Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/098a1490-8d4f-4f3f-a981-73eab7f8663a.roa
File:                     098a1490-8d4f-4f3f-a981-73eab7f8663a.roa (raw, json)
Hash identifier:          yaaYU+GMxxjkeI2277EeLvdV+9O+EY458LJiiPpunqs=
Subject key identifier:   B3:8F:D8:F7:4B:BC:63:3E:2D:99:79:45:7D:0B:1F:23:E8:54:4C:25
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       45CE20793353A36156AAE5A1F25FA87744C82551
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/098a1490-8d4f-4f3f-a981-73eab7f8663a.roa
Signing time:             Fri 17 Jul 2026 00:00:07 +0000
ROA not before:           Fri 17 Jul 2026 00:00:07 +0000
ROA not after:            Thu 15 Oct 2026 23:59:59 +0000
asID:                     7224
IP address blocks:        15.248.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ce:20:79:33:53:a3:61:56:aa:e5:a1:f2:5f:a8:77:44:c8:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 17 00:00:07 2026 GMT
            Not After : Oct 15 23:59:59 2026 GMT
        Subject: serialNumber=f7482c88eb08e69a36e998c47eb2201caf0d88a22500df935d076f66cf5002b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:ba:f7:0d:fe:8a:71:56:2c:c3:ec:30:b6:
                    69:61:26:9a:df:6f:1e:c9:4a:8e:2c:14:87:89:80:
                    c6:8e:07:06:1f:02:64:c2:19:46:4d:40:f1:f1:e7:
                    c9:36:e1:38:f6:9f:30:74:9a:e2:d2:1f:15:8d:ee:
                    31:eb:fe:73:b8:60:e1:1e:11:61:e5:b3:f4:f0:66:
                    ac:77:c6:d9:f7:6e:52:91:c0:05:73:88:53:36:d7:
                    e4:9f:82:c6:48:44:1e:dc:65:e2:33:76:0a:36:4d:
                    c5:53:b6:35:4e:1c:95:b0:9f:5b:72:f3:2f:94:69:
                    21:b9:81:5f:f9:b5:f2:32:aa:dd:0c:ae:cd:e8:e9:
                    1c:53:84:29:f1:30:63:b7:bd:13:29:b4:5a:5e:b4:
                    ce:be:98:11:2e:fa:ac:ba:d9:02:d2:85:4f:a3:e5:
                    fa:e4:2e:28:c3:67:6d:44:f5:f2:c5:4f:fa:56:ba:
                    e7:a4:08:a6:f4:41:e4:94:f3:3b:07:36:69:1e:93:
                    49:cc:41:0c:42:35:95:dc:60:1f:b7:3d:80:78:06:
                    6b:1b:45:71:52:98:94:8d:6f:90:a4:ba:96:1b:87:
                    f8:95:56:c3:fb:bb:09:85:e8:12:84:f2:fa:c8:6e:
                    fa:10:04:41:05:9d:1a:b8:9b:03:ec:33:d5:4d:94:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:D8:F7:4B:BC:63:3E:2D:99:79:45:7D:0B:1F:23:E8:54:4C:25
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/098a1490-8d4f-4f3f-a981-73eab7f8663a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:02:f6:24:a5:e1:05:54:75:6e:08:b8:f5:36:dc:49:4a:
         94:3b:aa:19:9a:9b:21:45:9e:51:44:45:f8:7a:ea:7f:1f:05:
         5f:e3:97:c3:c8:e8:47:68:d4:4e:5c:9d:b5:ef:76:c5:a1:4a:
         c9:9d:ab:f1:d0:75:ec:cf:18:0b:8f:76:01:fe:49:0c:0a:96:
         0d:b6:56:1e:24:f5:31:7f:78:36:12:84:6b:cc:c4:2a:1a:a5:
         34:34:04:b9:f7:9c:18:cc:ba:44:fc:b7:e3:f5:44:27:64:ae:
         5f:5e:d0:8c:8f:db:c3:5e:39:40:ea:44:2d:42:63:30:94:26:
         fd:dc:52:38:e9:80:1b:6c:39:aa:94:d3:c4:44:c0:ec:e7:bc:
         bd:45:27:21:fc:4a:1d:2f:c0:38:42:42:38:3f:a7:3b:2b:8b:
         27:8f:c2:a4:84:24:4f:80:28:c1:4a:dc:4d:68:78:cf:a1:8f:
         97:49:b5:02:51:fc:16:46:90:79:b4:71:a5:d0:b5:6e:2c:13:
         f1:05:73:aa:1d:df:09:8b:6f:f6:56:85:b8:0f:03:53:0d:d7:
         82:d4:b1:c8:8a:ca:97:3f:89:9a:0c:44:06:58:f9:a2:78:18:
         bf:e3:85:9c:d9:17:f9:e6:f5:4e:fb:50:93:93:4c:88:a2:45:
         42:6b:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:01:43 2026 by rpki-client