Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26b6866d-222e-4c40-bc61-82910f2cb108.roa
File:                     26b6866d-222e-4c40-bc61-82910f2cb108.roa (raw, json)
Hash identifier:          V+ATYuEPF5Yvna1BLNayMd488Vuv6kTzMT8eGpAW0AY=
Subject key identifier:   D3:EF:5C:3C:23:41:52:C2:75:FF:CF:BB:26:26:FB:4D:F9:67:B7:76
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E02630836C4365090144FDE8B126C1A7DAFB3EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26b6866d-222e-4c40-bc61-82910f2cb108.roa
Signing time:             Tue 04 Nov 2025 00:30:16 +0000
ROA not before:           Tue 04 Nov 2025 00:30:16 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.210.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:02:63:08:36:c4:36:50:90:14:4f:de:8b:12:6c:1a:7d:af:b3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov  4 00:30:16 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=7588954ed6b7800986d5d044f639ba419fa01536f0e0e44224416c72d510b25e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:fa:50:ab:60:fc:7e:74:07:20:2e:93:4a:
                    73:9a:bd:ad:fa:4a:c9:c0:84:9f:51:6a:6f:c6:1b:
                    8e:cf:c5:bf:5a:13:95:05:8b:6b:e0:8e:4b:8d:10:
                    69:32:fc:04:fa:af:cd:da:73:bc:f7:99:68:b5:21:
                    f7:df:89:c4:c6:a8:7f:ed:53:18:f3:7f:59:36:d4:
                    fe:1e:08:9e:48:34:4b:34:21:0e:dc:49:4c:2a:32:
                    45:46:7d:d7:8e:68:8d:2c:59:9a:ac:2d:b8:54:f0:
                    a7:4f:c0:d7:9b:23:32:89:14:4c:8f:8d:8d:10:ab:
                    ae:0d:37:a0:85:0f:e6:e7:66:4f:91:c7:64:d7:dd:
                    2a:29:85:d3:05:c9:07:36:fd:d6:3c:ab:04:f2:71:
                    fb:fa:0f:c9:f6:5c:7d:3b:77:8e:8b:b0:f3:37:c8:
                    89:55:3c:5d:f9:47:03:bd:d9:77:d9:14:8e:ac:18:
                    62:5b:37:08:f6:05:22:44:25:ff:85:27:e2:3f:e7:
                    bb:b1:a3:89:52:a8:5e:7a:a7:64:e9:66:1f:72:ac:
                    17:26:12:c2:10:a0:b6:06:a9:9b:f3:02:0f:cd:20:
                    a2:95:bd:2a:81:1c:a3:f7:8e:03:af:8c:be:94:e8:
                    93:59:13:ed:75:3a:73:a8:6d:13:fa:d8:6d:d1:1e:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:5C:3C:23:41:52:C2:75:FF:CF:BB:26:26:FB:4D:F9:67:B7:76
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/26b6866d-222e-4c40-bc61-82910f2cb108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:97:a5:66:ce:9e:67:b4:7e:bb:85:c5:8a:59:15:1e:0d:5a:
         89:25:ab:3b:98:0f:9f:00:0d:78:3a:38:e9:42:33:c7:d4:72:
         b0:b9:9f:20:6c:96:f4:df:5d:bd:2d:df:83:09:35:d2:2b:77:
         96:26:a3:2b:40:af:7b:a3:53:a1:24:11:c0:fa:7e:b5:44:75:
         f9:65:70:f4:be:78:05:8a:fc:5e:bc:c1:dc:3e:f3:f4:39:c1:
         18:3a:b2:e8:31:1c:02:6d:43:65:04:e3:80:a4:78:12:57:94:
         d1:75:13:ad:fe:99:bb:b9:f2:41:43:65:52:26:91:8a:29:4c:
         a0:ce:e2:9f:42:95:f9:0d:fd:43:43:99:1f:82:cf:e5:7a:a7:
         91:66:f9:02:3b:a1:c9:c4:34:a3:ee:ce:28:69:39:83:4c:5f:
         b0:ce:06:85:ee:3c:8c:b7:c1:38:b4:3e:a2:e1:4a:61:d0:0a:
         0a:5b:8b:27:21:b2:19:2a:2e:dc:22:e3:fd:52:a0:30:b0:70:
         a2:70:96:fc:e1:3d:ae:97:c1:de:04:ad:cb:00:3f:bb:94:a5:
         a8:e9:6e:d2:5d:4b:46:2a:23:0c:8f:39:cb:6c:39:2c:e6:cf:
         90:a8:3b:f8:e9:f7:fe:91:a5:08:7f:8a:48:e9:ad:89:41:8f:
         2c:ec:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:55 2025 by rpki-client