Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4454c0d-4c87-4474-ba1b-ebbccc0e29c6.roa
File:                     f4454c0d-4c87-4474-ba1b-ebbccc0e29c6.roa (raw, json)
Hash identifier:          XABZdDoc+0kt8WL/VblSXoOQl1BqryAvjRSj99zOYU0=
Subject key identifier:   1C:77:BB:8E:BA:DB:FB:51:45:AB:ED:AC:26:EF:29:F7:0C:60:DD:1D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1FB88554493D1F209D0C87299C4F617B0C47FB30
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4454c0d-4c87-4474-ba1b-ebbccc0e29c6.roa
Signing time:             Mon 26 Oct 2026 01:51:09 +0000
ROA not before:           Mon 26 Oct 2026 01:51:09 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     7224
IP address blocks:        15.248.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b8:85:54:49:3d:1f:20:9d:0c:87:29:9c:4f:61:7b:0c:47:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:51:09 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=689f3447280f22afe34e9c5f242f61bb99e46643e2df7dc77c2b3ea41df59c9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:c2:66:08:c1:ee:c5:e2:6b:75:33:84:58:
                    e2:f7:17:b1:4b:a6:af:03:3c:4d:86:75:32:00:39:
                    f4:d7:43:26:37:18:8f:53:ea:5f:78:67:0d:64:ce:
                    54:7c:96:2d:fe:de:6c:8e:f3:c3:bc:4e:bf:58:8d:
                    c2:0f:d4:97:0a:4a:df:ed:ae:ca:13:0c:0e:0e:60:
                    67:e3:5a:f2:09:db:7f:7a:97:c4:f1:bf:97:45:0d:
                    b0:ac:e2:be:d4:36:ab:ab:1d:e8:5c:39:d6:a0:7f:
                    92:c0:a2:11:be:3e:34:8f:2d:08:e5:18:83:ea:ec:
                    75:c1:4c:c1:f5:be:de:cb:c1:43:00:2a:86:b4:72:
                    66:3f:6c:51:b5:1f:ae:11:b3:ba:62:1a:f8:20:e7:
                    a5:92:1e:9e:9c:04:a5:11:1a:6a:48:9d:7b:de:66:
                    12:b5:71:18:25:45:62:68:f1:31:3c:d7:fa:eb:89:
                    06:7d:b2:dc:71:04:38:a3:d0:7c:85:ec:9b:1e:95:
                    77:ec:df:29:67:11:00:e6:e6:5f:45:9f:c9:59:85:
                    ee:69:6c:7e:e9:d7:28:0f:04:ae:4c:eb:ce:03:f6:
                    1f:14:99:2d:fb:b4:f3:8b:11:4f:27:1d:27:67:f5:
                    4e:24:b7:0e:f9:5c:7c:7f:c4:1e:a3:d9:c5:39:ad:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:BB:8E:BA:DB:FB:51:45:AB:ED:AC:26:EF:29:F7:0C:60:DD:1D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4454c0d-4c87-4474-ba1b-ebbccc0e29c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:e7:09:07:6e:72:b5:9d:37:3d:f9:fe:53:1f:9e:c1:cd:
         37:0c:d1:0e:e3:62:43:ad:b9:23:03:ed:dc:ea:22:02:81:48:
         a7:c8:02:17:a2:f9:fc:35:2a:01:4e:7b:5e:d2:0c:e2:33:79:
         08:1b:c7:11:1d:88:d9:3e:85:2e:5a:9c:59:21:9b:97:4f:52:
         c4:ac:2a:46:78:2a:a6:91:e2:c0:bd:26:3a:19:e6:dd:8f:dd:
         09:e7:6b:45:97:51:03:d9:4b:ba:84:06:64:03:cc:54:8a:2a:
         fb:ad:25:f2:55:06:1b:e8:dd:54:68:72:eb:1c:4f:0d:7a:9a:
         44:7d:91:4b:0a:72:5a:3b:3d:8c:07:78:5b:04:3c:07:39:24:
         a6:45:cd:32:32:c5:b3:a5:27:1e:64:ed:f0:73:78:74:f0:7f:
         dc:64:2e:47:f0:e2:a8:b5:09:8e:35:c9:a8:1e:26:75:d9:05:
         96:3a:26:39:50:87:81:cd:4d:c9:fb:b5:a0:73:d1:de:98:64:
         54:f1:15:8c:5f:99:34:bd:85:52:56:85:39:d5:ad:04:ef:7d:
         50:d5:34:06:b9:2d:d9:44:89:0d:50:95:3e:1f:8c:59:d6:b5:
         87:dd:2d:09:5e:3c:db:3f:a1:fa:bd:87:81:da:1d:67:7f:e5:
         6f:92:32:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH7iFVEk9HyCdDIcpnE9hewxH+zAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDE1MTA5WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ODlmMzQ0NzI4MGYyMmFmZTM0ZTljNWYyNDJmNjFiYjk5
ZTQ2NjQzZTJkZjdkYzc3YzJiM2VhNDFkZjU5YzliMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfVMJmCMHuxeJrdTOEWOL3F7FLpq8DPE2GdTIAOfTXQyY3
GI9T6l94Zw1kzlR8li3+3myO88O8Tr9YjcIP1JcKSt/trsoTDA4OYGfjWvIJ2396
l8Txv5dFDbCs4r7UNqurHehcOdagf5LAohG+PjSPLQjlGIPq7HXBTMH1vt7LwUMA
Koa0cmY/bFG1H64Rs7piGvgg56WSHp6cBKURGmpInXveZhK1cRglRWJo8TE81/rr
iQZ9stxxBDij0HyF7JselXfs3ylnEQDm5l9Fn8lZhe5pbH7p1ygPBK5M684D9h8U
mS37tPOLEU8nHSdn9U4ktw75XHx/xB6j2cU5rddpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHHe7jrrb+1FFq+2sJu8p9wxg3R0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y0NDU0YzBkLTRjODctNDQ3NC1iYTFiLWViYmNjYzBlMjljNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIP+AwwDQYJKoZIhvcNAQELBQADggEBAB8r5wkHbnK1nTc9+f5TH57BzTcM
0Q7jYkOtuSMD7dzqIgKBSKfIAhei+fw1KgFOe17SDOIzeQgbxxEdiNk+hS5anFkh
m5dPUsSsKkZ4KqaR4sC9JjoZ5t2P3Qnna0WXUQPZS7qEBmQDzFSKKvutJfJVBhvo
3VRocuscTw16mkR9kUsKclo7PYwHeFsEPAc5JKZFzTIyxbOlJx5k7fBzeHTwf9xk
Lkfw4qi1CY41yageJnXZBZY6JjlQh4HNTcn7taBz0d6YZFTxFYxfmTS9hVJWhTnV
rQTvfVDVNAa5LdlEiQ1QlT4fjFnWtYfdLQlePNs/ofq9h4HaHWd/5W+SMno=
-----END CERTIFICATE-----
Generated at Sat Nov 7 23:51:19 2026 by rpki-client