Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa
File:                     9a48cca5-101e-49e1-b644-98c35eb681fa.roa (raw, json)
Hash identifier:          JpYaKUt6e7CIUiAnGxQakZpRNTCNOX1/0tGK6bbB8dc=
Subject key identifier:   F3:C9:7A:49:07:AB:B3:7B:81:58:D2:DB:07:44:B5:6D:AA:4E:0B:2C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51DC6DCA633A417821D287AA3C826E9793F50AA4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa
Signing time:             Thu 15 Oct 2026 02:40:08 +0000
ROA not before:           Thu 15 Oct 2026 02:40:08 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        18.88.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dc:6d:ca:63:3a:41:78:21:d2:87:aa:3c:82:6e:97:93:f5:0a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 02:40:08 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=1a3f09f58cad4ea59639fd004f8bd41b3c4ff2d1c4b7e465fb2faab0ad497561, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:05:be:fe:87:6b:53:60:a0:8c:6d:bd:4a:1e:
                    42:8c:ea:bf:dd:24:fa:6b:8f:36:6b:6f:5f:5e:24:
                    2e:5b:6c:7c:b6:51:68:bc:d6:fc:e0:22:b5:58:bb:
                    29:78:48:5d:a4:c5:b3:6a:a7:c6:d7:0b:15:7b:27:
                    79:62:4f:57:de:83:19:24:fb:f4:a3:8b:85:19:76:
                    65:4c:29:c2:db:5b:25:a7:24:3a:cf:d6:fa:39:40:
                    69:0f:03:c9:36:d0:4f:97:5d:50:95:f6:73:17:df:
                    c8:1d:92:9b:98:57:b1:eb:bb:59:d7:b1:57:17:b1:
                    a0:61:cd:09:3f:69:17:8a:92:55:2b:a8:db:40:3e:
                    0c:15:19:07:73:52:db:95:29:57:72:41:62:3b:db:
                    81:72:60:46:7a:c8:65:71:c5:a2:c7:1b:44:3d:9c:
                    54:02:31:87:11:08:70:e4:51:70:6d:17:7b:40:b3:
                    85:03:07:7d:52:95:c5:a9:c8:f0:3b:8c:37:ad:6f:
                    14:41:13:41:34:c2:f6:7a:be:63:72:78:e8:ed:b5:
                    60:bc:0c:5b:48:d7:39:00:e1:52:78:0a:d9:1c:76:
                    c1:f2:ff:bb:61:34:07:36:89:c8:72:eb:ac:d9:24:
                    1a:a3:e4:d5:bd:74:df:cc:4c:02:9a:5e:50:d2:5a:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:7A:49:07:AB:B3:7B:81:58:D2:DB:07:44:B5:6D:AA:4E:0B:2C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:21:95:fc:e1:1c:a8:e7:87:69:dc:bc:4c:31:11:20:82:
         5d:66:3b:fb:be:e3:e2:ca:02:aa:01:62:0b:4e:df:a2:49:c6:
         0b:62:88:a3:a6:76:da:46:eb:b3:91:65:81:ba:bf:e3:23:63:
         13:e7:12:17:96:2f:e8:13:a2:6d:bc:59:95:99:ac:49:98:e8:
         39:b2:ba:ad:a7:03:7d:b1:48:22:1a:de:e0:98:45:c9:6a:eb:
         c5:e0:df:2c:3e:53:eb:e5:33:4b:0f:26:5e:26:56:7d:85:ec:
         4a:ff:e7:20:56:93:7a:3a:07:07:0b:5a:5c:8c:56:e3:2c:5c:
         0b:2a:2d:02:27:c0:c7:d5:25:57:56:63:94:a3:2c:13:15:97:
         64:e3:f4:93:dd:ca:7e:4d:6c:57:11:b8:d4:31:16:1d:a7:64:
         55:c0:86:df:d7:61:05:71:dc:c3:1b:8d:b9:de:0d:a1:ce:63:
         c5:07:8e:09:82:1c:93:c9:ed:c6:f6:4a:ac:04:e5:f5:4e:ce:
         12:21:6d:10:22:0f:74:ef:51:bc:ff:56:4d:14:2b:f4:ef:79:
         68:ed:84:30:8a:4d:43:79:e7:84:9e:94:7f:8a:1b:69:39:14:
         3b:74:22:11:ff:ff:42:0e:aa:36:89:0f:fd:9a:1d:91:95:57:
         3a:40:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 22:05:52 2026 by rpki-client