Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa
File:                     7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa (raw, json)
Hash identifier:          Vw8h9IeN1zZw9mitjGthYpzYNFqfak1dPhmPKLBXKc0=
Subject key identifier:   45:D4:51:05:67:C2:5C:53:03:A2:04:78:E0:20:90:6F:9C:8B:4D:06
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       365E7587ED0EF639EE8A7A2BFAE69391D1DB2EA4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa
Signing time:             Tue 17 Feb 2026 00:31:14 +0000
ROA not before:           Tue 17 Feb 2026 00:31:14 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.221.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5e:75:87:ed:0e:f6:39:ee:8a:7a:2b:fa:e6:93:91:d1:db:2e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 17 00:31:14 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=405d9c9302abfbd1a93f5f2c9f30ff6b228d5ec6ed5265e175cbee9b0ede04c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:4d:80:e5:8f:ea:8f:de:a9:a6:7f:94:17:
                    c4:30:36:10:a7:ec:6c:c0:20:3b:f6:38:b6:b8:68:
                    52:a7:09:70:26:b8:d7:26:df:8e:4e:95:1f:05:91:
                    ba:72:18:35:0a:31:56:b8:11:05:98:e7:01:68:da:
                    91:cc:2d:68:d7:7a:72:24:4e:09:10:18:22:e5:de:
                    13:cc:20:a1:5b:90:75:b5:00:18:c3:68:e8:bc:8c:
                    79:0a:60:6b:3c:14:3e:5e:cf:90:77:9d:7d:d0:b8:
                    bf:61:ed:55:b5:81:16:10:05:1d:c4:2c:54:4f:5a:
                    04:92:3e:79:59:84:49:79:77:4f:ed:a4:fb:f6:85:
                    02:a4:35:1b:47:d3:db:37:ee:d3:cf:d5:e0:f2:fd:
                    f6:4d:ec:7d:b8:e0:2e:78:85:42:c4:f5:6a:18:94:
                    30:92:28:54:05:10:2a:89:a3:ab:d0:65:71:10:83:
                    40:5b:a6:ff:79:a0:10:b5:06:b8:3a:8b:17:07:a8:
                    1a:8a:8b:fd:92:c8:33:f4:a9:b3:fa:97:48:09:ce:
                    ea:0c:02:9a:50:6e:a5:8b:82:ba:da:3d:21:b2:04:
                    7f:5c:a6:4c:f1:ea:1f:00:1d:53:9e:1d:5c:40:cc:
                    d4:f5:50:72:34:16:48:74:f6:69:cb:00:6d:b3:82:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:51:05:67:C2:5C:53:03:A2:04:78:E0:20:90:6F:9C:8B:4D:06
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:c3:c4:5f:70:68:c5:7c:28:33:f1:35:fe:c7:cc:2b:1e:
         5c:58:58:03:5e:be:88:5d:c8:8d:bd:39:a8:c2:dd:36:c9:ea:
         8d:c6:30:ed:8a:a0:1d:1c:14:ec:2b:b9:13:d2:13:93:56:c5:
         09:04:64:47:6a:58:5a:bc:59:49:0f:73:ee:3b:8e:47:30:b4:
         f1:38:f5:97:15:25:56:9e:3e:af:0b:6e:90:a7:f0:55:21:d9:
         ae:f9:5e:88:62:93:5f:44:2c:72:5d:bc:54:0f:a2:e9:60:dc:
         1b:f5:99:00:5a:81:45:f3:71:e9:92:82:c3:77:6b:e1:53:e3:
         05:95:74:0f:02:42:ca:18:04:14:02:42:0e:fb:11:c6:e4:6b:
         6a:19:eb:a1:2f:04:18:51:e0:50:93:4e:cd:d6:b9:91:3b:bb:
         4b:02:22:46:fd:35:41:e8:1e:e1:47:1b:4f:48:26:cc:d9:bc:
         5b:6a:d2:63:16:fe:53:5f:25:4d:07:3e:13:01:fe:45:14:59:
         ea:4e:c6:32:bf:c2:39:41:c5:de:da:ed:80:f3:91:2a:19:0f:
         f3:b6:76:19:6c:ca:88:0a:bf:da:cb:53:12:63:5f:55:f6:1b:
         c9:bf:48:97:ab:57:9c:b2:9d:f8:0c:56:8b:70:dd:87:12:6f:
         f9:4b:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:39 2026 by rpki-client