Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa
File:                     9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa (raw, json)
Hash identifier:          GenoBy++apkpTjxaYeLCWsYbL7LUM1iYAkbf/SGQs0k=
Subject key identifier:   9B:41:4D:88:50:6A:3A:98:8F:92:19:25:79:27:27:7E:6C:A6:A4:B0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7E615EABB8CB502BE049A794DE640AD06F078930
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa
Signing time:             Mon 26 Oct 2026 03:31:23 +0000
ROA not before:           Mon 26 Oct 2026 03:31:23 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.184.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:61:5e:ab:b8:cb:50:2b:e0:49:a7:94:de:64:0a:d0:6f:07:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 03:31:23 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=7c4a57fabd0acf554eba28458643111742efb9fc929f0a21706b4199ba57e953, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:bb:68:87:26:5f:27:a0:dd:d7:fa:c4:95:
                    8f:8f:7d:2b:fb:32:25:95:61:d0:71:f1:e5:45:b1:
                    b3:55:9c:7a:2c:96:81:ea:cf:51:60:cd:5c:8d:35:
                    c1:3d:13:0a:67:67:42:78:a7:c3:6a:f2:5d:de:48:
                    b4:92:50:1a:d6:bb:3e:22:60:ba:97:99:ab:49:91:
                    6c:78:c7:f2:72:0e:90:22:1d:87:9d:07:f0:71:73:
                    9a:bb:8e:09:73:da:e8:b5:d5:03:66:0f:d5:0f:43:
                    f4:22:4e:1e:65:63:b3:11:bd:22:37:46:ae:f0:e5:
                    22:e4:07:95:65:9d:01:78:24:7b:2f:40:3b:41:58:
                    8a:84:b0:25:e8:75:ef:50:1b:a7:6d:87:d6:c4:95:
                    a0:09:7a:2e:c1:b1:03:7d:3d:8e:34:3e:1a:b7:13:
                    11:ef:e4:e2:7d:7d:a1:e8:36:c6:fc:e5:b8:8d:59:
                    77:49:e9:54:47:68:d8:a7:3a:00:dc:d7:ec:de:8d:
                    d6:a7:3b:bc:f3:21:61:04:47:93:ab:1f:cd:a1:cf:
                    b6:fb:7e:52:97:1a:f0:89:57:d3:3d:5c:f1:f1:72:
                    a4:0d:7c:b6:1e:1d:ff:9c:ce:ee:a4:1f:30:e2:22:
                    42:3c:91:81:9d:81:ac:3f:be:c4:6e:7d:a1:62:52:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:41:4D:88:50:6A:3A:98:8F:92:19:25:79:27:27:7E:6C:A6:A4:B0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.184.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:08:f2:af:63:11:1b:5d:8b:bb:ac:c7:76:93:f2:ab:11:
         2a:5b:77:a4:4f:f7:be:8e:83:1e:6b:3b:98:39:42:db:b0:9f:
         2f:03:bf:bd:f5:b6:59:21:6a:83:1a:ca:cd:35:39:28:0e:c1:
         62:4e:eb:32:d2:fb:5e:22:2c:c2:9f:3e:22:35:90:33:e5:e0:
         ae:94:b1:44:a0:c9:d2:47:bf:a4:fc:10:8e:f9:c1:79:1f:ae:
         de:f9:31:c9:01:8b:91:7e:31:13:16:08:91:a2:ae:db:1c:56:
         ba:f3:78:f7:d2:f6:59:b0:49:82:a2:78:3a:76:a2:08:c3:58:
         7a:82:90:53:bc:7f:7a:26:d4:e3:d3:da:ff:a1:5c:f7:3d:52:
         ce:a1:89:6b:25:8a:fa:d3:00:43:5c:cf:5d:c3:cf:c3:56:cd:
         35:8b:ec:c1:2c:c4:cf:79:ed:7f:f3:f0:b6:ba:da:f9:33:46:
         cc:1d:03:5b:12:94:76:3d:c1:df:12:cd:61:95:06:11:27:72:
         a5:2e:45:5a:d9:db:76:60:00:4c:56:a2:08:a6:97:1c:b8:6c:
         95:7e:32:99:54:53:0d:91:c7:a5:4f:ec:7b:46:15:9b:a3:8b:
         f8:9e:67:e2:e9:03:a3:6a:9c:a5:12:1a:25:6d:91:a0:30:ae:
         cc:fa:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:14:06 2026 by rpki-client