Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e105846-3ef8-4d07-8a1a-67694ea9dedb.roa
File:                     3e105846-3ef8-4d07-8a1a-67694ea9dedb.roa (raw, json)
Hash identifier:          wX7LoYXCYa+h66qzCbsvSi0gUlexVxTPQhWr3nz2F5o=
Subject key identifier:   2E:EB:F9:0D:53:EC:2F:05:D0:D6:60:6A:14:C8:81:FC:E3:33:1E:C8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       279F48AEED68221250434AB8FC9543585AF52266
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e105846-3ef8-4d07-8a1a-67694ea9dedb.roa
Signing time:             Sun 18 Oct 2026 01:08:52 +0000
ROA not before:           Sun 18 Oct 2026 01:08:52 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9f:48:ae:ed:68:22:12:50:43:4a:b8:fc:95:43:58:5a:f5:22:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 01:08:52 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=9713722e583713488f7060b928bf36d6550b8d3e614cc0903c0c770191ca07aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:76:f8:8b:2a:5d:f5:db:b2:08:3d:01:dc:
                    0c:d1:7f:90:d3:38:d1:9d:64:85:04:96:ce:36:92:
                    6d:d9:f2:c2:ee:b4:bb:dc:b9:b3:dd:df:b2:15:7b:
                    44:25:b0:9c:86:a5:d4:20:b1:e5:de:4e:74:1a:5c:
                    87:e6:88:77:58:13:95:ad:e6:36:23:7c:d6:17:67:
                    b2:f3:f2:98:21:59:dd:b0:5d:8a:bf:e2:e8:04:e0:
                    d4:74:68:3d:9e:29:54:29:7a:23:ce:4d:ce:83:cc:
                    e7:c1:f4:09:9b:ed:2d:f0:94:f0:59:48:8d:ab:7e:
                    1c:92:4f:dd:52:f2:9f:69:1b:4c:39:8c:b4:9b:6b:
                    da:a4:59:3e:e2:bc:f4:98:73:bc:97:3d:f1:a5:83:
                    2a:64:2c:84:3c:72:3f:00:83:27:72:3d:cc:fc:85:
                    0f:1d:f8:dd:df:7e:d6:48:7c:69:39:f5:6d:02:ad:
                    51:57:7b:34:ba:ff:3b:de:b6:7e:86:e6:be:b6:c2:
                    96:a7:24:bb:9e:9d:09:8a:ab:6b:82:71:1c:20:08:
                    3e:78:c4:25:37:86:01:cd:9a:86:5b:bf:11:43:0d:
                    cc:4d:3d:af:aa:0d:77:37:63:f2:89:76:05:8d:6c:
                    46:4b:eb:f9:c3:1d:ca:b5:e1:b7:6d:cd:cb:b3:41:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EB:F9:0D:53:EC:2F:05:D0:D6:60:6A:14:C8:81:FC:E3:33:1E:C8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e105846-3ef8-4d07-8a1a-67694ea9dedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:57:91:f8:25:43:89:67:83:3f:b7:62:e1:57:37:81:19:cd:
         02:d6:34:55:00:7e:b3:fc:08:1e:0d:df:b2:c5:76:69:a5:f2:
         94:de:3c:33:80:c1:44:e3:7b:88:ef:e2:57:74:80:94:31:a2:
         f9:0d:8b:93:16:65:f6:ab:58:64:c2:05:6b:8c:db:84:15:c0:
         d5:3e:52:95:52:97:7f:53:6b:80:ee:07:3a:fc:06:fe:5c:b6:
         d8:3d:73:04:c8:98:e3:03:3f:90:f4:54:39:1c:41:92:92:9d:
         9c:20:c5:23:36:0f:f5:17:1d:cc:dd:20:c3:d0:7a:75:b6:51:
         70:6d:8b:96:75:db:33:21:ef:4f:22:3b:f6:89:16:96:03:cd:
         05:1e:26:fe:29:9a:3c:ce:f2:e9:62:32:ff:72:00:22:9e:34:
         85:57:dc:3b:e7:4d:39:f8:e7:04:ee:72:5c:f3:9a:13:4f:42:
         f3:3d:20:4c:e1:24:2c:5e:69:ec:ca:ed:68:f1:fc:6d:e2:8b:
         ee:57:d1:f7:2c:bf:20:3f:ed:30:47:2a:0d:97:be:ae:87:6d:
         6d:c4:4d:e3:6a:f7:28:bf:0c:b9:2d:0c:cd:a1:09:dd:99:aa:
         75:a2:fc:b5:36:5a:7d:5a:8b:a7:dd:3f:08:9e:b0:02:a2:c3:
         3e:9d:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:29:07 2026 by rpki-client