Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393e42f4-1cf7-4a80-9fe3-cc286c38b039.roa
File:                     393e42f4-1cf7-4a80-9fe3-cc286c38b039.roa (raw, json)
Hash identifier:          fY2bFm1/qx17JgfeVIbhfyC9DXF2g49eJkQzquGHgek=
Subject key identifier:   56:58:3C:05:E4:3B:2A:04:C3:E6:E1:7C:DC:3B:93:CE:35:81:96:4C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7965DAD9A234E4437FEA04DF5E2725DF0C9E65B2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393e42f4-1cf7-4a80-9fe3-cc286c38b039.roa
Signing time:             Sun 18 Oct 2026 00:50:38 +0000
ROA not before:           Sun 18 Oct 2026 00:50:38 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:da:d9:a2:34:e4:43:7f:ea:04:df:5e:27:25:df:0c:9e:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 00:50:38 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=fd2401dd88b74831b38a24b842d830f67c8047f797fa187a8a4026d7f2e09540, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:8e:b4:47:0d:ef:c2:79:ef:55:a4:a9:c8:
                    55:dc:15:6f:2f:14:b7:39:b4:b8:d6:82:f8:77:ab:
                    27:1b:7b:72:d7:dd:bb:a9:66:c2:ee:cf:34:2f:98:
                    5c:17:af:6b:97:c7:1f:f5:0e:c5:5b:54:47:b2:c7:
                    ac:10:82:5a:fe:a0:41:bd:5a:74:e6:b2:e4:69:01:
                    18:66:0c:61:35:d8:fc:e3:60:63:8f:83:2b:0f:b7:
                    60:b2:66:42:40:55:08:f6:1b:35:a7:ab:99:7d:a8:
                    e6:65:53:46:19:c5:52:a9:dd:4f:fe:34:b7:5a:0d:
                    72:97:b1:40:55:05:d0:86:3f:12:86:44:e4:06:06:
                    1d:9e:aa:92:d0:d2:81:db:93:1e:8c:d0:f9:b5:1c:
                    ce:fc:37:1a:19:76:bd:fa:db:a2:c5:c2:76:b9:dd:
                    17:b3:be:d6:16:66:15:23:54:83:3c:25:b2:8d:e8:
                    28:2c:88:21:45:d0:89:de:f0:15:59:9b:e0:24:4e:
                    4c:64:81:e0:f2:d4:a7:52:07:35:69:50:83:73:33:
                    af:b7:59:07:a3:89:ee:30:41:13:3d:ab:37:14:d0:
                    be:8a:e4:95:5e:8e:b5:5d:b1:20:01:52:32:18:2b:
                    1b:5f:35:77:6a:1b:ff:04:07:fa:86:ae:ce:7e:30:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:3C:05:E4:3B:2A:04:C3:E6:E1:7C:DC:3B:93:CE:35:81:96:4C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/393e42f4-1cf7-4a80-9fe3-cc286c38b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:c1:b2:7c:10:c6:d6:f7:78:aa:b7:7d:af:d7:71:0b:2d:
         4d:e4:56:6b:b5:99:c5:ea:8f:bd:bb:1e:55:23:6d:ff:f6:d1:
         4c:be:18:e3:0f:5f:d2:53:92:0b:c1:8d:f1:f0:39:06:57:76:
         b1:34:df:e7:61:41:90:e3:20:bd:00:bf:39:87:1f:e0:44:3c:
         10:98:e5:48:79:46:5d:fd:7b:8c:05:40:44:44:fa:c4:b2:27:
         22:72:ec:6e:d0:2a:23:8f:26:f0:75:12:31:63:b2:df:08:0d:
         80:a0:53:d1:65:b3:ca:ae:c2:c6:bb:85:28:06:10:37:ef:fe:
         51:c3:e1:48:1b:eb:28:76:5f:b3:94:8b:28:fb:74:c1:62:81:
         33:34:8c:94:ef:8b:46:58:4b:7b:9d:f6:ba:4b:0a:75:a8:8d:
         5d:d6:4e:c1:09:16:c8:e2:79:34:2a:5d:5f:34:fa:3c:50:12:
         26:dc:f8:f9:dc:f8:7e:64:20:d8:37:9d:72:dc:d9:3b:d6:42:
         e6:0a:05:a9:4b:74:fc:9d:52:8e:eb:39:e7:61:2e:46:85:2a:
         88:d5:c8:68:a2:5a:ec:9a:55:2b:ef:12:2e:68:d6:f1:7a:8b:
         1b:1f:83:d4:18:8a:d8:bb:71:e8:93:48:f1:dd:b7:ab:5e:3b:
         aa:bc:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 03:41:21 2026 by rpki-client