Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d84e3fb-a8d9-4cbd-b3bc-95543dd14d9f.roa
File:                     9d84e3fb-a8d9-4cbd-b3bc-95543dd14d9f.roa (raw, json)
Hash identifier:          Zr88t44pmGd3ZKsbFoXhuMjKpOjVAuoZ+ApYu7ShMJU=
Subject key identifier:   10:B1:BF:E4:99:70:31:44:FE:32:FA:72:06:1D:B0:74:8B:EC:33:6D
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       140ECE892BAAE5AEE56AF63671068A234FCDB3DC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d84e3fb-a8d9-4cbd-b3bc-95543dd14d9f.roa
Signing time:             Wed 21 Oct 2026 01:07:37 +0000
ROA not before:           Wed 21 Oct 2026 01:07:37 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0e:ce:89:2b:aa:e5:ae:e5:6a:f6:36:71:06:8a:23:4f:cd:b3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 01:07:37 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=2758913af2ed74c15cf31b12030c57e9dd36db7e770a6e6a664de83ef3857e13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:d0:5c:43:66:7b:8a:07:b7:36:9e:05:f2:
                    7d:89:a3:7e:20:7f:25:09:d2:c6:4a:0b:49:0e:ba:
                    4f:44:cf:c1:e0:3d:6c:cc:63:09:5e:3b:34:84:b6:
                    2c:f5:78:7c:43:8d:5c:96:fc:77:40:c9:f7:e6:a5:
                    96:33:fc:00:70:b7:f3:76:30:55:81:9a:31:96:ec:
                    20:5c:7b:c4:d1:31:16:6e:0b:79:a2:a5:63:c5:cd:
                    16:8c:8b:12:94:50:df:1f:67:eb:3e:b7:cb:0c:03:
                    f6:72:80:b7:ed:17:95:2e:ca:0d:6e:dd:2e:4f:1f:
                    0b:66:f4:37:f5:bd:b1:97:07:23:f1:3c:4d:bf:5f:
                    21:4e:1f:b0:71:ec:d2:7c:4a:44:9f:72:9b:6f:86:
                    63:4f:c9:29:6e:70:8d:35:6b:3b:39:84:c4:de:9e:
                    b6:4f:33:85:4b:3b:64:42:74:8b:c7:5e:2d:8f:4d:
                    7d:7e:68:aa:8e:d8:7d:ea:45:b5:68:8f:4d:d2:04:
                    af:2e:ce:14:d2:23:b0:c3:f3:d4:9f:38:5e:11:a7:
                    b3:ec:ac:ba:d4:c7:35:99:32:ca:66:d9:2c:4c:e0:
                    64:c4:7b:71:ba:cb:10:a5:15:bb:ae:4c:d4:e5:2a:
                    31:6e:d3:00:bc:bd:dc:71:f4:e6:b6:b9:d2:94:1c:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:BF:E4:99:70:31:44:FE:32:FA:72:06:1D:B0:74:8B:EC:33:6D
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d84e3fb-a8d9-4cbd-b3bc-95543dd14d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:98:4f:12:47:6e:01:72:78:61:14:77:4b:6a:93:73:df:55:
         42:39:54:76:78:1d:c3:e2:98:a7:fe:a7:f6:0e:96:be:d7:cc:
         47:02:0f:36:6f:18:aa:65:24:45:89:92:b1:4d:cc:98:56:f7:
         6e:d7:0f:46:6c:19:89:26:1e:b0:64:cd:71:8d:a4:b5:ef:33:
         76:c8:fb:aa:a2:a2:3c:ff:9d:b9:7c:fd:51:5e:88:99:9a:b8:
         8a:f3:c8:c5:87:bf:31:16:c4:ab:52:71:c0:98:02:f1:74:3a:
         d2:30:d9:3f:2c:8a:44:95:4c:e3:f9:aa:26:c4:18:17:8c:2d:
         1a:fb:02:b6:4b:3d:5f:7a:43:31:37:34:26:99:0d:e8:81:66:
         a5:b4:25:0e:7d:b2:b3:ef:49:35:ab:a2:23:23:6f:f8:80:17:
         a8:9d:ec:37:15:9a:0b:d1:e3:f9:9d:24:e4:f4:ec:56:9b:21:
         78:e7:cd:2d:2f:87:9f:85:56:f6:4b:17:7d:37:94:10:66:ec:
         a3:c0:30:9a:a8:4e:a2:ab:c8:2b:ff:c7:67:58:2c:e8:68:68:
         82:f5:39:dc:c6:1b:fb:02:b3:4b:c3:66:e2:d4:7d:fb:ce:da:
         b0:1b:b7:86:70:a1:ad:96:df:19:43:11:49:7a:e6:4e:c2:75:
         6f:81:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:50:40 2026 by rpki-client