Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa
File:                     52aaa874-d629-452b-b3e0-9cf494e24a6c.roa (raw, json)
Hash identifier:          q5bEnV9AOP/hY1xP4ghrGL4sBV4HrDm8m9oYH6GqjIg=
Subject key identifier:   B7:3D:E4:39:67:8B:D8:8B:51:14:31:8E:28:53:50:E0:BC:65:B1:67
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6C6E854247727910BF98CEFE1B5CB0E12C51223B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa
Signing time:             Mon 26 Oct 2026 03:02:42 +0000
ROA not before:           Mon 26 Oct 2026 03:02:42 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.236.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6e:85:42:47:72:79:10:bf:98:ce:fe:1b:5c:b0:e1:2c:51:22:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 03:02:42 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=64bfec1463c00b8255c7470a125d885c452880731ece8c0da0c21cc0defe8e5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:1c:02:b2:39:b8:39:05:3c:73:31:d4:c0:
                    50:7d:0f:76:ee:ea:75:1f:f9:2a:6f:67:3b:46:1c:
                    ce:88:0e:dd:c1:5b:f5:48:0f:f3:9a:e6:a2:02:3e:
                    80:6d:20:90:b2:97:6e:11:2a:2b:ee:42:e9:b6:d5:
                    b1:d0:4f:e5:89:46:5c:98:a5:6e:66:86:d9:f9:06:
                    0c:8d:2d:42:10:e2:b0:8c:47:c5:cd:c9:2c:03:a3:
                    63:98:84:12:c6:03:95:ff:13:1c:ec:e6:08:f6:28:
                    df:cf:7d:c2:af:c6:36:35:e7:3b:d1:18:b7:2e:94:
                    8e:cd:d8:e8:9a:4b:25:3e:48:ad:ba:9c:9d:68:28:
                    b0:11:dc:a0:67:65:90:eb:5e:42:80:b0:97:d5:88:
                    19:33:30:77:26:67:b4:85:75:b6:43:18:12:b3:fd:
                    3c:49:39:88:e0:2f:9b:75:27:c2:c0:f9:c4:d6:57:
                    dd:2c:77:8f:10:88:04:68:53:f9:81:69:27:6d:8c:
                    53:51:30:f1:34:7d:1b:71:cc:21:67:15:31:64:e6:
                    b0:13:7d:06:8f:87:3b:5d:20:84:d9:c0:1d:65:51:
                    12:50:bc:f2:9e:70:14:96:37:7b:22:2d:5a:29:b3:
                    7c:a9:f9:43:a7:03:f6:24:eb:cc:9a:1d:87:99:ef:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:E4:39:67:8B:D8:8B:51:14:31:8E:28:53:50:E0:BC:65:B1:67
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:97:ee:82:18:ee:2c:f5:a2:0c:c2:ee:49:e6:ba:78:e7:
         79:af:29:fd:fe:e1:b9:d0:00:59:1e:88:34:dc:c0:14:c2:ae:
         66:a7:e2:8f:a7:58:93:62:cb:fb:d1:fc:c4:9c:82:ad:82:7e:
         55:4e:c4:11:58:f6:3f:4c:05:37:6d:00:6b:e7:d9:8d:77:28:
         8b:58:37:19:f1:bf:e0:c7:6e:a0:23:30:b4:3b:71:21:f5:ad:
         9d:d9:b8:dd:93:99:9c:7d:c4:59:c8:80:31:be:f8:53:f5:d3:
         25:4c:a6:85:9b:48:1b:b8:a7:69:12:7b:0c:09:42:2f:f1:ee:
         82:dc:68:d7:d6:26:72:05:0f:57:63:ac:9b:30:7a:42:3e:27:
         5f:75:12:6b:d1:20:9a:4a:ae:3c:61:b6:02:bf:b0:4f:a7:19:
         ca:e3:8a:c4:04:d4:ef:35:b9:38:df:a6:2e:98:fc:70:d4:eb:
         b0:f4:54:32:61:ee:03:bf:74:6f:9e:c5:06:a4:a0:85:cc:49:
         b9:34:80:9f:8d:e6:76:5d:87:f8:2a:38:d9:c5:fb:e0:52:21:
         45:9a:29:67:46:a3:c4:83:48:f3:3c:4e:52:a1:52:2b:76:1f:
         56:fc:31:f8:87:21:cf:0d:17:76:e9:30:6f:be:b0:fc:06:54:
         a0:84:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:06:58 2026 by rpki-client