Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0020f8-d7ce-4f9a-8ddb-dd4ebef516f6.roa
File:                     9c0020f8-d7ce-4f9a-8ddb-dd4ebef516f6.roa (raw, json)
Hash identifier:          7vwuTuSSa+KkdM87zHoUKCCl+OQYNYveHu7H7+Xr9Nk=
Subject key identifier:   21:B3:81:BC:8C:69:EE:65:B8:6C:68:EF:6B:02:74:B8:8F:9D:CF:7A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3759913D769C3B52CAE245DE1E38518589A4A365
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0020f8-d7ce-4f9a-8ddb-dd4ebef516f6.roa
Signing time:             Mon 23 Feb 2026 01:51:10 +0000
ROA not before:           Mon 23 Feb 2026 01:51:10 +0000
ROA not after:            Sun 24 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.182.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:59:91:3d:76:9c:3b:52:ca:e2:45:de:1e:38:51:85:89:a4:a3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 23 01:51:10 2026 GMT
            Not After : May 24 23:59:59 2026 GMT
        Subject: serialNumber=dfcb8068599f2b2159174f2ceed19242873af4a4cddc41e4e195e05a6fa368ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:4e:05:ef:98:9d:fa:72:0e:b3:ef:e9:0a:
                    26:be:cf:b3:e5:16:c0:98:f1:d8:3b:c9:dd:60:b7:
                    ff:d1:e6:09:f2:1d:21:18:35:62:13:b9:88:69:e8:
                    ec:0b:8d:97:ff:de:b2:e9:7e:23:cf:b6:22:6f:fe:
                    72:3b:81:1b:a6:fa:b6:25:fc:af:73:e4:c1:0b:fe:
                    0e:34:2c:2b:0f:0b:3e:f8:1f:8d:de:23:83:29:dc:
                    5c:d9:19:d3:cc:9d:1b:13:f2:60:fc:56:02:1b:fc:
                    bc:b3:04:a8:37:14:c8:d4:95:a1:85:80:0f:0b:84:
                    e4:bf:ec:05:36:53:47:67:b1:1a:c5:df:03:45:43:
                    60:6d:13:4d:65:0d:21:f4:f3:ef:5e:b1:50:f1:b2:
                    6c:11:39:b6:a7:02:73:4a:ef:91:df:e8:a8:1a:99:
                    bd:d0:4b:41:f0:09:d3:a4:96:da:6c:1d:ab:de:6e:
                    77:b7:fe:4a:e8:df:59:e5:18:32:ad:14:21:2e:ad:
                    23:e1:75:40:ed:b6:54:39:1d:25:e7:8d:41:c3:cf:
                    56:19:c1:98:7b:2a:21:e0:b8:ac:29:77:90:5e:b3:
                    c2:6b:42:58:87:96:70:c7:cb:00:0d:0e:93:31:2f:
                    a6:15:d8:35:9c:99:b1:ce:1e:06:34:6a:5a:b5:66:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:81:BC:8C:69:EE:65:B8:6C:68:EF:6B:02:74:B8:8F:9D:CF:7A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c0020f8-d7ce-4f9a-8ddb-dd4ebef516f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.182.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:00:bd:93:2a:2b:f9:df:40:25:dc:da:1a:f8:7b:86:48:39:
         8c:35:da:70:17:9c:4a:3f:05:97:d8:0d:73:55:b5:e2:fe:53:
         06:d5:5c:24:bc:3a:a3:5d:60:ca:43:fa:ea:97:a5:66:ae:d7:
         6a:58:96:5d:30:9b:79:81:98:49:16:56:06:ef:3f:c8:d7:03:
         ff:46:d2:0a:c8:aa:dd:b3:df:22:b7:35:2c:17:ee:09:0d:13:
         2a:48:c8:43:1d:76:39:8b:b2:1f:e5:ca:29:ca:64:7b:62:84:
         15:f3:2c:0b:87:23:fe:7e:36:ba:f0:4c:7a:df:7d:9f:ac:5f:
         df:b9:35:9f:0c:5e:81:54:1f:41:89:89:b3:b5:7e:28:0f:fe:
         27:22:11:06:3c:fa:bb:d8:2f:f8:60:a1:4a:f3:73:7c:6b:d9:
         96:c9:2f:4c:26:16:77:dd:1a:fe:2c:4c:06:73:07:79:d4:89:
         e2:44:2c:1a:9a:74:08:87:22:f7:7e:83:f9:ea:83:87:c0:6e:
         c3:03:0b:0d:b3:52:0b:2e:30:2f:39:ca:6e:06:dc:3a:d6:ee:
         ec:4e:21:78:6e:58:4a:21:91:62:e2:ac:ca:98:9e:57:a8:fe:
         19:4b:75:b9:6d:9d:b5:89:74:3a:fd:c6:2c:f7:c3:c3:5a:f2:
         4f:f9:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:38:01 2026 by rpki-client