Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e0e4d35-b9b6-4d0b-ac51-f4bcf19abaaa.roa
File:                     0e0e4d35-b9b6-4d0b-ac51-f4bcf19abaaa.roa (raw, json)
Hash identifier:          X59v0b88GyrhoMrKUz+OOemN+Hd3o6Qc56ClyJNV2io=
Subject key identifier:   A1:70:7A:5B:10:58:D9:A8:7F:37:12:BE:E4:3E:1D:87:24:FC:CC:A7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       78798FFDC289C14386CD5E378B1D41D998E6E008
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e0e4d35-b9b6-4d0b-ac51-f4bcf19abaaa.roa
Signing time:             Thu 22 Oct 2026 02:40:46 +0000
ROA not before:           Thu 22 Oct 2026 02:40:46 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.239.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:8f:fd:c2:89:c1:43:86:cd:5e:37:8b:1d:41:d9:98:e6:e0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 02:40:46 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=c68e0cb54e91054622015c414deb9c7c37a4a947c00c360eb335249ab04e16ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:ae:04:89:f9:d1:cf:4a:bc:04:95:b0:0a:
                    b3:53:2f:bf:a0:78:71:82:0c:ba:62:9b:a6:33:f9:
                    33:cf:44:47:3d:e6:eb:d8:2c:12:df:61:99:e2:81:
                    f7:26:34:a5:d2:a1:01:69:03:f7:5f:62:4f:f6:b2:
                    cd:07:1e:de:9b:34:f9:ec:6f:a4:d8:1f:f6:9d:10:
                    ea:e7:d6:92:9c:5a:c8:06:6f:82:7b:1f:4b:e3:c2:
                    1c:77:2e:7c:b4:1d:fd:4f:89:11:28:f6:b6:a0:da:
                    cc:aa:c1:ed:7d:65:22:3a:ff:10:ac:9f:04:7e:60:
                    0f:9c:00:a6:b1:6d:05:3f:4d:d8:bd:49:43:f5:72:
                    03:9c:7c:86:93:07:4b:77:c5:b0:e6:12:8c:27:d9:
                    c3:54:24:48:a3:ac:ff:56:a8:23:1c:a1:6d:0f:2c:
                    1a:89:a5:1d:0b:f5:f1:b2:d6:63:43:bd:ff:b3:49:
                    40:e4:c3:15:eb:b9:1e:46:92:d0:75:ac:b3:84:cd:
                    fa:59:76:b2:25:09:73:78:fc:4d:61:f4:17:b1:4e:
                    dc:15:eb:7b:36:d1:44:98:e7:44:e3:3f:0d:30:e2:
                    c4:51:dc:b5:a9:e5:0f:a1:fc:ae:90:03:d8:75:08:
                    ca:a3:a8:9c:16:52:92:05:f6:4e:c1:c2:2d:53:5c:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:7A:5B:10:58:D9:A8:7F:37:12:BE:E4:3E:1D:87:24:FC:CC:A7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e0e4d35-b9b6-4d0b-ac51-f4bcf19abaaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:f1:f2:a6:87:bf:74:74:94:f8:75:1e:93:6e:68:b6:73:
         13:66:8a:6a:1e:2f:55:97:a0:6e:14:e0:f1:44:d6:ea:24:1f:
         02:4b:93:17:67:7e:1c:6e:d2:71:49:6b:74:d5:c1:ae:97:98:
         c2:c9:c7:7f:e9:cd:1e:34:dc:fa:73:6a:99:56:da:99:75:c5:
         1c:db:33:3b:e5:83:b6:a0:f7:ca:83:1a:67:3d:78:5b:d4:6a:
         72:93:d9:01:c7:e3:31:13:21:25:39:11:9e:6b:fa:8c:8d:fd:
         e1:10:3f:9f:67:d5:62:81:4f:4f:ee:f3:c4:46:36:d4:d5:c8:
         52:ce:c6:26:ad:ab:57:05:3e:a8:80:b2:f9:73:50:6c:0f:9f:
         1e:ae:35:ce:19:08:52:58:bf:36:7e:18:63:18:13:ae:15:01:
         85:8c:3c:f0:68:aa:4d:29:a6:62:b4:8d:45:6d:f9:f1:88:8b:
         d1:ec:e6:b4:dc:fb:fe:06:2a:80:4f:9f:56:9f:6b:d1:a3:b0:
         e2:48:c1:11:ec:36:42:12:71:ab:96:bf:76:48:01:8c:59:73:
         2a:99:9a:a6:51:aa:93:21:32:b8:ec:47:be:56:f3:a6:ef:ad:
         fd:49:2e:c6:7d:f4:0b:99:1d:ab:ea:23:1b:a9:a0:fa:80:51:
         35:ac:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:53:55 2026 by rpki-client