Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50cc1f35-e503-48ec-a456-58389f47b9e4.roa
File:                     50cc1f35-e503-48ec-a456-58389f47b9e4.roa (raw, json)
Hash identifier:          ZR2Z2jiIuDVmKKheHtczs2pqq2nxrAv3gCHt170y3uY=
Subject key identifier:   B1:D6:99:BD:F2:EA:9B:88:8D:2D:7E:F0:AD:27:01:28:24:61:B1:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6AB6A54A6E466435F51EA9B315BBC63E04B002F7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50cc1f35-e503-48ec-a456-58389f47b9e4.roa
Signing time:             Fri 15 May 2026 03:31:38 +0000
ROA not before:           Fri 15 May 2026 03:31:38 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.253.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b6:a5:4a:6e:46:64:35:f5:1e:a9:b3:15:bb:c6:3e:04:b0:02:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 15 03:31:38 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=f2d3c8543ee241b4cc262e68f38b94cd26ad65f2a9267ad208c77abea770b773, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:d6:c3:0d:60:b6:bb:2f:bc:ed:1d:35:4e:
                    07:53:2d:84:f6:eb:d9:dc:36:09:e4:33:36:e1:37:
                    72:a6:4b:9c:5f:78:0c:56:37:7c:9c:50:62:8d:23:
                    2b:27:fa:2a:c5:9c:22:2c:78:e1:19:c9:f1:51:f7:
                    59:1e:65:80:91:53:d8:cb:30:12:f9:94:9e:8f:f1:
                    05:d1:71:9e:21:0f:ac:2b:9b:ed:42:33:db:91:c8:
                    bf:91:fc:b5:ab:b9:7c:3e:58:43:85:6a:8c:44:68:
                    40:02:41:67:b4:56:70:eb:b3:db:25:b0:ff:07:11:
                    d9:42:89:5f:be:e3:34:2e:5d:0c:3c:27:80:92:36:
                    c7:03:32:0b:b5:86:69:1b:3a:e6:10:57:d3:35:c5:
                    fe:60:5c:ec:dd:f5:c2:de:16:80:59:55:52:31:17:
                    5e:bf:3d:6f:d7:e0:c9:67:eb:66:a8:62:5f:1d:48:
                    4f:42:c6:a6:3d:9c:13:02:f4:3a:3d:a7:b8:74:b5:
                    0c:b5:e7:e6:9c:0c:34:c5:f3:d8:89:bf:5d:95:e4:
                    0f:64:54:aa:58:06:82:3d:e5:13:3b:8d:f3:d6:e4:
                    1d:ac:33:bc:1e:4b:84:e5:e2:b0:cd:01:4b:8d:1e:
                    d9:36:8a:42:0f:41:2f:6f:87:07:0b:71:c6:58:c3:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D6:99:BD:F2:EA:9B:88:8D:2D:7E:F0:AD:27:01:28:24:61:B1:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50cc1f35-e503-48ec-a456-58389f47b9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.253.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:07:21:9c:1f:33:b6:2d:78:40:cf:8c:93:aa:cb:64:0e:
         5c:87:fc:9e:78:e0:a1:e6:e9:eb:57:ec:47:8c:e7:f8:fa:0f:
         4f:a4:0d:e3:98:a1:35:e3:d9:0a:7b:10:25:f9:56:e0:53:9c:
         d7:eb:ff:f3:61:f7:28:aa:8f:f1:ef:c1:28:0c:8a:57:e1:06:
         98:5c:4e:62:b5:0e:d6:ce:88:8f:67:f3:0f:90:cb:29:88:e2:
         32:8e:70:68:e7:7a:8d:91:f6:da:64:d8:56:9b:bd:4f:0f:9b:
         42:b1:eb:9d:dd:b1:c6:73:8e:fb:20:b5:b9:65:49:08:3e:c2:
         af:71:bb:b1:d7:99:d4:fe:e8:fb:d1:f4:5c:c2:c7:ea:c7:a6:
         76:c1:37:b9:83:b6:a4:19:da:bb:69:cf:6f:2b:31:50:25:3f:
         2d:04:50:fd:b0:c8:6f:e6:9c:2a:c2:88:9e:41:d3:ee:87:86:
         09:c1:cf:59:63:be:9b:72:c3:0f:9f:e3:de:09:c7:38:80:48:
         6a:80:71:49:d2:38:ef:3a:09:a6:77:e4:3d:38:e2:da:7f:71:
         da:24:58:ce:62:58:45:56:34:0e:87:97:da:55:17:a7:77:98:
         f7:da:61:09:55:2b:e3:ce:a6:a2:75:9e:a8:c4:04:2d:df:0d:
         02:3a:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:50:22 2026 by rpki-client