Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d30dad-d60c-48cf-b4f1-f5ce79e0e9ba.roa
File:                     46d30dad-d60c-48cf-b4f1-f5ce79e0e9ba.roa (raw, json)
Hash identifier:          Rhxj1jcSSJ244+DtlgZ0oR89lmQGq06gWlF9DPxqNQw=
Subject key identifier:   3B:EB:E4:78:EC:89:F2:18:76:A2:69:E3:34:86:18:66:80:63:58:19
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       353863E9CB5BCE0041034A04C6252CE877248EB7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d30dad-d60c-48cf-b4f1-f5ce79e0e9ba.roa
Signing time:             Tue 19 May 2026 02:10:09 +0000
ROA not before:           Tue 19 May 2026 02:10:09 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.245.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:63:e9:cb:5b:ce:00:41:03:4a:04:c6:25:2c:e8:77:24:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 02:10:09 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=d6637652348b7661320f52be58e6a3290bd828b06af3168e9435580b46118d44, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:ab:33:ea:d4:b0:03:d4:79:1c:a3:85:23:
                    de:91:2b:30:90:4f:4f:a6:2d:25:c3:13:e9:a4:74:
                    20:64:c7:0f:48:98:3d:81:d9:75:c1:70:1a:79:6a:
                    b8:15:94:5a:24:63:e9:43:84:69:2c:15:17:6f:7d:
                    c2:9e:05:97:46:4d:d3:bc:47:a5:92:83:08:48:4c:
                    73:86:1a:db:bb:31:0e:e2:65:30:6b:3f:22:ee:15:
                    40:03:ed:49:ac:7d:72:6f:40:12:34:19:5f:24:b2:
                    84:f1:9b:04:14:49:83:75:25:1f:1d:cd:9f:33:15:
                    0e:c6:7e:b8:07:07:03:69:94:69:94:63:3d:7d:67:
                    31:94:70:73:4a:e2:d4:ce:71:92:3a:4b:67:18:aa:
                    a1:70:0e:7d:8f:bb:44:f1:cf:68:48:62:b7:34:4a:
                    cb:96:b8:61:24:18:7f:89:a2:2c:bf:18:37:2c:94:
                    34:45:6a:81:84:4d:e5:31:e4:49:a2:24:93:80:86:
                    49:9d:22:66:cf:9a:51:18:7b:60:c6:d1:d7:2c:fc:
                    22:a4:6f:2e:a9:53:ec:3a:e5:1a:1c:d5:24:c2:37:
                    bc:c8:fa:d7:e0:c8:e0:e7:1d:bf:84:08:64:82:2f:
                    0c:b7:11:f6:bc:1b:d1:62:69:46:f1:56:47:57:92:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EB:E4:78:EC:89:F2:18:76:A2:69:E3:34:86:18:66:80:63:58:19
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46d30dad-d60c-48cf-b4f1-f5ce79e0e9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:fa:84:9e:c2:e1:02:c7:1b:c5:25:26:cf:b6:5c:91:8c:
         87:b5:2c:c8:48:35:b6:8b:b1:0a:5d:c5:33:78:b4:7b:69:b9:
         26:c4:df:3d:ee:cd:29:cb:88:93:87:37:c2:4e:92:3b:90:70:
         9c:dc:60:78:c7:a5:f6:f6:00:fb:f2:d4:f8:29:5e:69:23:c1:
         73:60:7c:da:87:57:f0:31:4f:6d:68:09:d1:97:c6:fa:8f:9b:
         55:6b:a5:e4:01:98:00:2a:bf:8f:49:ec:13:af:3c:96:99:b2:
         3b:6e:9d:72:15:e9:35:ec:10:bd:4a:79:0c:61:cb:66:09:14:
         ee:05:37:c3:fa:8d:0c:14:f3:63:25:8b:ff:13:88:24:1c:6d:
         88:a3:bd:dd:34:47:4d:af:fe:da:f0:05:0e:2e:4a:a5:52:27:
         c4:6a:4a:d6:48:2e:f2:fc:0a:04:46:62:79:e3:71:9f:5a:4c:
         3e:10:cb:1f:b6:bd:b4:c6:ff:bf:3f:c2:aa:7a:7f:2e:0b:d1:
         df:f5:37:90:62:39:e2:84:b5:e0:4c:7b:ee:4d:2b:ad:7c:1f:
         51:11:ad:af:2e:f1:b9:1c:b6:af:72:97:6a:b1:a3:20:35:42:
         e8:19:b9:b1:45:f3:f3:ae:70:c3:28:b4:21:90:7b:e0:86:fc:
         29:78:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:51:19 2026 by rpki-client