Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1f5515a-06bf-4c57-b645-ee35c5cb41d2.roa
File:                     e1f5515a-06bf-4c57-b645-ee35c5cb41d2.roa (raw, json)
Hash identifier:          qcueb/yLDYnTFzFoFqbRCA0ZzV7RvPqlT5Y54K0s18M=
Subject key identifier:   67:58:3A:EF:7C:05:0C:F7:07:63:8C:8B:EC:72:C0:D7:B2:B3:22:41
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3827850B36444F8387A0F58F632BBE8F7A212649
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1f5515a-06bf-4c57-b645-ee35c5cb41d2.roa
Signing time:             Sun 18 Oct 2026 01:11:22 +0000
ROA not before:           Sun 18 Oct 2026 01:11:22 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.158.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:85:0b:36:44:4f:83:87:a0:f5:8f:63:2b:be:8f:7a:21:26:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 01:11:22 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=003a7c5fac76d76058d8b094fa383a579a7cc837427a4b33831210083f9fa752, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:3b:30:ae:79:5f:e9:8a:03:24:5c:f2:9a:
                    7a:dd:bf:a8:c9:a8:8a:11:51:c5:bb:0b:fa:85:f5:
                    75:f2:93:a4:0c:58:84:34:8c:a7:40:94:21:62:4e:
                    ca:af:ba:cd:9d:99:c5:fc:33:29:b1:07:1b:33:cb:
                    9c:36:79:35:05:9c:6c:95:ad:ad:83:27:43:7c:f6:
                    3c:23:05:f6:0f:1c:2c:af:65:22:02:52:d8:0e:c1:
                    b8:91:fd:77:41:30:7f:64:2f:e9:ae:f9:be:a6:dd:
                    11:10:4a:38:59:4a:c1:15:dc:86:b2:34:80:00:9d:
                    24:74:73:64:cb:10:c5:02:b0:53:1a:01:52:31:e0:
                    be:4d:ae:ca:5e:cb:a9:d9:3a:db:87:f9:d2:51:1f:
                    70:86:60:79:d5:25:28:7a:dd:48:ba:1d:52:b2:b7:
                    3e:9c:41:4a:30:39:0b:09:ab:bc:9f:a6:21:6a:0e:
                    16:72:bd:66:a7:2b:72:56:be:11:09:73:9e:a7:49:
                    3c:d5:f0:05:2f:45:7f:4c:17:8e:30:33:c0:4f:cf:
                    ad:35:f7:ea:94:89:30:df:47:4e:a5:f5:54:b7:3a:
                    a1:7a:71:28:0e:ad:2e:21:65:55:3d:b5:2e:48:36:
                    01:62:04:bd:ce:ca:3f:22:d0:7f:05:17:4c:e5:91:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:3A:EF:7C:05:0C:F7:07:63:8C:8B:EC:72:C0:D7:B2:B3:22:41
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1f5515a-06bf-4c57-b645-ee35c5cb41d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1a:c6:2b:fa:95:35:b1:dc:44:90:5b:ce:1f:83:d6:08:cc:
         e2:1f:55:34:91:e4:84:45:e3:63:80:7b:e4:f3:42:e3:a1:36:
         73:92:8a:42:c6:47:fb:18:16:ad:7b:69:19:0e:21:6c:ad:17:
         a8:9d:20:a3:2f:11:7b:38:55:52:59:cd:cc:9d:df:b8:54:38:
         f5:4d:f0:62:38:f4:af:f1:80:28:2c:bf:04:83:62:43:78:5f:
         12:48:4c:58:21:8c:1b:8a:8a:ad:d0:b4:07:2d:10:76:59:e2:
         73:7c:09:c9:65:04:84:a4:ab:bd:7c:6e:79:16:49:70:10:19:
         ad:c7:47:50:97:0c:6b:06:14:ad:a0:75:29:fe:c5:87:9b:00:
         f9:db:58:40:66:6d:d0:5b:01:b9:30:0f:84:04:05:1d:02:ec:
         dc:54:01:50:96:2c:b4:41:1e:0d:d2:97:b3:d4:fa:a9:bd:61:
         05:cb:52:d7:8d:9a:ad:82:4a:dc:51:91:8f:35:83:e8:df:f5:
         98:07:89:9d:d9:82:dc:35:72:db:77:96:d0:8e:85:84:6d:e1:
         bd:fd:2b:d7:2b:65:80:f4:45:d1:d3:58:d8:4e:eb:51:fa:c1:
         11:57:f7:a5:71:55:81:cd:ec:4b:7e:03:77:1e:2a:36:92:4b:
         85:91:1e:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOCeFCzZET4OHoPWPYyu+j3ohJkkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE4MDExMTIyWhcNMjcwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMDNhN2M1ZmFjNzZkNzYwNThkOGIwOTRmYTM4M2E1Nzlh
N2NjODM3NDI3YTRiMzM4MzEyMTAwODNmOWZhNzUyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWODswrnlf6YoDJFzymnrdv6jJqIoRUcW7C/qF9XXyk6QM
WIQ0jKdAlCFiTsqvus2dmcX8MymxBxszy5w2eTUFnGyVra2DJ0N89jwjBfYPHCyv
ZSICUtgOwbiR/XdBMH9kL+mu+b6m3REQSjhZSsEV3IayNIAAnSR0c2TLEMUCsFMa
AVIx4L5Nrspey6nZOtuH+dJRH3CGYHnVJSh63Ui6HVKytz6cQUowOQsJq7yfpiFq
DhZyvWanK3JWvhEJc56nSTzV8AUvRX9MF44wM8BPz6019+qUiTDfR06l9VS3OqF6
cSgOrS4hZVU9tS5INgFiBL3Oyj8i0H8FF0zlka7bAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZ1g673wFDPcHY4yL7HLA17KzIkEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UxZjU1MTVhLTA2YmYtNGM1Ny1iNjQ1LWVlMzVjNWNiNDFkMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPnsYwDQYJKoZIhvcNAQELBQADggEBALUaxiv6lTWx3ESQW84fg9YIzOIf
VTSR5IRF42OAe+TzQuOhNnOSikLGR/sYFq17aRkOIWytF6idIKMvEXs4VVJZzcyd
37hUOPVN8GI49K/xgCgsvwSDYkN4XxJITFghjBuKiq3QtActEHZZ4nN8CcllBISk
q718bnkWSXAQGa3HR1CXDGsGFK2gdSn+xYebAPnbWEBmbdBbAbkwD4QEBR0C7NxU
AVCWLLRBHg3Sl7PU+qm9YQXLUteNmq2CStxRkY81g+jf9ZgHiZ3Zgtw1ctt3ltCO
hYRt4b39K9crZYD0RdHTWNhO61H6wRFX96VxVYHN7Et+A3ceKjaSS4WRHic=
-----END CERTIFICATE-----
Generated at Sat Nov 7 18:58:27 2026 by rpki-client