Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c4b9e9-6111-4b6b-b2f9-b62c7e057aad.roa
File:                     24c4b9e9-6111-4b6b-b2f9-b62c7e057aad.roa (raw, json)
Hash identifier:          koZsaYtBeucGEvbwjY+ju/ETdfqDYcILHBg5ugeTbGA=
Subject key identifier:   41:CA:80:31:FC:F4:F2:B3:99:7C:E9:69:87:88:9A:D0:13:6E:47:57
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0A6F0A77FDFB4B2BA31223D15B0DB35905FF7963
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c4b9e9-6111-4b6b-b2f9-b62c7e057aad.roa
Signing time:             Wed 25 Feb 2026 03:01:11 +0000
ROA not before:           Wed 25 Feb 2026 03:01:11 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.195.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6f:0a:77:fd:fb:4b:2b:a3:12:23:d1:5b:0d:b3:59:05:ff:79:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 25 03:01:11 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=6118f901c33a5be46d0d80a5770410c9a9cc181de529332b7bb0206ae26a59f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:01:f3:8b:6f:d1:14:a5:31:c6:dc:7d:bd:
                    b9:14:bc:cb:dc:05:04:e3:f0:1e:b0:d5:11:94:f0:
                    fd:a0:b8:7e:4f:1f:24:31:c7:85:28:3b:39:b0:ba:
                    81:91:c6:7b:a5:cb:bb:90:20:07:a9:53:02:39:1b:
                    56:75:e0:4c:52:9c:fe:4e:51:81:e2:74:70:dc:70:
                    9c:ec:1c:4c:36:ba:b9:1c:56:f5:21:da:15:d9:f6:
                    5e:07:1e:00:a8:18:a0:b8:3f:5d:0d:56:6b:5e:cd:
                    1d:bf:98:74:e1:01:83:a4:58:fa:b8:f3:11:6e:64:
                    92:ae:fe:be:86:bc:a5:3e:b2:a9:f2:8c:4f:b4:b4:
                    bd:76:56:58:0b:2a:d7:f6:ff:2a:27:b1:fa:b8:e4:
                    92:d1:89:b9:f1:41:88:6e:b8:b3:6e:a6:98:c1:49:
                    16:26:42:fd:2d:c0:b6:eb:ab:69:8c:f0:00:10:9e:
                    13:44:c4:11:b9:96:f2:6e:5a:40:eb:b2:89:b9:7a:
                    12:e2:3c:77:26:18:f2:09:ae:f7:88:5d:a7:d2:67:
                    e9:13:41:8c:26:f2:2a:93:88:4b:c7:06:7b:14:06:
                    1a:6c:f5:23:05:5e:44:d0:32:83:44:15:a5:6c:90:
                    a2:cf:1e:b2:93:5e:08:29:b9:9d:02:b7:b2:74:8c:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:80:31:FC:F4:F2:B3:99:7C:E9:69:87:88:9A:D0:13:6E:47:57
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c4b9e9-6111-4b6b-b2f9-b62c7e057aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.195.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:7d:fd:e4:18:bf:ce:6b:1d:7d:dd:e7:6b:96:81:aa:af:
         b8:7d:a6:50:c7:3a:aa:af:eb:dc:58:64:0c:5f:b0:c9:a7:71:
         fa:d5:0b:59:32:d3:8a:4d:d5:87:54:25:11:33:af:97:70:d1:
         cb:9f:73:59:93:4a:86:8b:4e:94:b9:ec:e4:aa:fa:7b:53:f9:
         5c:c3:3c:43:18:1e:14:43:9c:bc:42:b4:96:22:54:80:3e:3f:
         62:ae:a1:52:27:17:39:11:d8:54:fc:a9:4e:74:21:02:5b:67:
         c5:01:fc:2f:bc:d6:f2:b4:89:bc:02:3c:41:6a:ed:e1:6e:35:
         cc:49:2a:25:68:f8:f8:b5:e6:cb:29:c5:ee:49:c8:aa:89:3b:
         16:19:88:66:b9:7c:d3:c1:d5:ac:cb:18:50:26:e2:64:16:68:
         56:d3:d4:ad:73:df:e5:55:bc:74:a4:f7:34:18:b2:81:a1:c9:
         48:66:8f:a9:40:7d:bd:56:68:19:f4:d4:ed:b6:07:73:3d:6d:
         a9:c7:ad:aa:93:0d:31:3a:cd:5b:83:94:53:d4:09:08:8b:c4:
         60:e4:bc:72:8c:ba:d0:69:02:f1:8b:2d:6b:ec:2d:16:fa:b4:
         9e:85:d7:d8:f6:9a:52:2e:b0:72:6c:52:9c:9a:b7:76:0c:61:
         2b:38:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:35 2026 by rpki-client