Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa
File:                     471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa (raw, json)
Hash identifier:          WunlnvUCdMnj9A0GEJGtl5Cob6x41FmH5CVTy/4XWF0=
Subject key identifier:   2B:1B:80:BA:37:31:6D:1A:76:25:1C:44:EE:1C:88:A4:7E:74:18:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       42DA525B8E5AFA097BC23FAE955B4AF6331472E8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa
Signing time:             Fri 15 May 2026 03:42:00 +0000
ROA not before:           Fri 15 May 2026 03:42:00 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:52:5b:8e:5a:fa:09:7b:c2:3f:ae:95:5b:4a:f6:33:14:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 15 03:42:00 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=9ced792fb93e30db1f82e2ec1cbae26077b4786e2b57672f462ad7505f7cd68b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:3f:34:7e:12:50:7a:64:88:51:50:04:44:
                    38:ec:72:2f:12:de:65:6f:bb:56:ad:7c:51:1d:27:
                    e7:88:89:3c:be:cc:1b:5b:39:c4:df:d1:54:6c:73:
                    9d:9a:66:11:9a:9f:47:e3:7b:a0:c5:2c:44:0c:8a:
                    c0:81:c1:61:25:69:1c:f3:9c:00:3d:02:46:15:68:
                    41:69:e9:51:c9:7d:0f:86:82:79:17:d6:20:76:f3:
                    a0:72:98:50:43:9b:c7:fb:f9:d2:48:1d:eb:81:44:
                    d0:10:e7:3c:5a:28:d1:c5:2b:aa:2e:1f:76:e0:9f:
                    6c:a7:ef:73:74:fa:00:97:9d:1f:68:5a:50:f9:56:
                    19:e4:4a:4c:d2:10:c1:88:f9:ef:7f:0d:71:2b:44:
                    52:23:07:38:53:20:ca:8a:ef:7e:fe:cc:03:70:1a:
                    e6:69:88:b9:bc:1b:ac:67:df:7b:67:30:6d:d3:c6:
                    1f:32:a4:96:15:18:b6:d6:93:83:af:1e:cb:24:32:
                    cf:8f:38:94:06:12:92:06:78:ee:14:9e:c8:aa:62:
                    7d:f2:2d:bf:a7:30:aa:56:7d:0b:21:50:64:be:b4:
                    da:1a:e5:f4:ef:87:ae:f7:26:f5:93:99:b4:4b:3e:
                    a0:d5:02:4d:8f:94:88:4a:7d:4c:4b:f2:7e:14:41:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:80:BA:37:31:6D:1A:76:25:1C:44:EE:1C:88:A4:7E:74:18:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471485c3-8688-4a14-8c88-8d2ecaedeeb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:98:98:05:b1:7b:3b:5c:2b:27:0e:9f:91:f6:e7:de:b6:65:
         01:56:78:7c:ad:ed:a4:fb:bd:7d:1c:dc:21:7d:9c:8a:18:37:
         34:fa:57:08:55:d7:62:82:17:ad:d8:57:4a:ae:ba:8d:89:1d:
         8b:9a:85:47:13:be:f1:5f:da:b3:19:dd:77:a8:61:71:8f:f8:
         2b:20:ea:1c:e2:4d:e7:52:4d:1e:62:fb:ba:b2:c2:ac:14:09:
         09:c5:a5:93:22:61:db:1a:35:a1:1c:a3:c1:55:88:47:0f:42:
         69:46:79:b7:32:8d:21:91:5d:d7:df:24:d5:7d:0f:a5:e7:bf:
         64:8b:ec:53:91:c0:66:ca:66:e0:2a:73:d7:69:f6:fa:1b:db:
         71:4e:ea:fa:71:c2:5f:f1:c1:8e:9c:ec:d1:13:72:0d:30:b9:
         21:9a:3f:6e:c9:8b:2a:35:b2:1c:fb:3f:12:60:d4:41:6e:d8:
         c3:48:e9:30:34:7e:0a:13:36:3d:cd:80:e5:32:5f:fb:db:83:
         13:33:94:1e:4c:3e:b6:51:21:b8:30:15:6c:7e:76:fb:63:29:
         31:1b:07:ff:36:2f:83:a7:43:4f:21:61:10:5b:4f:00:2f:d5:
         f4:78:c4:48:17:7f:15:97:a5:be:bc:ab:fa:26:79:c3:8f:5e:
         85:e7:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:33:48 2026 by rpki-client