43:20:b4:60:f9:ec:92:9b:67:2b:
         8c:26:9c:60:23:28:23:b3:27:5e:4e:f7:22:99:72:1b:1e:b3:
         8f:e5:92:ec:7e:bf:2c:73:c9:5d:a1:86:37:ee:47:29:30:7c:
         9a:22:1f:89:a4:82:34:41:c3:ce:09:1b:5d:71:a8:04:c4:1c:
         e3:2a:57:12:d9:88:09:30:0c:be:f4:bb:0b:9d:18:b3:e8:df:
         da:80:a8:03:18:5e:ab:1d:46:b2:fb:2a:40:64:d7:da:b3:22:
         6f:ce:4b:da:de:54:28:74:c2:60:ee:8a:97:46:ac:3f:89:7f:
         51:71:10:06:9c:73:65:8b:af:44:cb:ca:28:c1:fa:0f:89:86:
         da:f7:be:70:41:91:73:61:10:3c:56:63:e9:80:b4:57:7e:01:
         0b:13:43:fb:96:df:08:03:7a:85:be:c2:6e:04:ef:2b:99:48:
         cf:d2:62:84:d0:81:46:5d:a7:b1:04:64:14:cc:cb:58:c3:ab:
         f6:ff:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:03:45 2026 by rpki-client