Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa
File:                     eaa90344-71fd-46b4-a6af-1e451ced08c6.roa (raw, json)
Hash identifier:          9hWx+bfVPnfNAhNuZB8NKf5LlHhIk0GlnuA0Dfd1DSQ=
Subject key identifier:   F5:87:22:4E:FE:B0:07:B9:5A:C8:F4:C2:10:5E:79:60:B3:08:EB:3F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0864EFC34397C08ABB9CD1585A928F2ADD222EBE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa
Signing time:             Mon 26 Oct 2026 03:31:24 +0000
ROA not before:           Mon 26 Oct 2026 03:31:24 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:64:ef:c3:43:97:c0:8a:bb:9c:d1:58:5a:92:8f:2a:dd:22:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 03:31:24 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=f6d4997e964bffea696db0c229099b47f4cf03b5e0af16425976128811327e11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6e:86:ee:73:68:35:02:5c:7d:3e:22:21:76:
                    de:7c:5d:52:68:50:0e:0d:7d:69:d7:31:4e:ae:98:
                    80:66:db:2f:50:94:a8:51:57:e8:85:37:ae:84:cc:
                    75:aa:01:4d:72:26:4a:c1:a5:db:22:8b:fc:9a:29:
                    4a:af:62:9c:1a:17:b2:e8:6c:bc:32:e1:94:15:e1:
                    77:58:5a:99:b6:6a:57:0b:e5:fb:a0:18:55:cd:06:
                    1d:75:49:34:a7:7a:fc:fe:5f:a6:13:82:31:84:af:
                    33:53:79:ae:23:0a:fb:ad:7b:59:66:b9:e5:d5:dc:
                    f3:10:40:ee:a4:84:7a:0c:0a:8a:54:2f:1e:3a:c8:
                    15:c2:cb:df:dc:d7:b5:6d:c3:8c:b4:00:c3:70:2e:
                    cd:16:d4:16:2d:80:b1:c7:c6:53:b8:f2:f8:4f:25:
                    75:20:b3:6e:13:76:f4:a8:02:18:46:ea:76:a2:8d:
                    6d:aa:ed:29:a0:bb:3e:86:84:40:df:2d:98:df:09:
                    80:46:66:37:c0:21:6e:a5:d5:13:5e:b4:11:e8:8b:
                    cd:53:7d:32:01:35:5e:a0:a5:37:f5:e6:0f:9a:f2:
                    16:81:20:92:c5:25:cb:cd:cb:8d:4d:a7:24:81:f2:
                    40:76:00:f5:21:f9:c0:a0:96:9b:f6:4a:81:2e:03:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:87:22:4E:FE:B0:07:B9:5A:C8:F4:C2:10:5E:79:60:B3:08:EB:3F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:de:5a:d4:f4:f1:1c:10:96:58:52:6a:00:e3:c6:9d:e2:d7:
         0e:02:3a:1d:06:4f:6c:52:47:51:ba:b5:d3:e1:26:c6:d3:6f:
         e1:4d:37:dc:75:ea:64:3c:ee:15:60:de:e0:41:75:75:35:68:
         c1:3d:ab:65:6b:68:38:84:8e:35:3d:d7:d1:32:f4:ae:3e:41:
         4a:57:0e:2b:6f:86:bb:42:4f:93:1e:eb:f0:42:6d:4a:ae:bc:
         e0:f2:ff:3f:a7:cc:9e:cc:1e:97:27:ed:42:46:d6:33:47:a1:
         a6:d4:60:07:f8:a0:e6:b6:d8:55:72:d0:a2:bf:a6:7c:3a:8a:
         b1:87:fb:11:3b:a8:1c:e8:c3:b6:4c:44:ff:22:8b:2c:76:4d:
         70:35:f6:e3:30:92:4a:17:3c:25:39:d1:ba:86:90:74:63:c1:
         31:bd:51:6f:9a:5b:ae:60:f2:7a:be:a6:85:f9:67:62:05:cb:
         ea:17:73:b8:45:f6:a3:47:05:b0:c9:a3:69:06:fe:2a:11:84:
         c8:26:34:b5:59:e6:8b:e3:fb:39:97:02:a4:80:18:a8:86:17:
         84:b7:1a:6b:68:7d:c8:59:cd:74:36:4d:14:ce:c1:b8:0f:29:
         38:41:89:86:9e:08:fa:ab:be:32:fc:5e:67:1d:80:bc:55:e3:
         cb:ef:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:47:02 2026 by rpki-client