Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a74bdd9e-0e86-4280-9653-839c7cab021b.roa
File:                     a74bdd9e-0e86-4280-9653-839c7cab021b.roa (raw, json)
Hash identifier:          fRxZac1s67JuhKYJrUPw00LJqFbp47CJ0hkwBrv53Bg=
Subject key identifier:   19:29:69:F1:0D:72:33:22:6F:1A:E0:65:47:47:9B:B7:90:97:B7:E5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5342C25287F1EC4732E8006502D8D1014EBFEC18
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a74bdd9e-0e86-4280-9653-839c7cab021b.roa
Signing time:             Sat 28 Feb 2026 02:20:44 +0000
ROA not before:           Sat 28 Feb 2026 02:20:44 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.140.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:42:c2:52:87:f1:ec:47:32:e8:00:65:02:d8:d1:01:4e:bf:ec:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 02:20:44 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=ce29796d1f42a4d469c31839c22ad54d05d26e539228f73e63a972b8f42a112c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:96:83:c8:6c:c2:41:48:3c:d8:19:95:9d:
                    0c:dc:06:6d:05:98:18:65:d2:00:27:52:31:be:0c:
                    69:d7:ee:6c:dd:16:80:0e:8d:c4:77:2b:cf:e6:bd:
                    ca:08:c1:5e:f3:59:e2:46:a5:14:31:0e:6d:9b:07:
                    a6:b4:10:ec:a0:6a:52:83:fe:18:2e:94:ff:d4:d2:
                    0c:57:0d:4c:f2:56:b0:a6:fb:22:ba:97:ab:53:99:
                    3b:c4:e9:ca:51:45:43:e9:ef:8d:0c:bc:03:f2:00:
                    ab:25:8b:0e:ea:d9:de:c1:83:10:67:e7:89:79:70:
                    7f:d6:5b:a1:a0:40:d0:25:34:5c:5c:49:c4:f7:03:
                    df:20:dd:07:ff:05:e5:82:4f:c2:a1:30:de:fa:24:
                    66:95:da:7c:33:95:8f:37:61:05:22:cc:93:5a:77:
                    03:63:32:ab:fd:86:94:2c:a0:8e:33:94:bf:02:88:
                    8d:76:69:df:44:a0:3d:08:b7:2c:b2:69:2f:32:f0:
                    a0:70:03:eb:8e:5d:53:b8:a5:b7:e3:1e:fb:38:db:
                    76:60:85:8d:30:96:c7:d5:5c:6e:7e:db:60:a6:9e:
                    46:77:21:39:d8:7f:b4:ca:bb:19:3a:51:e8:08:74:
                    4a:55:3f:13:6b:d1:b0:fd:49:13:80:95:5f:89:59:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:69:F1:0D:72:33:22:6F:1A:E0:65:47:47:9B:B7:90:97:B7:E5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a74bdd9e-0e86-4280-9653-839c7cab021b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:8f:d5:b8:23:ae:61:2d:62:7a:14:4b:ca:82:8e:5a:39:00:
         cc:24:68:f4:81:7f:98:da:bc:e6:05:12:a0:76:fe:04:d9:3b:
         8d:6e:d9:bc:56:f7:f3:b4:b1:20:b8:5d:0a:d6:cd:ad:c8:03:
         1b:49:25:01:6d:78:2c:99:63:6c:f0:60:17:d1:ee:79:39:a9:
         c9:e0:55:16:23:5a:af:1b:14:b9:62:8e:bc:16:55:70:b0:78:
         dd:ae:ec:a9:1e:09:25:3e:2c:33:36:22:dd:5f:4f:b7:15:21:
         d5:c5:9f:75:2d:de:21:3a:c3:15:f9:7d:f3:08:92:34:e7:48:
         17:1a:aa:41:90:97:57:72:2e:a8:8b:b1:90:18:0e:f1:76:97:
         d9:15:db:c1:1d:bb:98:1b:f1:a5:0d:f1:0a:64:b5:ca:a6:b5:
         b9:3f:9b:8b:6f:e2:7b:54:61:11:14:68:84:24:43:e3:33:13:
         6c:cf:10:76:69:cf:2c:4b:35:d3:8c:0f:b1:3c:b2:82:31:9d:
         69:92:bb:57:a5:a6:b7:b9:82:5a:5c:cf:de:ed:e1:b6:55:3d:
         6d:cf:8e:53:4f:1e:71:d1:b4:ba:38:ba:4e:7f:0f:aa:35:38:
         35:b6:42:86:4a:6a:d4:86:f9:09:ed:8a:20:fc:02:ed:4d:48:
         6c:12:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:35:42 2026 by rpki-client