Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dd334f6-275a-4781-9253-d22d180917b4.roa
File:                     5dd334f6-275a-4781-9253-d22d180917b4.roa (raw, json)
Hash identifier:          cbx58RYg3RUK0w3wATiwQPa/tFoZY8PEWUDQBcp2O4U=
Subject key identifier:   E2:F2:A3:A9:A4:4A:A2:84:D5:7F:E5:57:09:24:DA:BA:11:44:B4:30
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       427008A31FA9763D4BC82E8D287844AF6D9F3989
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dd334f6-275a-4781-9253-d22d180917b4.roa
Signing time:             Sat 24 Oct 2026 01:11:00 +0000
ROA not before:           Sat 24 Oct 2026 01:11:00 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        54.239.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:70:08:a3:1f:a9:76:3d:4b:c8:2e:8d:28:78:44:af:6d:9f:39:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 24 01:11:00 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=02fbd0f93289ab545e595efe7449cd0f7ca8d38e506f1b90964414f2e447f43a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:d0:44:37:b8:eb:15:19:f0:e5:25:ef:ea:
                    5d:3c:f3:8a:24:be:6e:cc:79:5f:e2:04:31:59:35:
                    19:a7:bb:2f:4f:49:42:60:cb:7f:39:98:3e:fb:ec:
                    a3:f0:11:43:a2:0c:de:ca:5b:74:39:fb:b9:66:dd:
                    53:6b:61:7f:97:52:e7:f3:13:3c:c7:22:b0:96:45:
                    f1:d7:68:39:ed:d3:ab:27:f4:d6:4c:00:75:d9:3e:
                    89:ef:2a:cc:f0:dc:93:12:3c:58:4a:86:db:a4:74:
                    0c:2d:14:24:51:0e:7e:d8:2c:26:6b:cb:ae:41:5c:
                    47:57:a0:47:e2:89:a5:96:13:37:88:db:3d:c5:e1:
                    b3:a8:bd:89:a1:fb:40:37:97:cd:f3:3c:05:0b:0c:
                    21:61:b6:f8:d7:7b:aa:01:41:c1:3d:91:c1:1e:3f:
                    e0:39:33:42:83:d9:31:ed:5e:49:84:fb:28:9c:51:
                    2d:2a:c1:92:56:25:2c:3a:4d:da:92:e6:39:d4:cf:
                    35:9f:32:2d:1c:78:a5:eb:69:16:36:30:e7:40:92:
                    19:02:da:e6:22:51:93:b8:cc:c9:34:60:f7:b0:af:
                    d6:02:c9:5c:9e:22:a9:6f:52:d4:24:fa:a2:45:b1:
                    59:c7:ef:0f:94:4f:6b:60:f4:a9:9f:67:b7:ed:12:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F2:A3:A9:A4:4A:A2:84:D5:7F:E5:57:09:24:DA:BA:11:44:B4:30
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5dd334f6-275a-4781-9253-d22d180917b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.239.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:83:41:8e:f4:35:da:24:01:39:9b:a0:55:2d:19:30:a0:
         13:13:f0:18:7d:06:7a:7f:5e:8d:8d:2a:b4:bc:8a:36:4b:18:
         96:a4:20:8d:d3:bc:31:57:ca:b6:f2:e8:fa:ca:a7:e4:f6:2c:
         e5:7a:07:e4:e0:9d:68:c8:c9:8c:06:7d:ac:66:fc:93:91:eb:
         c2:86:4d:c1:27:04:57:45:dc:54:73:4b:fc:82:53:36:34:46:
         4b:1c:b3:59:52:99:2d:6f:8c:64:9f:0e:43:6c:70:63:fe:70:
         80:f5:2c:20:c3:f8:82:91:37:17:99:11:98:7d:d9:ea:c2:55:
         cb:b2:c8:f9:81:89:c0:93:84:65:9a:5a:7b:a9:c4:99:d3:52:
         5c:c5:aa:73:17:ae:79:af:de:b6:66:d5:b9:92:d7:37:4e:3b:
         72:b9:20:16:e4:e0:77:76:c6:01:3a:a9:7d:e7:9b:21:51:9a:
         62:02:24:9a:26:d5:3a:ef:a1:08:c3:fd:38:93:58:c8:30:d9:
         c5:34:7d:a7:4f:f3:4e:82:d2:28:20:6b:9d:76:e8:59:11:0b:
         79:f5:f2:03:94:d5:53:4f:6a:a7:cb:01:bc:66:45:db:95:cd:
         6e:fe:66:db:3a:4a:f8:01:65:6b:bd:81:c2:d4:61:4b:25:39:
         02:a5:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:02:47 2026 by rpki-client