Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa
File:                     0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa (raw, json)
Hash identifier:          7BKfzgXlbvxf1IIfhMCiuPXr0RnvBw9T6n5DazhMfpg=
Subject key identifier:   8B:4B:7D:85:45:D1:93:5A:0E:AB:AB:09:10:F4:28:FF:65:95:CC:28
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       586F94E35C7FA1D4B42301EC3DC2EFAD9D7AC208
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa
Signing time:             Mon 27 Jul 2026 02:20:39 +0000
ROA not before:           Mon 27 Jul 2026 02:20:39 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.216.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6f:94:e3:5c:7f:a1:d4:b4:23:01:ec:3d:c2:ef:ad:9d:7a:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:20:39 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=73a67b67bfd475e26be3041aefa029000a7bcaa2db83205b942cc87228a4ec8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:51:12:d3:d2:3b:11:f0:9a:dc:23:1f:fe:
                    52:1b:82:6e:bf:c0:cc:54:ca:54:34:2a:2b:b0:72:
                    82:25:27:c7:b2:52:47:31:f3:ef:45:f7:c9:69:52:
                    98:c5:5c:2c:3a:0e:7c:ca:35:e0:db:5f:f3:cb:1e:
                    66:2e:3a:eb:b6:6b:15:c1:a8:9f:a7:3f:34:b3:93:
                    d9:ac:66:0b:ee:37:93:e1:0c:aa:85:58:bd:7c:bc:
                    00:1a:65:56:4a:57:ac:59:0d:cc:8b:46:52:7b:cb:
                    82:ad:59:a9:f8:65:40:b7:7f:a9:87:b7:30:d9:2b:
                    86:a0:3e:f0:9f:bf:62:cf:7c:96:40:84:b2:b1:16:
                    c1:86:03:c9:1d:61:d4:24:63:3a:7d:2b:4f:1b:01:
                    ca:4d:ac:f4:15:00:52:48:05:a9:c8:38:f3:39:a5:
                    d1:97:c2:2c:84:4b:e4:dc:bc:f2:12:60:59:ad:ec:
                    9f:dc:e8:99:13:b8:e7:c4:80:54:a8:9f:03:c8:a1:
                    b6:84:ce:09:96:33:ae:a8:0e:4c:8a:5c:42:1c:1e:
                    e3:57:50:62:83:2c:f2:17:61:04:ab:af:e0:c4:97:
                    1a:91:0e:54:7e:a9:0b:5a:78:ea:10:55:67:16:c6:
                    9e:a4:a6:5d:61:5c:15:c7:8f:da:15:50:61:b5:86:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:7D:85:45:D1:93:5A:0E:AB:AB:09:10:F4:28:FF:65:95:CC:28
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:1e:b1:6c:b6:12:a9:16:38:96:e4:40:a0:94:ea:bc:a8:
         95:fe:8d:ef:76:0c:c6:e1:44:03:a8:28:2e:c5:24:ab:cc:e6:
         38:9b:21:dd:b5:bb:b5:43:88:fb:d9:87:7a:be:05:cc:4e:ba:
         47:4c:9d:19:0f:4d:d9:0d:85:cc:a0:e1:f8:6d:10:66:91:56:
         6f:3f:58:3d:92:d8:da:9c:8a:55:fe:bb:b1:d9:c4:dd:6e:7f:
         85:d2:07:2c:ce:0b:c4:80:37:7f:60:7e:d5:c4:df:e0:02:ab:
         95:7c:37:2f:4b:35:b9:b2:98:40:73:c1:a9:91:f0:3d:b1:c0:
         a0:d3:8a:d1:b1:ca:30:76:ca:9a:8a:af:4a:2b:22:9e:f4:f2:
         3b:2c:62:b2:ca:fb:9b:71:e9:d5:53:44:e5:fb:bd:e6:d9:2c:
         b7:56:22:1c:b8:0a:f8:3c:ad:af:41:38:3f:f3:b9:8c:e8:8c:
         ac:9e:80:d4:ea:b8:b0:4f:19:e9:58:b3:33:92:50:95:3d:a3:
         ac:38:72:23:31:02:e4:40:20:e5:22:1d:36:e5:89:b3:37:81:
         94:d9:77:b1:54:02:a1:e8:63:c5:62:dc:e3:23:68:d1:0b:e5:
         ad:7c:58:69:2b:1a:3c:5d:72:7d:9a:aa:21:02:dc:02:23:30:
         8e:24:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:27:24 2026 by rpki-client