Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa
File:                     805c8a20-11ef-4716-a168-844aa023f13f.roa (raw, json)
Hash identifier:          1IuyWUkJ6d9by8OWq/a4Ygy7xMRX7zxK/86wiWFpLAY=
Subject key identifier:   DC:1E:6A:25:B7:EC:EA:5F:2F:23:12:65:FC:E8:E6:B5:DD:67:4F:CA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7BCC699F284636B83A5153CBF2048AEFE5782656
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa
Signing time:             Mon 26 Oct 2026 01:51:09 +0000
ROA not before:           Mon 26 Oct 2026 01:51:09 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.169.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cc:69:9f:28:46:36:b8:3a:51:53:cb:f2:04:8a:ef:e5:78:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:51:09 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=1999e761a7983b98ba41444589e83de762117af89f9a7751dbac07202ca11862, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:b7:5a:cf:a9:4b:63:2f:ae:59:14:5a:a0:
                    a4:a5:b4:d3:5b:58:4f:1c:15:6b:6d:dd:10:37:20:
                    67:d2:15:1c:92:12:f1:ef:fd:f1:f2:b0:1e:60:5a:
                    6d:f7:57:f3:f2:6e:4b:ce:2a:5e:67:5f:88:1a:80:
                    4b:35:3d:be:1e:97:10:b8:af:a4:4a:a1:ba:69:0b:
                    b0:e6:05:81:0a:e5:0d:a4:82:ec:23:fb:2d:18:5e:
                    77:9c:99:e9:84:78:1a:91:09:6a:38:50:79:fd:87:
                    40:3e:d8:41:8e:b9:26:4c:67:d4:1a:89:bb:03:9e:
                    4f:c1:eb:6c:46:b3:35:8b:b4:85:1a:2b:79:6c:07:
                    77:d9:20:f5:86:8f:ff:38:a3:2e:b1:13:aa:54:8a:
                    5f:1c:13:b3:48:2c:b7:ac:b3:a0:3e:3a:7b:60:eb:
                    86:04:09:5c:74:80:23:1a:d9:13:56:12:cb:66:39:
                    be:9e:8c:04:0e:cc:3d:1c:26:85:03:7a:b4:b6:22:
                    31:a3:1e:31:cd:1f:fa:70:c4:1a:e5:5f:7d:fa:17:
                    77:e4:cd:f6:0d:0e:68:c2:19:06:94:88:89:7e:b5:
                    96:34:61:75:fe:88:25:9f:b9:56:9e:7c:5d:b8:c1:
                    50:be:b4:95:1d:aa:9f:00:34:d5:a6:86:81:a2:03:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1E:6A:25:B7:EC:EA:5F:2F:23:12:65:FC:E8:E6:B5:DD:67:4F:CA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:2b:8f:53:d2:dc:cf:cc:e9:fe:f9:62:19:07:17:68:d7:
         0d:b6:ea:3b:95:41:15:92:48:20:c7:ee:3c:01:cb:34:33:31:
         7f:9f:3d:d2:c0:33:8f:c4:86:2a:4a:7d:0b:72:18:a4:28:16:
         53:fe:77:01:40:08:86:a0:26:ca:42:46:e5:6f:b5:aa:c6:1a:
         75:d6:2a:1f:ca:1c:ad:9b:0d:fd:9e:db:f7:94:26:da:ff:3c:
         0a:7d:55:ee:20:fe:cb:a3:76:c7:25:22:7b:f0:41:64:4f:31:
         70:9c:63:1a:3e:90:50:23:a8:50:b1:2e:80:b3:f2:8d:2d:f1:
         4d:57:00:c2:b2:ec:c1:c3:55:2b:1f:54:16:64:33:37:71:21:
         38:4b:bd:c7:19:94:c0:e4:e9:eb:b6:87:19:78:6f:84:10:db:
         52:8f:8e:e6:d5:9f:e5:5a:f4:ff:72:11:72:31:3f:0a:50:93:
         3b:c7:69:05:cb:36:50:ed:12:42:a3:75:c5:a0:e6:76:a2:50:
         d6:26:a9:6f:30:31:17:7c:b7:6b:4b:fa:b8:8d:cc:ff:73:41:
         cf:bd:3e:94:6b:3a:a7:34:40:b0:d6:73:76:e5:23:51:29:ad:
         db:f2:d8:94:59:87:90:e0:27:1a:1d:f2:ea:d7:30:ff:00:72:
         6c:1b:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:09:03 2026 by rpki-client