Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92bd84f8-cbba-4591-82f5-747d7ed4019f.roa
File:                     92bd84f8-cbba-4591-82f5-747d7ed4019f.roa (raw, json)
Hash identifier:          Q5Z727Xw0Heo49plbjtrWn8FrPT7GkA78BrAe+DWFNs=
Subject key identifier:   73:16:6E:4C:45:92:04:12:07:B9:0D:93:09:37:9D:BB:C9:33:C0:CE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D2A4D701F5B90DDC979D356E1AE5762FAF39DAA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92bd84f8-cbba-4591-82f5-747d7ed4019f.roa
Signing time:             Mon 26 Oct 2026 02:20:33 +0000
ROA not before:           Mon 26 Oct 2026 02:20:33 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.180.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2a:4d:70:1f:5b:90:dd:c9:79:d3:56:e1:ae:57:62:fa:f3:9d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 02:20:33 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=ee81abc879ab0fa7be1270d22a19203110ff0f7e8417a89b0af1274eb26ae958, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:b8:94:e6:9e:6f:55:a9:e1:2b:a4:aa:7e:
                    11:2b:6a:61:99:5c:18:96:66:a6:d7:7c:c8:c0:05:
                    da:51:06:86:be:6d:3b:2f:31:66:6a:23:90:a2:1c:
                    7e:db:9e:e2:14:3e:b5:ff:2d:c5:50:52:dd:8d:ab:
                    6e:e7:7d:ae:c9:4c:c6:7a:a8:1e:14:98:c2:73:17:
                    46:ae:4a:d3:5b:14:92:b5:98:68:c3:07:e0:13:b4:
                    11:8c:c6:15:93:71:8e:1b:da:d6:0b:56:80:7c:3c:
                    9c:7b:75:c1:84:fc:dc:7f:7e:fd:e3:9a:c9:cf:53:
                    e0:6c:79:1b:5a:95:22:35:1e:5b:e0:4c:11:42:e5:
                    05:12:79:3f:75:54:51:3b:f8:8f:dd:54:5d:da:b7:
                    b4:38:0f:04:5a:8d:2b:a5:6b:50:96:b6:93:c5:4d:
                    26:e9:1d:46:6d:64:ba:a3:63:46:68:72:37:e2:d9:
                    76:74:22:f3:28:59:84:3b:14:22:91:06:16:4a:7d:
                    2c:3a:fa:fe:ed:cc:4d:cd:0e:20:fe:67:5b:3e:57:
                    ee:df:bf:d7:b8:ed:d6:2a:3a:ff:2a:20:b5:55:41:
                    ae:cb:d9:57:7e:20:9a:be:d7:99:98:2f:01:78:d6:
                    8e:6b:fe:46:f9:64:ce:b3:21:2f:fc:6d:9b:be:f2:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:16:6E:4C:45:92:04:12:07:B9:0D:93:09:37:9D:BB:C9:33:C0:CE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92bd84f8-cbba-4591-82f5-747d7ed4019f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.180.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         13:be:a4:6f:ab:b7:ca:2c:10:b8:66:b1:30:b3:8d:d1:5e:05:
         f3:e7:53:22:28:71:68:2c:e8:8d:a0:d5:42:c4:52:6e:da:8c:
         fa:7b:6e:85:05:19:d2:64:a4:31:b7:69:a1:2d:56:4d:7b:ac:
         d0:ac:ae:63:12:e0:fd:62:63:38:fe:ea:e3:08:23:cd:93:1e:
         37:ce:37:aa:b0:46:89:bf:58:68:8f:85:66:0e:3f:3f:81:09:
         9e:30:86:88:f1:f8:20:4a:92:7e:92:e4:ce:f3:20:d2:c5:71:
         9d:2e:3c:82:1d:98:67:2f:57:3e:e9:27:b5:ca:f2:9f:ed:95:
         0d:4e:ab:2b:e1:3e:46:fd:ae:b1:a9:b3:20:36:09:6c:7f:af:
         fa:04:69:5a:55:39:8a:8d:d2:bf:b7:43:7e:23:11:b9:43:02:
         e6:99:73:79:74:5d:70:c4:d6:c6:d7:8e:21:c0:23:9f:1e:eb:
         e6:bc:10:71:54:fd:5a:05:4e:74:d7:83:b2:f0:f8:38:36:8b:
         10:7f:49:48:17:52:c3:95:b2:06:f2:8f:06:fc:93:44:47:13:
         e3:bb:41:00:ce:93:06:fe:23:a0:d0:d9:72:f1:81:33:ab:47:
         04:af:b3:3f:4e:7f:7a:63:6c:12:ef:91:79:e4:fa:40:29:37:
         52:fc:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:09:55 2026 by rpki-client