Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa
File:                     dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa (raw, json)
Hash identifier:          PRsnXD4Cy7WtCgI4khevrqgT6Y49B+DHxweAA9+rpRQ=
Subject key identifier:   50:B0:DF:B7:BA:6C:E2:CC:E4:BD:4D:58:5F:D1:85:2A:7F:6C:55:46
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       395FF12831739AF15458DF6932D5A8FDCA78FA0D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa
Signing time:             Fri 08 May 2026 00:50:41 +0000
ROA not before:           Fri 08 May 2026 00:50:41 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.230.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5f:f1:28:31:73:9a:f1:54:58:df:69:32:d5:a8:fd:ca:78:fa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 00:50:41 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=9de988a520b81654a4c757047027a630de4c95d72df5507ddee933ffe8d5f338, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:e1:dd:1c:6d:6c:0f:9b:e0:de:da:96:62:
                    67:67:78:01:5b:04:ea:89:67:75:a0:06:c9:96:4e:
                    0b:ef:89:d9:e6:4a:b9:f4:01:37:04:60:9d:6b:dc:
                    13:4d:b0:dd:44:0e:b8:d5:0c:81:6f:a7:f3:89:91:
                    6d:c4:79:ac:ff:f9:d8:db:3d:38:29:51:b2:bd:0a:
                    71:79:d0:41:0e:e3:79:25:d0:25:7e:03:55:73:a7:
                    c3:b8:fe:bd:5f:fb:c6:fc:b6:ad:88:c2:1f:12:b9:
                    92:2c:f4:75:ff:e6:18:7d:42:c6:09:7c:17:c2:4d:
                    ce:cc:f1:03:a0:71:b9:dd:47:56:c6:df:ea:f5:44:
                    c0:82:e1:b9:76:91:94:22:9f:e4:2f:58:43:7b:23:
                    ee:42:e1:1f:a1:3d:56:cb:76:be:b8:f5:6b:0a:e2:
                    5f:43:41:16:15:0d:76:db:36:a5:5d:75:a9:25:43:
                    56:e5:63:1e:c6:5c:b5:ae:68:48:06:d6:37:1e:e2:
                    92:de:f4:75:dc:23:cd:c9:83:f3:c8:9f:32:e3:48:
                    c7:08:33:31:e6:93:11:7f:34:b9:9f:98:11:43:db:
                    82:5b:1f:fc:c4:5f:7f:38:12:02:15:2b:39:17:37:
                    2b:ec:4d:92:3e:9e:e0:e2:39:48:c9:38:48:91:c1:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B0:DF:B7:BA:6C:E2:CC:E4:BD:4D:58:5F:D1:85:2A:7F:6C:55:46
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:69:25:0d:1c:5f:98:50:96:1b:b3:73:04:71:0c:79:5f:
         83:3e:b4:5f:3c:68:4d:7c:9e:fc:59:a1:7b:1a:7e:a9:13:1a:
         ef:77:04:f1:9d:00:aa:b5:df:b9:b1:2d:25:90:78:6a:18:71:
         7f:87:ae:d4:a8:3f:61:b9:12:1c:f5:42:fe:bd:c4:49:39:5f:
         99:1d:a6:57:bd:9d:05:e7:4c:90:b6:9f:a6:2b:d3:a4:30:b5:
         34:7c:bd:ae:42:fb:14:9e:c9:2a:e4:a8:00:fc:4f:aa:b8:ad:
         5d:81:cb:b7:51:95:6f:c0:41:c8:b0:e4:37:2c:66:0f:b6:c0:
         32:ba:b9:b5:e7:83:52:cd:f2:56:f6:d9:21:64:b4:e3:d2:b7:
         5d:41:4d:64:f8:9e:c0:29:29:cb:67:3a:c8:4b:4d:f6:17:61:
         46:44:e1:a8:72:19:f7:57:2f:76:19:c8:7c:4e:82:eb:52:c0:
         ca:c5:99:f3:7a:a3:14:18:b6:38:5e:40:d1:9d:08:c8:c5:ca:
         f8:41:17:1c:a3:48:18:90:44:6e:58:d6:53:00:57:2f:9c:84:
         b4:d2:31:1b:f3:9d:9a:67:d0:d7:84:48:61:8b:23:b4:d6:62:
         c9:bd:7b:82:6e:44:99:f9:55:82:3f:62:9d:da:1d:36:23:0e:
         6f:4d:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:41:06 2026 by rpki-client