Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa
File:                     61adc43d-d260-4f76-864f-ce79afe583d1.roa (raw, json)
Hash identifier:          OQoRNooFGuDEYC0ytpFqdZXhzG3Nn49MPsgJ0AqGbw0=
Subject key identifier:   5D:B7:07:2D:7D:7A:DE:10:2D:8C:D8:CB:39:F5:8B:FE:F7:ED:38:2D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       45D2601EAAEEAD434EE0CBDF58F916DB8623BF9B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa
Signing time:             Mon 11 May 2026 01:20:57 +0000
ROA not before:           Mon 11 May 2026 01:20:57 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.64.0.0/10 maxlen: 10
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:60:1e:aa:ee:ad:43:4e:e0:cb:df:58:f9:16:db:86:23:bf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 11 01:20:57 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=16d3364ee1065245448a9daf1d33248b4b8c7449a528255004f6b8966760295d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:34:36:a6:94:01:69:90:38:b7:1b:4a:22:
                    28:69:87:a5:24:7c:b2:2d:3d:57:24:3c:f1:de:fe:
                    b6:d2:9c:47:bd:f6:8f:e2:dc:40:54:6d:fb:68:83:
                    c7:a9:04:40:de:5e:c9:30:93:00:81:8d:a8:40:35:
                    bb:0e:c3:f3:b5:78:c4:dc:36:5a:d7:e5:3a:71:08:
                    dd:87:0f:2b:81:57:05:ea:cf:f0:35:93:6a:8a:95:
                    b5:0d:37:04:bf:a0:7d:37:97:30:51:49:19:99:53:
                    aa:4b:1a:18:8a:cb:a8:58:64:28:7f:8a:5d:b8:5b:
                    cb:bb:25:57:e5:a2:d1:e0:bb:23:77:d9:06:a3:c1:
                    ec:b0:33:7b:08:68:9c:33:5e:19:b7:ad:3b:f1:d4:
                    45:fc:c6:85:49:77:cc:c3:cf:0a:89:55:2f:74:cd:
                    16:af:bf:16:31:11:49:93:5e:25:6f:55:20:d5:74:
                    b5:72:9d:3e:c9:ba:98:bf:9e:0d:50:ad:17:4a:e4:
                    05:59:65:ba:c0:d7:ae:e6:5c:1d:10:70:4f:2d:8d:
                    12:ba:af:e7:39:aa:8a:09:61:65:9d:3a:90:89:0d:
                    ce:84:2a:91:cd:ad:de:ae:03:c8:d9:7a:b5:6c:dd:
                    44:67:eb:b2:eb:15:0d:08:0c:21:2d:c8:6c:ae:4d:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:07:2D:7D:7A:DE:10:2D:8C:D8:CB:39:F5:8B:FE:F7:ED:38:2D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.64.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         aa:0a:35:ac:86:44:a8:f1:c2:0b:34:6d:1e:a4:70:80:13:b3:
         d0:0a:7f:c8:7e:db:9a:b3:fc:ea:3a:6e:3d:24:93:50:93:ce:
         90:de:18:a1:58:ff:ba:e3:b6:e5:c4:46:b2:1f:ee:de:00:be:
         70:a2:01:0e:6d:9b:05:55:eb:21:89:c6:76:7a:1e:2b:3d:90:
         e4:88:d8:66:ea:91:b9:17:54:5d:c1:95:53:2e:3f:53:ae:3f:
         97:ae:27:a7:aa:e5:bb:cb:0b:1d:78:55:f3:20:be:85:c6:0b:
         d7:42:37:b6:56:1f:02:92:61:e7:40:4b:30:42:48:35:ea:25:
         09:85:d0:7d:3c:0a:16:16:c5:10:0a:d4:aa:a8:6a:cd:b9:98:
         6c:88:2d:98:4b:81:59:0c:9c:67:18:af:2c:db:83:c5:91:2d:
         ce:d7:d4:a2:54:11:25:dd:ee:ab:0b:14:c4:37:18:49:4d:c3:
         9f:f9:b4:36:05:4e:51:4d:0b:11:d0:ff:23:07:08:95:af:3b:
         1a:43:aa:ae:65:47:af:98:a8:af:20:ae:51:e6:5c:d4:5a:43:
         6c:d4:31:6c:81:b2:d9:fc:ec:2f:b7:f2:34:05:f4:60:42:f2:
         93:a5:a0:d7:f2:6c:65:16:bc:ef:7c:f8:75:f6:1a:29:58:a3:
         03:21:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:34:27 2026 by rpki-client