Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa
File:                     6dbd0812-c186-43dc-84c8-601c485a9246.roa (raw, json)
Hash identifier:          PrJBATe+kw7tdsW+CTnScc3genbq0BaWaqNWn1PV98I=
Subject key identifier:   E5:12:CA:C3:C6:68:7C:B5:3E:C9:E8:2C:D0:84:A3:F2:CB:5C:08:E5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6E00F2CFAA0002A160CBC08896006F8A90CD91D0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa
Signing time:             Fri 08 May 2026 02:00:57 +0000
ROA not before:           Fri 08 May 2026 02:00:57 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.220.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:00:f2:cf:aa:00:02:a1:60:cb:c0:88:96:00:6f:8a:90:cd:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 02:00:57 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=3fbe2c4828398a317caff5de854658505aa2a077acfc8f0c4f8b88579348ae61, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:8b:a0:f9:e0:47:cb:4c:47:38:3b:40:35:
                    9c:12:94:05:c0:a8:f7:b9:cd:b8:4f:af:20:b4:d2:
                    11:bf:f8:30:69:51:4d:e8:f3:f1:9d:ed:45:13:f4:
                    2f:55:b8:b5:7d:11:1a:f9:21:c6:02:fe:78:98:24:
                    34:ac:c2:1e:68:1e:33:a4:a9:0a:79:a1:95:ce:6d:
                    e4:0a:c6:51:3a:ba:52:cd:c7:e6:82:5b:47:23:4b:
                    64:c1:92:98:c8:8e:7d:36:18:93:bd:4a:f6:52:e3:
                    9c:95:fb:1f:69:46:1e:b6:a8:ca:38:83:d4:bb:c2:
                    69:9b:0d:72:dc:8b:12:6c:1f:f1:6b:30:93:67:87:
                    f4:30:3f:a4:98:72:bb:c2:18:29:f9:a2:6a:c8:d5:
                    19:04:1f:f3:e5:c0:9a:04:63:a4:47:72:26:91:96:
                    28:4f:ee:2c:fe:b1:88:ff:7a:0a:b1:b9:9b:92:c0:
                    ed:ff:d2:ce:73:61:11:4f:76:b4:4b:83:8d:8d:87:
                    35:4d:27:88:7c:cc:17:a8:38:1c:ab:fe:3b:58:1a:
                    c0:bf:c9:9f:70:52:71:04:e6:53:f8:b5:41:dc:3d:
                    df:90:42:f4:f4:d7:98:6e:9a:3e:71:ff:32:45:1d:
                    db:a9:fe:ab:7e:bf:ff:2d:51:01:6c:76:d4:35:f3:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:12:CA:C3:C6:68:7C:B5:3E:C9:E8:2C:D0:84:A3:F2:CB:5C:08:E5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6dbd0812-c186-43dc-84c8-601c485a9246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.220.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:f7:b3:a9:99:d6:48:fb:91:03:8a:95:a1:02:1d:59:85:69:
         8c:b9:09:89:0a:7c:e6:f2:b1:fb:2a:61:a3:23:ba:e5:5d:0f:
         11:07:81:fd:47:b2:4c:42:ee:2c:f8:7f:fc:bf:4b:f1:0d:a1:
         25:3d:99:2d:87:6f:af:13:ba:37:3c:89:60:3d:1f:47:5b:fb:
         5f:2d:f9:47:e8:8f:bd:89:28:1d:9b:c0:bd:0c:a5:e2:51:02:
         27:fe:5d:ff:05:dc:d4:a7:fd:98:48:0b:82:fe:8f:36:0f:c0:
         01:d1:5e:e1:e2:74:3b:24:67:d5:bf:ec:a4:44:36:27:b9:3a:
         b9:91:fb:36:d1:a1:84:5d:1a:17:c4:eb:03:3c:a0:58:7e:c4:
         84:10:c9:d6:79:4b:43:e7:03:60:7c:84:cb:0b:bc:64:e0:88:
         d4:58:06:50:8a:80:ea:7d:00:fd:de:09:b3:81:50:09:48:f1:
         0e:ff:c7:76:ef:3c:f5:dc:c9:74:eb:8b:11:82:af:90:da:ae:
         09:96:79:67:c7:9c:89:bc:94:c2:62:f9:0e:3e:19:ef:19:31:
         1b:39:2b:e9:62:78:1a:98:85:c2:a6:1d:93:bc:26:7f:45:f2:
         00:23:52:0c:c9:af:41:7a:b4:2c:06:ec:05:da:ad:80:32:87:
         db:26:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:09 2026 by rpki-client