Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
File:                     06632fd0-6abb-437c-aec2-0a661e165739.roa (raw, json)
Hash identifier:          evr54sLSnG6B1OpYyy5EpsOmXE1oLbcIvGN4MOvkJQE=
Subject key identifier:   8E:6B:F3:D8:9E:71:2C:CF:A7:0B:3E:DA:74:69:A4:57:97:F3:02:4B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7E5807437C5633187A7874D0A1D537398D15FD56
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
Signing time:             Sat 28 Feb 2026 01:51:30 +0000
ROA not before:           Sat 28 Feb 2026 01:51:30 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.83.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:58:07:43:7c:56:33:18:7a:78:74:d0:a1:d5:37:39:8d:15:fd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 01:51:30 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=8dcaff45cdd010ecfcb686b4fccffbac3e34412432c5dd6bb3520edf0b8dd3a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:46:cf:b4:5c:74:7a:74:a1:7d:de:8f:9c:
                    ca:cc:3b:23:47:f0:0c:f2:1f:c1:ac:7b:84:29:3b:
                    28:ad:f7:12:17:e1:39:e3:38:bb:1e:9e:f1:d8:a7:
                    42:06:81:6d:46:cd:bf:78:68:6e:0a:1b:68:60:47:
                    be:91:cc:af:9b:f9:75:a5:e9:e7:e2:fb:9a:e5:88:
                    b7:6b:08:31:87:70:df:ac:7e:e9:52:6c:57:3c:f3:
                    f1:66:7b:be:c4:1c:d9:8f:63:86:42:9a:43:bd:de:
                    86:d5:60:c2:69:77:53:72:3c:4a:05:65:48:fb:fc:
                    c8:71:cc:10:d5:f7:17:26:62:91:a7:6f:11:6e:3f:
                    68:d7:75:37:68:98:55:a4:92:98:f2:31:84:ce:4f:
                    56:4e:9f:51:51:3b:c7:d5:1e:f5:c0:5b:d4:7c:ac:
                    74:82:7d:94:8d:d8:e4:00:e6:2d:71:3c:ab:cf:c0:
                    5a:6d:79:b9:ac:6f:86:74:56:81:85:b3:db:46:28:
                    e1:f7:76:99:66:04:75:f0:b6:5c:82:e9:57:71:33:
                    4e:b7:23:3e:be:7c:ef:50:a4:38:3c:c9:27:df:fb:
                    5a:63:3e:fc:6e:b3:fe:93:49:d1:ae:47:8d:4a:1b:
                    c9:46:99:da:15:8b:59:ca:2f:0c:ac:f9:8f:98:42:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:F3:D8:9E:71:2C:CF:A7:0B:3E:DA:74:69:A4:57:97:F3:02:4B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:16:42:3f:d6:dd:73:1d:55:6e:56:5f:28:96:fd:dc:2f:
         1a:c9:32:c2:8b:1d:71:e8:16:21:56:ec:43:67:bb:37:91:ac:
         fb:e1:f1:02:74:9c:5c:f0:33:7a:90:75:08:22:cf:25:db:38:
         42:d9:f0:53:e2:da:05:26:b1:1e:4b:89:22:95:94:7b:aa:16:
         b4:41:60:b3:f0:83:04:13:b0:ee:f8:12:66:be:e1:b4:bf:c5:
         63:d1:29:9e:c0:a3:da:f4:11:39:fe:2f:18:3a:35:10:6e:c5:
         ef:6c:b5:bb:a7:b2:1d:00:22:57:d1:4c:14:83:cf:84:14:8a:
         2c:d4:ef:fc:f8:2a:02:39:da:8c:ed:c8:ea:e9:eb:45:2a:cd:
         ca:44:e7:20:c8:89:fd:b2:0a:b7:c3:4c:d2:c6:ff:fa:46:25:
         b4:c0:c8:17:e6:42:91:a6:54:22:e4:48:1d:06:d7:75:9e:cf:
         a4:47:85:2f:22:ef:0c:5b:ed:4d:80:45:aa:d3:78:6c:7b:f2:
         b7:54:0d:25:c8:cc:67:83:81:34:c8:cf:c8:c6:38:05:b2:08:
         7d:b2:d7:40:9d:ce:1a:54:0b:35:a6:21:18:c7:14:70:4b:9a:
         dd:a7:d8:71:ec:0a:12:16:f8:3f:30:af:d4:d8:94:95:f1:f4:
         c2:2c:63:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUflgHQ3xWMxh6eHTQodU3OY0V/VYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDE1MTMwWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZGNhZmY0NWNkZDAxMGVjZmNiNjg2YjRmY2NmZmJhYzNl
MzQ0MTI0MzJjNWRkNmJiMzUyMGVkZjBiOGRkM2EwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcS0bPtFx0enShfd6PnMrMOyNH8AzyH8Gse4QpOyit9xIX
4TnjOLsenvHYp0IGgW1Gzb94aG4KG2hgR76RzK+b+XWl6efi+5rliLdrCDGHcN+s
fulSbFc88/Fme77EHNmPY4ZCmkO93obVYMJpd1NyPEoFZUj7/MhxzBDV9xcmYpGn
bxFuP2jXdTdomFWkkpjyMYTOT1ZOn1FRO8fVHvXAW9R8rHSCfZSN2OQA5i1xPKvP
wFptebmsb4Z0VoGFs9tGKOH3dplmBHXwtlyC6VdxM063Iz6+fO9QpDg8ySff+1pj
Pvxus/6TSdGuR41KG8lGmdoVi1nKLwys+Y+YQprBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjmvz2J5xLM+nCz7adGmkV5fzAkswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA2NjMyZmQwLTZhYmItNDM3Yy1hZWMyLTBhNjYxZTE2NTczOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2U4AwDQYJKoZIhvcNAQELBQADggEBAJwPFkI/1t1zHVVuVl8olv3cLxrJ
MsKLHXHoFiFW7ENnuzeRrPvh8QJ0nFzwM3qQdQgizyXbOELZ8FPi2gUmsR5LiSKV
lHuqFrRBYLPwgwQTsO74Ema+4bS/xWPRKZ7Ao9r0ETn+Lxg6NRBuxe9stbunsh0A
IlfRTBSDz4QUiizU7/z4KgI52oztyOrp60UqzcpE5yDIif2yCrfDTNLG//pGJbTA
yBfmQpGmVCLkSB0G13Wez6RHhS8i7wxb7U2ARarTeGx78rdUDSXIzGeDgTTIz8jG
OAWyCH2y10CdzhpUCzWmIRjHFHBLmt2n2HHsChIW+D8wr9TYlJXx9MIsYw0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:04:10 2026 by rpki-client