Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
File:                     26f01fa6-15d2-49a7-876d-51a9c30772e8.roa (raw, json)
Hash identifier:          m4JJFLahEV0/thRG81eccR2OFmkY6VRvm4fg/lDVJ1k=
Subject key identifier:   4D:18:DF:C4:57:53:0F:BB:02:14:10:7D:89:E1:65:1B:13:1A:B6:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       37B7859A2DA06768D941727D11268E7B3328E4DD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa
Signing time:             Fri 08 May 2026 01:40:49 +0000
ROA not before:           Fri 08 May 2026 01:40:49 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.248.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b7:85:9a:2d:a0:67:68:d9:41:72:7d:11:26:8e:7b:33:28:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 01:40:49 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=d5cf7f110c150f84343271b0b28c29a12a0b3d8aeb7760c9b459a1e0a9cfea9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:f3:b5:8a:91:af:d0:dd:a4:7b:9c:d6:45:
                    bf:8f:64:6c:f8:4f:04:13:35:ea:ed:7f:84:b1:88:
                    a7:69:b6:4e:29:94:f5:d6:26:3f:06:eb:04:10:33:
                    8d:4d:ac:7e:17:d5:50:53:bf:c8:90:04:63:6d:e9:
                    3e:e5:8c:ff:af:8f:9f:bc:3e:24:e1:29:08:82:b2:
                    9c:2f:8e:9b:6c:87:2b:5d:2f:3d:8d:6a:67:ed:b9:
                    3c:7f:6a:eb:92:66:c8:4f:d8:9f:12:21:ea:d3:dd:
                    90:34:c2:35:59:ec:2b:80:ca:53:e1:57:0a:a0:9b:
                    96:0a:e6:68:4e:7b:b1:00:29:18:ed:63:01:b2:98:
                    c7:af:2b:80:3e:c9:f5:94:46:be:68:95:8a:dd:21:
                    2d:fe:20:96:3d:18:28:6f:f7:cd:f3:7a:8d:4c:d9:
                    fd:a5:71:66:4e:63:66:a9:2b:1e:ba:4a:21:a3:b2:
                    bb:9d:c3:2d:fc:41:f4:14:d4:2a:ac:7f:bc:e9:2e:
                    f5:fd:ae:5c:e0:3e:d4:f2:21:fd:f6:25:13:61:52:
                    ff:a3:0d:88:be:fe:e1:cd:0f:72:0f:3d:a3:69:7d:
                    16:01:86:04:fb:32:9a:4a:32:51:9b:e3:3f:24:4c:
                    c6:d0:14:ec:45:1f:0b:bb:ae:30:33:b8:d0:ff:eb:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:DF:C4:57:53:0F:BB:02:14:10:7D:89:E1:65:1B:13:1A:B6:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26f01fa6-15d2-49a7-876d-51a9c30772e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:d8:9b:f6:53:e2:78:73:b9:c4:cd:d3:fb:4f:98:fa:4f:
         ad:5c:ae:6c:fb:0f:20:75:7a:69:e2:59:90:35:34:4e:61:2e:
         f0:3c:44:21:48:40:a7:0c:d2:5a:37:7c:8e:45:2d:97:5b:f0:
         24:c2:fb:ab:07:81:78:2d:93:1f:b0:41:3b:bf:91:8c:24:4f:
         32:3b:e6:7d:88:c3:52:ff:c5:d0:7f:71:2b:6e:a1:b2:1e:e4:
         d2:6e:1a:db:c6:19:b3:cf:5e:23:19:4f:59:c2:48:3e:33:6e:
         cd:60:f5:a4:a8:3b:52:52:91:7b:e6:43:06:22:0f:d9:fd:58:
         5d:b7:0d:b3:38:a7:cf:6e:cc:97:cd:af:48:21:21:1c:af:34:
         48:d1:3d:6c:08:f0:a0:0c:21:cb:e6:bc:51:7b:96:68:12:11:
         50:c0:ac:b7:6b:e6:d0:cd:23:75:4c:5e:3e:42:10:a8:e7:6b:
         01:3f:46:71:44:2f:39:b6:35:1d:01:1a:df:41:70:36:68:da:
         c7:cc:5a:44:00:0d:bc:fe:2d:0d:06:ac:4c:81:b8:e0:35:67:
         c8:50:ae:8f:28:7b:3c:22:e4:b2:69:f6:bf:f1:f0:87:be:7e:
         a2:7b:03:2b:85:57:fb:e4:15:6a:df:68:61:73:20:22:27:d2:
         f4:14:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:57 2026 by rpki-client