Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1e6b187-e80d-4951-88e5-ddde8fd78b9c.roa
File:                     c1e6b187-e80d-4951-88e5-ddde8fd78b9c.roa (raw, json)
Hash identifier:          A917gTyt4nHLeyU+XTllm0aXtWL5JnJ+2rMI4XAZIss=
Subject key identifier:   B1:D7:AB:62:09:3F:23:D2:9D:F7:65:84:02:C1:94:16:26:22:04:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       76819A3A543EFC264ED0CE6002466D1851F92B8A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1e6b187-e80d-4951-88e5-ddde8fd78b9c.roa
Signing time:             Sat 28 Feb 2026 04:01:13 +0000
ROA not before:           Sat 28 Feb 2026 04:01:13 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:9a:3a:54:3e:fc:26:4e:d0:ce:60:02:46:6d:18:51:f9:2b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 04:01:13 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=4080c68c7030082be8bba1f86ed87812c7bc60695c839c4060ccfbaa9fc07038, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:e5:93:f9:b2:4a:19:fd:7b:5f:7c:19:87:
                    b6:22:4f:94:d9:a7:7b:9b:4e:0e:b6:96:d5:19:47:
                    3e:8e:28:32:8b:b7:02:4a:00:cc:7d:ec:f5:aa:c7:
                    fc:8d:1b:a7:fc:f5:6a:21:f0:eb:e9:36:4e:99:31:
                    62:ee:5d:5b:56:da:48:5f:34:95:89:a5:6e:76:e6:
                    a2:d2:2c:20:69:14:bf:65:4e:74:75:df:11:c2:6e:
                    e7:d7:df:36:2b:7f:fe:62:84:00:e9:a1:dd:5e:57:
                    51:5c:c5:9f:7a:5b:6a:66:88:39:ae:56:53:ba:5d:
                    ca:ed:36:b2:0b:b3:80:cd:12:46:98:91:b3:08:99:
                    58:c8:64:29:ce:9f:80:dc:84:5f:dc:ce:6a:48:9e:
                    1f:81:ff:72:46:0b:58:e9:9e:a3:21:99:26:1b:f1:
                    cc:e4:b3:36:1a:d5:0b:07:86:5b:5a:ec:09:dd:de:
                    1b:bd:ff:13:b7:e4:52:11:67:0c:95:34:22:03:ba:
                    ea:5d:25:0b:3b:ea:1d:a0:95:38:21:5c:bd:2f:b7:
                    33:92:6a:c6:d4:6a:37:76:81:50:6d:c2:95:e6:31:
                    e4:13:3b:df:c6:f5:9e:e8:f8:8a:3e:9d:0d:bc:f9:
                    36:11:49:0f:72:af:cc:18:f9:71:c5:1f:b6:12:93:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D7:AB:62:09:3F:23:D2:9D:F7:65:84:02:C1:94:16:26:22:04:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1e6b187-e80d-4951-88e5-ddde8fd78b9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:c1:8f:19:cf:df:c2:53:08:c2:97:51:2e:a5:79:f8:4f:
         be:77:ad:40:53:be:de:48:53:c3:15:b8:3e:e4:9d:bd:bd:17:
         7d:2b:7e:b1:ce:f0:d3:ea:55:ef:db:9e:bc:d2:7d:ae:66:fb:
         02:f4:5e:ac:9d:bf:16:dd:f8:b0:0b:97:7f:4f:5f:28:d5:5b:
         24:15:f7:2b:69:b5:56:ae:6e:21:2e:0c:4b:3a:a0:29:a2:8c:
         42:16:a0:a3:86:70:b2:27:9a:be:3a:1d:24:48:07:36:03:84:
         57:c5:33:46:bd:c7:0d:71:dc:7f:d1:4a:a2:7e:7b:e2:12:0d:
         5c:18:88:f2:e3:d0:0f:2c:4e:34:3f:d0:c8:98:6c:00:f3:cc:
         81:5d:58:42:d8:46:b5:b5:1d:45:65:85:bd:92:f5:97:64:09:
         cf:c6:89:6d:49:8f:da:1c:08:d5:c9:57:f1:2b:f0:66:a9:47:
         96:9c:ac:56:ae:4a:f6:8c:dc:36:04:e4:05:c5:bc:f9:db:a5:
         0d:2f:39:02:1a:96:a2:7d:b0:71:27:68:81:4e:11:ce:55:6e:
         92:2a:fe:c8:f2:35:0f:fa:20:08:fe:e6:e3:c3:89:cf:f7:f4:
         41:d8:97:d8:63:43:c7:b5:b6:1e:af:95:d4:23:d8:bb:7b:49:
         9e:e0:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:43 2026 by rpki-client