Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
File:                     315b53bc-c49b-4b88-b4d4-80075254ebde.roa (raw, json)
Hash identifier:          QFt/HO7BOZ1IQJEvVxtVCxIxhL71Mi0aJHRLf7JiOQI=
Subject key identifier:   7E:DB:D6:40:91:CC:02:FF:6E:B9:E8:DC:E1:44:82:DC:12:FF:DD:96
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       24ED4852F72E3F540818E5D2C406F396BBF2DC3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
Signing time:             Thu 22 Oct 2026 03:11:05 +0000
ROA not before:           Thu 22 Oct 2026 03:11:05 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.237.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:48:52:f7:2e:3f:54:08:18:e5:d2:c4:06:f3:96:bb:f2:dc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 03:11:05 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=a139b72bcea034fee1339f4d2dac77f7a4d53ef3621ea6f11898d2495186763b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:c4:97:9f:35:db:38:fb:6b:9a:07:ee:99:
                    a6:2c:5f:b6:21:d3:e7:36:df:cb:13:8c:45:3e:23:
                    17:bc:1e:dc:ee:2e:73:56:c8:94:a0:92:28:7e:a0:
                    a2:f7:f7:44:14:b6:67:e3:c2:cc:bc:e1:8c:db:c7:
                    9a:b6:f0:fe:04:16:69:d7:61:2f:5c:a4:7d:d6:9e:
                    c1:e7:8f:6b:6b:f8:e8:cf:1f:ac:b1:31:4a:79:f2:
                    a1:ee:7f:7a:9a:bb:41:11:02:8f:f8:e2:d3:1c:76:
                    4a:6b:9c:0b:78:90:6f:a8:14:43:87:18:19:fb:e4:
                    57:54:8a:13:90:09:7e:9a:cd:43:bf:2f:d6:4c:bd:
                    a9:65:0f:cc:5a:bb:28:57:a8:de:da:b0:1b:95:da:
                    9d:b7:c9:27:22:74:ee:45:02:ba:ff:c2:99:8c:59:
                    8c:75:27:72:a9:79:c8:a5:46:0b:7c:40:e7:d8:0b:
                    2b:c9:fa:d4:d4:78:2c:94:9d:01:ff:44:61:7c:99:
                    5a:6e:c5:79:66:09:51:22:2c:75:c1:0d:d7:80:2f:
                    68:f2:ff:52:c1:a1:92:a7:91:37:e4:d0:9e:6f:89:
                    18:13:76:8b:39:5d:10:8f:59:e5:3b:6b:65:25:ab:
                    09:64:98:2d:03:ff:ed:df:31:eb:c4:96:35:16:4d:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:D6:40:91:CC:02:FF:6E:B9:E8:DC:E1:44:82:DC:12:FF:DD:96
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.237.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:74:55:f4:99:3d:b0:5b:d4:83:67:24:e9:0e:a2:fb:f8:46:
         17:e6:2f:cf:aa:02:d2:58:e2:b6:d2:b9:d9:c2:58:b0:ce:9e:
         e3:68:a5:64:91:b0:72:3e:35:4b:73:11:f8:c3:a3:f6:63:e6:
         6a:ca:c9:14:f1:96:2c:17:7f:e9:64:e6:7f:7d:03:be:03:e7:
         10:20:60:27:46:ec:6e:e6:b4:08:65:64:ce:92:85:9a:d7:51:
         c8:fa:6a:c9:f1:46:1f:88:d1:74:4d:1e:28:9e:fa:b4:e8:ac:
         90:b0:da:e6:30:30:74:36:96:c3:0e:b3:e3:6a:c1:d0:46:c9:
         47:bf:c9:56:a6:1d:c9:eb:82:3b:68:94:d6:c2:29:bd:bc:80:
         95:c6:27:e5:2f:1f:ce:cb:20:0d:3e:cb:8d:06:6e:46:16:85:
         cd:df:41:e9:5d:69:1a:13:60:86:68:f3:ce:2a:ba:78:16:d7:
         84:62:77:e5:2a:ce:f2:10:a8:bc:72:f0:76:28:b5:e2:ca:c4:
         5d:65:e3:00:7d:0f:55:41:00:5b:f4:08:bc:3a:f3:49:53:f7:
         6a:8f:af:d7:99:83:64:62:02:ec:cd:4b:94:5f:7f:49:0b:a7:
         b8:6b:83:0a:c3:c1:88:c1:5a:6a:77:ca:85:3f:d6:f0:24:53:
         50:c4:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:49:59 2026 by rpki-client