Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beb593ed-66f3-46b6-a187-0f3e50afb458.roa
File:                     beb593ed-66f3-46b6-a187-0f3e50afb458.roa (raw, json)
Hash identifier:          l3lTY2QjW+AKW5kkGtc5aNIsjYxgYKwzOImbMtss0EY=
Subject key identifier:   6B:DC:C5:31:89:B4:88:B5:26:E5:BC:17:F2:2B:B4:3D:97:89:19:26
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0ACBBD31CE4558739767E3108740DBFE35B8D868
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beb593ed-66f3-46b6-a187-0f3e50afb458.roa
Signing time:             Mon 26 Oct 2026 01:40:07 +0000
ROA not before:           Mon 26 Oct 2026 01:40:07 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     22394
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:bd:31:ce:45:58:73:97:67:e3:10:87:40:db:fe:35:b8:d8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:40:07 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=b8ac90536d0b8fdcdd4d701df0524c2a28a490a0c55a92b12048baeb37304d82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:85:53:10:e4:34:22:0d:45:57:ca:51:08:
                    66:a8:46:79:3e:bf:6e:77:18:3a:92:ba:9e:4a:18:
                    45:71:a6:4b:07:ea:03:8e:6e:5c:e6:55:26:29:a9:
                    ab:e8:d9:7e:ed:97:30:c6:3f:33:bc:57:b2:fc:2c:
                    cb:78:28:81:ac:d0:28:1f:b8:ff:bc:ba:c1:9b:13:
                    66:9d:5c:9c:18:3e:16:d6:b4:18:81:ae:eb:47:f4:
                    33:b5:db:e4:0d:1f:28:32:e9:b2:8e:bc:37:7a:bd:
                    80:8d:9e:e9:26:d5:28:ae:1a:0d:a8:b2:a0:78:57:
                    58:50:e2:9b:aa:44:9e:0f:7b:78:c1:02:b1:26:30:
                    43:f4:96:c1:99:60:37:4b:a2:7e:7c:f0:f7:e3:fa:
                    51:c8:3c:85:e1:64:69:01:91:2d:c5:d0:c4:f8:01:
                    29:fc:1b:88:09:e4:ec:ec:4d:92:66:99:03:06:9f:
                    b5:d0:91:8d:0a:b1:18:0b:90:de:a7:d3:c7:dc:8a:
                    a8:85:2b:36:48:b1:5f:b2:60:ca:05:16:1b:79:9e:
                    e7:9f:9b:96:ee:01:f4:5d:d0:73:04:3e:40:b7:e0:
                    e7:a1:30:d1:00:b3:81:55:82:1c:b9:90:b2:60:81:
                    86:76:c3:86:6c:2c:52:ed:52:20:c6:84:d1:27:b0:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:C5:31:89:B4:88:B5:26:E5:BC:17:F2:2B:B4:3D:97:89:19:26
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/beb593ed-66f3-46b6-a187-0f3e50afb458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:48:5e:4a:24:6c:cc:38:f5:61:b8:08:6d:c7:ca:d1:4e:
         16:62:61:6c:27:fd:df:38:91:e3:ff:4a:89:8a:6b:6a:81:c2:
         0b:64:71:5a:be:5d:12:5c:0d:c7:34:da:1e:90:39:3e:43:b3:
         ac:7a:12:29:8e:a9:f1:c0:ae:7a:35:63:fd:3c:c7:3a:5b:f2:
         9d:f5:51:50:1f:a7:ac:1c:a6:4e:96:e1:d9:22:75:e4:92:a7:
         02:99:63:9a:fb:ac:50:6f:5b:c1:50:54:8e:86:c1:20:63:c1:
         19:92:69:29:21:75:bc:9d:54:9c:88:45:f2:d8:9a:17:d7:3e:
         e4:39:69:9e:8e:4b:bb:c2:7b:ca:ba:5a:44:a3:4c:3c:1e:31:
         2c:f2:fb:75:c5:7c:f9:da:55:bc:b8:66:89:7a:77:c6:85:1f:
         f1:1e:88:f5:79:5e:96:b2:a0:8b:f0:ca:08:41:02:99:49:4c:
         62:aa:eb:8a:f1:17:b1:95:3d:d4:3b:22:ca:12:6a:80:64:48:
         a8:02:12:d5:61:77:a5:78:c8:aa:7f:dc:dd:6d:f0:7c:70:67:
         b1:14:36:7b:71:73:e6:64:c0:ca:50:9b:97:94:d3:01:96:c2:
         e7:3c:3b:c7:21:f9:ec:d5:72:11:f5:7e:15:0d:cc:64:7b:3c:
         74:68:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:02:18 2026 by rpki-client