Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa
File:                     ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa (raw, json)
Hash identifier:          V9n262272Gc/2xhC9faQROhniVJeRmPB/LQd8pSFhyY=
Subject key identifier:   70:C6:18:B8:BE:8E:60:9D:0E:B5:DB:41:8A:AD:D1:BD:CD:D1:BC:B3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       340DD7531AF96A9F2DFBE1AF07589F9D92162648
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa
Signing time:             Tue 05 May 2026 01:00:49 +0000
ROA not before:           Tue 05 May 2026 01:00:49 +0000
ROA not after:            Mon 03 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        13.48.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:d7:53:1a:f9:6a:9f:2d:fb:e1:af:07:58:9f:9d:92:16:26:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  5 01:00:49 2026 GMT
            Not After : Aug  3 23:59:59 2026 GMT
        Subject: serialNumber=ca475a071285f1477031bad7797c9b99a6aa46f02164bec09d47a4ce2ed38e74, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:1e:a4:59:59:11:81:5e:a5:9d:d0:08:2d:
                    80:ae:d9:9b:b9:3a:55:62:03:5e:78:78:99:88:13:
                    c1:3e:14:e8:56:b8:97:06:97:8f:83:51:9d:d2:6b:
                    08:b7:06:62:b4:9b:3a:9c:2f:b5:23:fb:f0:b1:65:
                    00:74:a4:fc:57:cd:8e:4f:19:2e:a2:75:ef:ae:56:
                    7c:5d:0e:69:f4:a0:c2:ef:8a:4b:32:1e:fb:fc:66:
                    39:67:d3:75:85:08:20:c6:dc:11:08:fc:30:15:b9:
                    ef:45:56:d7:7d:35:4c:1c:69:a9:0d:a3:9c:88:58:
                    ac:af:b6:73:24:9e:37:ed:c6:00:14:14:bf:09:fa:
                    75:d3:24:10:19:dd:85:82:81:d3:25:37:f1:b6:a4:
                    cb:6f:86:b4:13:a3:5e:41:0e:db:b2:1d:13:d6:03:
                    10:a8:f5:f3:fe:52:8a:0c:33:6f:3e:65:1c:55:4f:
                    90:15:32:98:10:48:14:d9:9d:86:33:a7:1c:ab:d2:
                    cb:1c:44:9e:3f:d5:61:eb:af:5e:fb:3e:cf:2c:5d:
                    60:d5:bf:c3:29:05:cb:3a:7f:53:6f:1f:fc:7a:07:
                    ee:1c:e3:3c:ee:09:77:80:7e:f7:42:fd:46:47:d6:
                    59:1e:bc:38:d9:0f:48:72:f7:68:df:14:0f:aa:2a:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:18:B8:BE:8E:60:9D:0E:B5:DB:41:8A:AD:D1:BD:CD:D1:BC:B3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce454ac7-f728-48cb-a408-0d2789ffd4c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.48.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:22:36:6d:a7:b6:17:80:c3:30:91:ba:a9:85:73:c8:30:
         3b:34:f3:c7:a2:0a:b9:c3:4e:02:97:22:87:62:89:68:39:a4:
         c3:64:b9:f9:e0:3c:c3:6f:a7:29:76:1f:4a:e3:60:35:64:72:
         87:ed:52:ef:32:cb:3e:3e:88:ce:2d:1f:71:5d:4f:8c:f5:b7:
         3a:82:8f:42:3a:96:6f:4b:43:c5:3b:09:ea:1c:97:cb:4b:3b:
         ca:af:fc:1e:5f:fc:52:eb:7c:0c:d9:9a:41:cc:f2:b9:e2:b9:
         3b:63:e0:00:69:d1:fe:fa:24:aa:b0:45:c9:f3:69:81:9f:e4:
         78:e2:30:9b:d5:49:ce:90:4e:1f:34:2c:8d:67:29:65:da:cb:
         98:0d:8d:1c:43:55:d3:34:1d:1a:e0:b9:5a:e5:51:0e:a2:e0:
         de:ab:03:38:0d:4e:d8:21:f0:a4:d7:57:ba:a1:b8:e3:c9:83:
         c8:b5:a1:28:d3:c0:e9:c6:8a:70:7e:21:55:b9:05:ed:fb:da:
         10:28:1c:88:df:49:cb:d4:35:83:56:b5:bf:ff:e5:fa:b4:9c:
         34:be:ce:d8:50:be:07:d1:d5:19:fb:bb:8a:80:a4:f3:33:93:
         1e:29:c2:1c:f9:2e:37:28:13:7a:b8:e6:c9:f6:85:b2:af:a7:
         7f:6a:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:52 2026 by rpki-client