Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9c17ac-097b-48bf-b113-482b1b886b9b.roa
File:                     ab9c17ac-097b-48bf-b113-482b1b886b9b.roa (raw, json)
Hash identifier:          xzcfi/xmTBFBRCa4VQq3jPPGWl8tVuPAvz4U6FfMNpQ=
Subject key identifier:   05:AF:DB:D2:51:97:A0:B7:95:A2:DA:DD:70:E7:64:02:B6:9C:80:D3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1EBEC2DA5A098B8E3C1B83EF7B05F1E5110CF88D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9c17ac-097b-48bf-b113-482b1b886b9b.roa
Signing time:             Sun 18 Oct 2026 01:20:11 +0000
ROA not before:           Sun 18 Oct 2026 01:20:11 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:be:c2:da:5a:09:8b:8e:3c:1b:83:ef:7b:05:f1:e5:11:0c:f8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 01:20:11 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=35904457b665f15cc832c573258d6473d04846b9d68011420629f4b988236bd1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:3f:16:c0:72:e3:82:f5:bd:53:d0:20:0d:
                    d7:5e:2d:9d:7b:05:d3:32:11:06:56:c1:78:aa:a6:
                    d3:f7:9c:05:d2:04:31:8f:d4:80:2f:d7:04:55:47:
                    ec:b7:f5:5c:b0:5f:5d:9c:23:62:81:da:db:7f:63:
                    63:c9:2f:bf:28:0b:c3:11:63:60:4e:be:b5:d7:39:
                    ab:87:42:76:f1:eb:a7:e0:8f:3a:40:97:bb:88:90:
                    90:54:a8:68:f4:41:b2:ff:2a:57:7a:f6:45:a9:ba:
                    31:a3:40:b8:51:14:c2:ce:97:4b:ab:4e:69:8b:b7:
                    bc:cb:4f:5d:ea:60:19:e4:ff:97:9c:8a:d7:35:15:
                    09:f0:32:b1:b7:2e:09:aa:7a:43:9f:53:3c:a5:7c:
                    de:9b:87:c7:13:29:32:b6:8f:39:6f:31:90:18:bc:
                    8f:21:48:ba:db:a2:f1:48:de:8d:20:4c:ce:7b:b2:
                    50:e7:2d:a9:df:a2:e6:94:c3:ab:d2:82:ce:41:fc:
                    df:5c:25:9c:5b:d1:15:f9:07:5f:40:3e:0b:a9:23:
                    7e:a5:1a:9c:63:b5:32:c2:67:88:69:9d:f5:b8:77:
                    63:14:02:f7:7e:87:00:55:34:98:75:c4:b4:8e:59:
                    44:f6:39:58:4f:f3:0f:19:e9:8e:84:b7:a6:c2:fb:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:DB:D2:51:97:A0:B7:95:A2:DA:DD:70:E7:64:02:B6:9C:80:D3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab9c17ac-097b-48bf-b113-482b1b886b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:f9:72:05:d5:90:56:95:1c:a5:d7:c3:6e:07:43:25:69:
         da:a2:3b:e7:6c:95:7f:77:22:4f:e0:9c:ee:57:02:8f:ec:4c:
         fe:79:6b:15:e5:11:02:78:f5:9a:a4:32:87:26:f8:8b:e3:5d:
         17:fa:bf:73:1b:c0:45:a5:b5:b5:79:6b:ab:40:20:65:1e:71:
         61:6b:c8:02:79:79:6e:41:79:83:bb:76:c5:ab:c7:62:b2:cf:
         93:7e:12:3b:c6:a5:83:52:3d:99:37:85:41:7f:53:ab:14:7e:
         77:0c:bf:f6:c9:37:5b:59:14:9f:72:66:f4:0d:93:90:28:9d:
         51:69:fd:63:9b:1c:dd:19:1d:30:d7:93:a5:b9:96:59:d9:7d:
         3c:45:8e:af:8f:d1:83:b7:6b:66:29:e6:8b:6e:81:61:8f:26:
         d2:25:1c:24:e3:b9:5b:4a:df:f6:21:be:bc:f1:b1:33:0f:6b:
         fa:2d:c1:b8:f1:da:cb:85:84:cf:1f:3f:a9:a2:6e:74:f1:bc:
         e0:12:61:d8:89:e0:77:20:bb:76:89:61:56:d9:2c:38:e7:23:
         87:54:9b:b8:bb:27:af:80:ba:9c:47:e2:2b:65:68:9d:6e:05:
         f4:1a:d7:f7:6a:3a:72:68:8d:69:88:84:0f:60:5c:9b:f4:eb:
         a7:97:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:14:02 2026 by rpki-client