Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b4054e8-c67d-4a4d-a8be-b028d2f6078a.roa
File:                     9b4054e8-c67d-4a4d-a8be-b028d2f6078a.roa (raw, json)
Hash identifier:          Sml03qeZ2tuM7GinOHHTrSyORo9I8hf/j5Yk4t6htUE=
Subject key identifier:   5F:DD:23:E5:00:53:59:E3:C9:49:22:F3:93:56:98:E0:3D:EE:C4:C8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5B2A31B38EFE93F61E48674A6E71DDA8722A1AB9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b4054e8-c67d-4a4d-a8be-b028d2f6078a.roa
Signing time:             Mon 26 Oct 2026 01:30:12 +0000
ROA not before:           Mon 26 Oct 2026 01:30:12 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        54.87.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2a:31:b3:8e:fe:93:f6:1e:48:67:4a:6e:71:dd:a8:72:2a:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 01:30:12 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=a74ad6e61dad18b7f875673757f10006f8c5d3133dae71a9fd3e88a7e0924b46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:8b:93:f9:28:d1:45:26:91:51:ea:f7:0b:
                    e8:fc:06:ab:7b:d8:fc:a3:28:eb:e3:d8:7b:8c:0c:
                    10:6f:d2:db:f2:21:1a:9d:62:cf:a4:42:9b:82:ad:
                    8a:99:4d:84:20:0c:da:73:4d:90:51:d7:13:7b:95:
                    76:71:b3:da:13:70:7c:4f:95:fd:af:39:5f:b9:e3:
                    bb:6e:5b:d0:b6:71:85:8f:e0:75:48:02:e4:5d:ec:
                    e3:1f:9a:05:f7:8f:f1:37:39:f2:2d:f1:77:b3:93:
                    f7:62:98:e7:aa:d0:d1:b2:54:e5:c6:eb:11:73:8c:
                    5f:6a:fd:98:f6:c2:d1:6e:4e:67:6e:01:29:15:88:
                    73:96:ba:f4:01:65:09:a8:3d:ae:0d:13:4e:7b:9c:
                    f6:6e:c9:4a:3e:98:0b:71:28:20:c8:46:6a:0b:bb:
                    f3:4b:0d:a4:4d:47:f5:18:30:44:e8:9e:f6:a2:61:
                    df:da:53:52:eb:41:eb:02:2e:fb:10:8c:6c:b1:93:
                    5a:5b:d1:fb:88:b8:ba:73:3f:4a:1e:f6:da:a0:ca:
                    ea:76:f7:af:a2:5e:25:d6:7e:28:ce:34:36:fe:a8:
                    5d:5d:09:08:23:7c:a6:ef:50:e3:d6:b6:9c:14:64:
                    f3:35:b5:34:c3:6a:ff:c1:3e:66:16:bc:d3:b1:9f:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:23:E5:00:53:59:E3:C9:49:22:F3:93:56:98:E0:3D:EE:C4:C8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b4054e8-c67d-4a4d-a8be-b028d2f6078a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:90:2d:fb:d2:c9:a2:ce:56:0a:7e:18:69:90:98:1c:12:
         f4:f9:e3:26:86:47:d6:f5:15:6c:32:96:28:92:34:e0:94:d0:
         4e:ca:50:ef:ef:64:5b:c5:e6:ec:5a:22:60:15:dd:d8:5b:75:
         ad:05:2c:fb:4a:d8:bf:dd:8d:cd:8b:02:62:e9:c6:6b:15:1f:
         81:5a:83:bf:c1:4b:64:a6:71:ec:5a:cc:3e:29:73:36:31:88:
         ff:4e:a6:42:9b:e3:a0:13:3c:ca:ca:ee:2c:1f:fa:ae:94:b6:
         79:61:1d:5c:b4:34:a3:1f:2a:5a:69:70:44:cc:25:b2:4f:84:
         e1:5f:0e:25:da:58:30:8b:fd:1a:ec:3b:ae:bb:8a:4e:39:1e:
         14:0e:9b:03:fd:fd:9e:29:c7:19:7f:b9:e4:ca:e1:71:72:a7:
         b3:26:7a:d4:20:90:85:78:b6:89:4b:6d:9b:0d:08:d8:b0:58:
         48:1e:bc:53:5d:46:21:6c:f9:ce:c5:d2:1d:2b:47:a2:4c:f4:
         24:9d:21:3d:75:5c:a5:e4:50:f9:40:3a:e4:e9:20:38:57:06:
         6b:2a:a4:13:f5:a8:87:59:39:9d:e3:7e:e0:08:ba:2f:26:cc:
         54:42:5a:35:bd:19:73:87:fc:bc:e3:c8:cd:8b:82:3e:90:07:
         95:9a:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:18:53 2026 by rpki-client