Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c68fe472-155e-4da8-b3a7-092096065143.roa
File:                     c68fe472-155e-4da8-b3a7-092096065143.roa (raw, json)
Hash identifier:          WeMdS8MNR53/IaC0CmF8zDwO9hn4+sXf6kdg58TwR34=
Subject key identifier:   ED:BD:62:DE:22:0B:03:E4:24:5F:E0:19:65:60:AD:2C:7E:EF:F9:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       71C46DCC8A1B15EBCC2E16EC938B983DCAAE5C37
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c68fe472-155e-4da8-b3a7-092096065143.roa
Signing time:             Mon 04 May 2026 14:30:14 +0000
ROA not before:           Mon 04 May 2026 14:30:14 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.197.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c4:6d:cc:8a:1b:15:eb:cc:2e:16:ec:93:8b:98:3d:ca:ae:5c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  4 14:30:14 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=fd272f423b090b4aa8f9d3163f2da96535b6cc8fccd2175b1f8da62a3a716f52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:63:92:9f:c8:65:4f:9c:9f:6f:33:71:b9:
                    a4:9d:9a:36:b4:f4:8a:9a:75:0a:79:17:5b:a3:ac:
                    f8:0f:01:85:66:87:b4:07:70:84:07:68:f9:39:7b:
                    ae:61:7f:86:6a:8e:8e:3a:74:98:ba:4a:cb:db:c3:
                    1f:d4:9c:cf:20:e4:2e:dd:bd:c0:1c:86:71:d9:48:
                    2a:e2:c2:0b:a4:5a:97:46:43:ea:3e:12:e6:0c:18:
                    77:30:0d:68:57:f9:cd:c6:4c:b8:22:e8:50:3e:44:
                    a7:6f:1f:a7:94:3a:44:67:f3:ee:fc:6c:e2:43:b0:
                    0c:22:1f:06:ed:9e:c1:5a:9d:6f:56:dd:a0:5e:c4:
                    33:35:8a:e2:7d:18:36:d7:35:b6:ef:5f:36:87:c1:
                    f0:92:d3:a9:c6:f3:25:5f:4a:92:b1:e6:9c:af:9c:
                    c6:0a:cc:2d:a5:7a:df:73:c4:29:a4:12:9b:35:83:
                    0b:15:6b:be:65:f5:f9:0c:bc:b8:9b:e6:05:86:81:
                    2f:eb:d6:43:9a:28:3a:b4:72:b6:fa:1e:c9:83:90:
                    e7:31:2b:b5:1f:81:29:c2:db:e0:2a:4f:bf:7f:6b:
                    cf:31:12:1a:7d:23:00:37:ab:29:59:58:27:5f:6a:
                    0e:83:4e:0b:21:6b:d4:6e:9d:0f:63:51:9d:ea:26:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BD:62:DE:22:0B:03:E4:24:5F:E0:19:65:60:AD:2C:7E:EF:F9:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c68fe472-155e-4da8-b3a7-092096065143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:21:f5:f6:04:ec:10:a1:0e:82:c7:06:a3:0d:43:20:44:
         67:b0:91:03:75:16:95:9d:4d:f7:f9:36:e5:33:a5:96:96:88:
         9a:01:10:f3:95:3e:b3:7a:57:77:31:53:08:1b:e9:24:c1:24:
         31:48:cd:35:76:dd:f8:61:23:84:83:27:f7:b8:ac:d3:94:41:
         fb:b2:d9:6d:ef:ba:b0:17:64:49:f0:4e:97:f9:89:44:8f:c8:
         5e:08:77:d1:16:1d:a1:39:8e:72:4e:69:87:10:76:73:94:db:
         dc:5c:ca:01:f5:5c:32:1b:a0:3b:ed:6d:00:52:f7:eb:c7:58:
         67:52:e1:91:db:92:7a:93:6b:58:22:06:2a:07:bd:45:47:74:
         28:39:72:b5:de:40:b7:dd:e7:19:f5:40:12:d8:16:d1:f4:f4:
         94:5c:a0:b7:a4:c0:f8:cf:a4:41:53:a4:ae:3f:48:0e:b8:66:
         97:eb:0b:4d:ab:03:e8:e7:cd:fb:54:99:06:16:af:ea:27:85:
         36:2c:e2:dc:13:dd:bb:5d:5a:05:42:11:33:99:4d:49:34:e0:
         04:9c:59:56:98:8e:fa:a5:53:c3:82:ac:c3:4b:19:50:cc:46:
         0b:15:d7:19:c6:c1:08:e5:8a:83:30:9c:40:d3:48:34:90:62:
         60:fd:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:54 2026 by rpki-client