Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e5900ad-7e99-4712-992a-109912d9c5b3.roa
File:                     7e5900ad-7e99-4712-992a-109912d9c5b3.roa (raw, json)
Hash identifier:          Ve8Iz7yj3l+v1rD1/u1o44jfmbLF2cYqGM54QuWRnW4=
Subject key identifier:   0C:1B:28:B6:97:9B:61:B3:0E:1C:D3:14:E3:11:BF:F6:28:68:BA:C0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       68706798067B2E82FB513EDBBBC0FA721D2861E4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e5900ad-7e99-4712-992a-109912d9c5b3.roa
Signing time:             Thu 22 Oct 2026 02:51:01 +0000
ROA not before:           Thu 22 Oct 2026 02:51:01 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        54.197.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:67:98:06:7b:2e:82:fb:51:3e:db:bb:c0:fa:72:1d:28:61:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 02:51:01 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=cea8b86532e120093b97a24609ed7a17f5b63c645d7a437cd4611b12bb1ec526, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:1d:b0:03:8a:a5:ae:5c:1d:f8:fc:29:a2:
                    20:31:2c:5b:95:0c:00:9b:46:48:0b:70:8c:e9:56:
                    2a:17:1c:60:5f:ee:54:1a:8a:77:1f:b5:dd:d2:22:
                    c9:af:66:e6:7a:7c:93:0a:b7:fa:bd:83:20:b2:8b:
                    b2:d3:b1:ee:45:f0:67:39:55:a7:1d:f8:67:2c:4e:
                    15:f5:46:32:ca:76:8e:47:f1:48:24:8b:36:96:47:
                    bc:d5:4c:4a:74:0e:9f:c1:a4:7d:bf:46:bc:61:44:
                    57:c4:9a:c8:cc:a7:7e:84:ab:03:dc:55:15:6c:58:
                    7d:70:bd:5e:59:af:19:32:91:d5:61:b6:50:d7:24:
                    21:2d:92:a5:d1:53:51:80:1d:39:31:86:16:d9:2e:
                    f6:97:5f:c8:cd:65:53:6b:6f:7a:f4:6e:a9:2c:a4:
                    af:e4:26:57:e0:7d:56:4a:c9:09:ed:10:34:30:ef:
                    47:fd:03:24:65:32:96:49:60:8a:d0:24:0d:c3:7f:
                    86:ad:dc:a9:58:b9:6d:92:24:06:90:1c:cd:1f:75:
                    cf:4e:54:4b:48:75:79:68:e2:ba:41:02:5c:1d:ea:
                    d3:9b:19:e8:a2:1d:54:6c:c7:2e:5c:19:f8:d2:73:
                    61:42:a9:54:3b:a1:a2:03:dd:e2:f0:f5:27:22:82:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:28:B6:97:9B:61:B3:0E:1C:D3:14:E3:11:BF:F6:28:68:BA:C0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e5900ad-7e99-4712-992a-109912d9c5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.197.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:02:eb:93:5b:fd:02:b1:ed:5e:fa:05:ae:7d:e8:d7:2e:
         d2:9a:3d:40:6d:1a:8a:24:db:54:80:86:1f:17:f2:d9:68:df:
         a8:82:db:68:55:26:4f:aa:9c:89:ac:6a:1a:96:9f:8c:2f:9a:
         30:1e:ff:62:71:96:4f:7e:ff:5c:5b:3c:15:99:1b:3f:d3:83:
         d6:54:94:53:5a:7f:f5:2a:ca:a8:61:71:2a:bb:7a:90:a2:ac:
         14:72:f5:3a:ca:bb:e3:50:5c:48:95:75:ce:6f:e0:a5:f8:5b:
         77:1f:c3:c8:16:5f:17:07:cb:eb:3d:8d:ed:64:29:c0:00:dc:
         c3:bb:4c:7a:d0:2a:ea:53:c7:f4:6a:f0:d6:b5:4f:01:5c:ec:
         c7:96:de:c4:c5:da:3a:dd:6a:a7:56:ca:28:85:8d:69:d0:fb:
         07:af:17:bf:66:50:c2:ba:67:b4:1e:f2:12:9f:5a:39:a0:fd:
         26:d8:e3:db:b1:df:7a:20:0b:20:e4:21:fe:c3:75:16:4f:15:
         9c:71:e4:f2:91:db:a5:2d:bc:a4:e0:1c:ca:40:b1:1e:6c:79:
         80:7b:d7:44:cd:d2:d8:a3:24:d1:3d:21:34:8a:91:ef:1c:c3:
         d5:ce:ba:7a:11:5a:71:32:ca:f1:5a:85:47:41:3a:ee:b5:af:
         3b:42:ed:75
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaHBnmAZ7LoL7UT7bu8D6ch0oYeQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDI1MTAxWhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWE4Yjg2NTMyZTEyMDA5M2I5N2EyNDYwOWVkN2ExN2Y1
YjYzYzY0NWQ3YTQzN2NkNDYxMWIxMmJiMWVjNTI2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLEh2wA4qlrlwd+PwpoiAxLFuVDACbRkgLcIzpVioXHGBf
7lQaincftd3SIsmvZuZ6fJMKt/q9gyCyi7LTse5F8Gc5Vacd+GcsThX1RjLKdo5H
8UgkizaWR7zVTEp0Dp/BpH2/RrxhRFfEmsjMp36EqwPcVRVsWH1wvV5ZrxkykdVh
tlDXJCEtkqXRU1GAHTkxhhbZLvaXX8jNZVNrb3r0bqkspK/kJlfgfVZKyQntEDQw
70f9AyRlMpZJYIrQJA3Df4at3KlYuW2SJAaQHM0fdc9OVEtIdXlo4rpBAlwd6tOb
GeiiHVRsxy5cGfjSc2FCqVQ7oaID3eLw9SciggmvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDBsotpebYbMOHNMU4xG/9ihousAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdlNTkwMGFkLTdlOTktNDcxMi05OTJhLTEwOTkxMmQ5YzViMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2xQAwDQYJKoZIhvcNAQELBQADggEBABVMAuuTW/0Cse1e+gWufejXLtKa
PUBtGook21SAhh8X8tlo36iC22hVJk+qnImsahqWn4wvmjAe/2Jxlk9+/1xbPBWZ
Gz/Tg9ZUlFNaf/UqyqhhcSq7epCirBRy9TrKu+NQXEiVdc5v4KX4W3cfw8gWXxcH
y+s9je1kKcAA3MO7THrQKupTx/Rq8Na1TwFc7MeW3sTF2jrdaqdWyiiFjWnQ+wev
F79mUMK6Z7Qe8hKfWjmg/SbY49ux33ogCyDkIf7DdRZPFZxx5PKR26UtvKTgHMpA
sR5seYB710TN0tijJNE9ITSKke8cw9XOunoRWnEyyvFahUdBOu61rztC7XU=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:17:08 2026 by rpki-client