Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a74634c-60b5-46f2-b644-279e5bada32c.roa
File:                     4a74634c-60b5-46f2-b644-279e5bada32c.roa (raw, json)
Hash identifier:          13PR6jF6Hl9Tf3o/5xcX1fcqdDGWmFWA0Gjmwa+dqW0=
Subject key identifier:   0F:CB:F7:21:7B:B1:8D:F1:EB:15:AC:3F:71:9E:DA:11:7E:2F:82:54
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       64895B74A4939AF6BE32BD89CA9280EA2A67281F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a74634c-60b5-46f2-b644-279e5bada32c.roa
Signing time:             Mon 26 Oct 2026 01:10:44 +0000
ROA not before:           Mon 26 Oct 2026 01:10:44 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.132.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:89:5b:74:a4:93:9a:f6:be:32:bd:89:ca:92:80:ea:2a:67:28:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:10:44 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=94700ef224fab5d25b2cf8caf87e621465855024890776dce61847fd4877c60e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:d2:18:dc:63:ec:ef:fc:cd:5d:0e:c3:b8:
                    db:7d:8c:38:71:8a:8e:fe:36:78:51:5a:92:81:15:
                    7a:f2:d5:0c:8f:d8:78:b0:2c:7d:5f:86:03:ae:65:
                    4d:80:f1:ed:3c:1a:4b:ec:c6:59:f1:05:9b:24:0c:
                    32:d9:e4:3a:af:13:89:ae:2c:47:90:5e:52:93:4d:
                    b0:48:50:b5:39:e5:7d:80:88:b9:ba:1a:6b:3d:39:
                    c3:f3:10:0e:f1:52:1e:9d:c2:04:ce:b0:4e:c6:c5:
                    ea:0d:62:32:96:a1:bb:5f:40:f2:3e:c1:96:09:50:
                    f9:6d:49:27:b6:de:06:47:66:f6:80:d6:8c:1f:d5:
                    6d:b6:5a:a6:5f:fb:28:14:c3:97:cc:30:02:15:b8:
                    e2:ad:6a:c7:ac:e5:91:43:2c:17:82:50:fd:e9:b1:
                    4f:47:c4:89:c2:6c:60:c2:66:9b:8a:1e:5b:30:fe:
                    5e:db:76:b2:c4:2a:ea:36:b6:5c:2e:ef:60:e4:58:
                    66:94:a3:3e:c7:4f:9d:e5:d3:ad:93:8e:2e:33:69:
                    c6:dc:01:bf:63:85:43:a3:c2:d5:0d:12:54:17:de:
                    ba:8d:b0:31:91:44:71:03:b6:fd:b7:4e:c8:64:f5:
                    03:1d:b1:35:8f:7d:27:8d:ab:f8:b0:a2:fd:8f:2a:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CB:F7:21:7B:B1:8D:F1:EB:15:AC:3F:71:9E:DA:11:7E:2F:82:54
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a74634c-60b5-46f2-b644-279e5bada32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:52:0b:55:01:7b:38:5e:fa:b1:e6:57:b0:c3:bd:73:0d:
         9e:b8:60:f3:27:c2:35:31:51:33:92:df:29:30:bd:81:b7:2c:
         7e:86:2c:0a:5b:ee:db:89:04:e3:ac:ad:91:e2:33:78:30:8b:
         a7:06:4a:53:4d:e6:63:a5:f8:b2:c3:91:52:8f:86:b4:34:55:
         71:13:f5:60:27:31:54:fc:22:39:9f:e1:f5:12:54:35:79:b1:
         2f:6d:4e:1c:51:f4:3f:b3:13:9d:50:65:d2:4b:59:d4:3b:33:
         c9:37:57:0f:69:53:59:59:24:82:7d:11:f1:78:8d:c1:40:de:
         7b:ad:f0:d8:7e:2a:b2:a9:b5:d4:f4:bd:4a:c5:45:e6:d1:1c:
         da:a9:4a:75:42:16:07:d8:6f:a3:f5:d2:af:79:65:31:93:bc:
         94:50:02:04:37:97:a0:0d:49:b9:8f:90:8b:57:25:c5:3a:02:
         c4:69:44:48:af:67:d8:91:86:d4:ec:7f:d5:a4:70:a1:ed:aa:
         ac:54:88:0c:c8:15:3b:7d:06:f1:b6:0c:de:a1:fc:9a:b0:37:
         da:c3:6f:38:53:ca:3f:0f:38:18:80:f2:e6:e1:c5:a5:02:41:
         ec:74:c9:0c:43:9a:fb:38:91:a3:30:dd:44:1a:0e:c9:89:a8:
         a3:4f:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:08:37 2026 by rpki-client