Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa
File:                     bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa (raw, json)
Hash identifier:          Pwb5oMRcvEAWJ6nMemOUog4aR9r0mo4vOzq+9IQwIvY=
Subject key identifier:   DA:8D:94:B7:04:38:A9:FB:DE:86:1F:2E:7C:FE:BB:6C:9E:13:D6:D7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2225237AD8EC9CF9802411478542339D5EBAEEF9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa
Signing time:             Thu 08 Oct 2026 01:04:38 +0000
ROA not before:           Thu 08 Oct 2026 01:04:38 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:23:7a:d8:ec:9c:f9:80:24:11:47:85:42:33:9d:5e:ba:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct  8 01:04:38 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=1745b5718a5aa80999ccbfad1347ca36785b78fb82199f3711a0927e3d544dca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:b8:40:cc:48:02:e4:18:07:fe:8f:ee:4b:
                    41:d4:9f:20:14:a0:a3:66:2c:45:94:db:ad:47:50:
                    51:29:96:b2:e6:64:54:a9:6e:72:7c:7a:64:7b:82:
                    1c:35:ee:ad:85:45:b0:f7:0f:66:c9:68:8e:46:93:
                    09:86:ff:93:e8:32:8f:a6:81:f5:84:7a:ad:18:54:
                    13:b2:5d:5d:1c:99:b3:d8:fd:d6:5a:63:11:2c:ad:
                    6d:25:47:3f:0e:c3:c2:27:f3:f6:e2:2b:64:c6:c6:
                    87:af:f2:46:25:5c:92:72:0a:d1:74:9b:8d:b8:bb:
                    9d:36:66:01:16:22:14:3d:4d:62:90:60:ce:12:0c:
                    dd:85:c5:11:71:cc:c7:76:fb:f4:9e:e2:f2:16:df:
                    59:66:2f:88:23:67:86:a6:18:a4:f5:d4:3d:25:6b:
                    df:4b:03:be:9b:f7:5a:c7:50:84:9d:41:57:f4:e2:
                    ff:d3:fd:36:60:62:a7:02:69:3f:c1:78:17:d9:34:
                    a1:cf:4b:54:96:d2:1d:06:6b:85:6b:c8:26:bf:76:
                    e1:47:66:cc:50:92:ee:d4:75:02:66:ea:4c:5e:ad:
                    ea:a1:59:ce:9a:f9:6a:13:d6:70:3e:66:e7:ce:e4:
                    2e:ed:72:9d:56:de:e9:dd:ac:f3:5c:45:63:f3:b3:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:94:B7:04:38:A9:FB:DE:86:1F:2E:7C:FE:BB:6C:9E:13:D6:D7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbd11792-5e8c-4f3b-ad4c-a4001839bd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ad:92:48:78:d1:73:69:38:4e:e1:f7:3e:6e:fb:8e:b2:67:
         0b:c2:2d:c5:8b:5e:54:ec:53:41:13:cf:d5:cd:a0:bf:6c:63:
         17:50:b2:19:7b:a4:82:6e:3b:70:e0:49:e3:22:d1:29:5a:99:
         7a:dd:95:ad:97:97:7b:f5:ac:fc:d1:4b:5f:ce:02:b6:7a:c7:
         00:a9:a6:c6:ed:5e:89:8e:f3:04:12:a1:4f:7f:de:78:11:f3:
         76:ea:f4:49:30:02:4a:18:ff:00:41:c9:99:ad:6e:96:21:46:
         90:88:c9:08:58:8d:ec:21:23:d8:d0:12:69:06:cf:2f:64:e6:
         39:8c:62:23:3f:c5:8c:5b:77:92:82:cf:56:57:44:df:48:8f:
         18:12:a8:dd:14:67:e6:de:c2:c7:e6:67:5d:06:57:ef:cd:bf:
         a7:b2:22:c8:56:f1:c9:3f:8e:00:73:ef:64:d3:20:4f:cb:78:
         26:a0:dd:0a:f2:af:63:a5:38:41:90:bd:aa:8d:e9:6a:6c:38:
         d7:f8:30:9e:63:0c:33:91:6e:aa:94:93:76:dd:7c:fc:70:7e:
         cc:d6:50:3a:35:92:93:6d:4a:5f:ce:12:8f:8b:98:e7:57:85:
         7f:de:bb:fb:36:43:ef:f5:c8:e6:4f:71:e7:c3:31:96:2b:88:
         50:d3:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:08:36 2026 by rpki-client