Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b476190e-0edc-4186-ac6a-5dbc6e7a7f34.roa
File:                     b476190e-0edc-4186-ac6a-5dbc6e7a7f34.roa (raw, json)
Hash identifier:          G7LnX9N/F0hIBqj0YL45OfI3zgsEcBgOaxct4/+12pE=
Subject key identifier:   D5:46:EF:C6:32:DF:E9:46:C5:84:CE:56:AA:CE:19:46:70:E7:96:F5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A8E34CD26E37E49DB34F47831E73DF61CA08DF6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b476190e-0edc-4186-ac6a-5dbc6e7a7f34.roa
Signing time:             Thu 15 Oct 2026 02:10:11 +0000
ROA not before:           Thu 15 Oct 2026 02:10:11 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        34.249.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8e:34:cd:26:e3:7e:49:db:34:f4:78:31:e7:3d:f6:1c:a0:8d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 02:10:11 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=4cfddb56bcc541697e3883ac20315db5b37f27cd4c7940b4f3b6a0e2baf29c05, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:1f:0c:e6:2a:0c:17:f1:30:2a:97:92:45:
                    95:ee:ac:38:a2:cb:04:5f:47:fa:ae:60:c2:d7:da:
                    9c:9e:47:40:3b:c1:80:69:44:0c:38:e3:13:68:c1:
                    8b:3e:0a:a0:1f:7c:91:34:7d:df:89:21:04:95:d7:
                    b0:56:0c:bd:de:66:55:05:67:ac:64:f1:f9:77:c6:
                    81:dc:39:ec:3c:26:11:a2:55:50:f3:bb:af:87:9b:
                    b8:73:8a:e2:d6:97:10:82:85:16:b6:cf:2d:ba:61:
                    e1:9b:85:d5:89:99:d5:d5:cf:27:5b:04:ca:42:a5:
                    3f:68:ca:47:c9:09:94:1c:98:05:28:f7:24:b6:6a:
                    57:0f:f0:c3:59:43:2c:7e:38:5d:8e:ce:da:76:b8:
                    c5:87:ca:76:02:b2:e9:79:8d:67:43:d7:b6:82:c3:
                    ae:c5:ff:4b:7e:e4:d2:c1:bb:6d:a4:8a:a3:34:57:
                    16:f7:4e:90:4e:f7:96:e5:a8:fb:f8:c8:1c:b1:93:
                    12:3a:da:3e:15:0c:51:6c:ab:b6:59:1d:d3:50:c0:
                    e1:b5:e9:1b:89:cd:6b:04:2e:f5:5b:84:8c:a4:48:
                    c3:56:5f:6e:e8:83:8a:a2:51:38:01:59:04:3e:92:
                    17:89:46:a7:60:3a:ec:6f:cf:3a:b9:1e:d1:73:38:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:EF:C6:32:DF:E9:46:C5:84:CE:56:AA:CE:19:46:70:E7:96:F5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b476190e-0edc-4186-ac6a-5dbc6e7a7f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.249.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:91:f2:5b:e1:e7:71:3a:a4:5b:0f:8d:7a:e1:88:22:dc:
         b4:9d:c8:7a:db:ff:43:0d:a2:a0:55:31:6f:b6:99:d1:2e:55:
         cd:a2:2e:cc:8e:77:1e:75:24:ed:2e:44:a6:53:ab:9c:51:ea:
         73:12:4d:3b:bc:87:41:4a:c4:57:51:db:f2:0a:f5:92:ef:e9:
         96:30:ac:29:b6:7c:f3:0f:54:f2:9b:f9:37:b3:9b:42:45:26:
         6f:a4:6a:18:b5:b5:ed:0f:7f:1b:18:d3:0e:38:58:7c:b2:14:
         cd:84:a9:ad:d4:85:58:2c:01:37:bf:d8:26:ba:a9:cb:43:bb:
         7d:5f:ac:b1:04:56:f2:45:a8:3e:54:03:e2:61:c8:90:d7:fd:
         b4:18:24:86:63:4f:af:95:3c:5d:8a:62:da:fb:c9:19:a7:60:
         e1:24:91:f4:58:8c:54:58:6f:86:37:dc:4f:8b:d4:f6:ca:61:
         86:67:86:32:32:ce:69:b1:01:94:e9:d0:00:9b:45:41:ef:26:
         98:da:9c:86:2c:0e:07:c5:e6:ac:29:6e:06:ac:89:6e:bf:9c:
         32:37:c7:91:87:69:02:4c:14:bd:df:38:98:e9:45:5c:94:b9:
         bb:b8:01:e5:ce:6b:40:87:e2:86:34:36:7b:63:91:38:a5:fa:
         e3:b6:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:00:41 2026 by rpki-client