Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7182a19-c3ec-4844-beb4-6a6abcfc6ea3.roa
File:                     c7182a19-c3ec-4844-beb4-6a6abcfc6ea3.roa (raw, json)
Hash identifier:          7H1ACIcvTeu2gEMP+icUTgJLtKDOvHcRT4pP2u23kNE=
Subject key identifier:   C1:54:00:6C:22:1B:F1:61:92:CA:7B:C6:F4:FE:CA:B4:7F:88:8F:3E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1895544EF71400934A0111D9E1D35796142F119D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7182a19-c3ec-4844-beb4-6a6abcfc6ea3.roa
Signing time:             Fri 15 May 2026 03:31:42 +0000
ROA not before:           Fri 15 May 2026 03:31:42 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.197.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:54:4e:f7:14:00:93:4a:01:11:d9:e1:d3:57:96:14:2f:11:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 15 03:31:42 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=1ce68b21d41014a4eda0bddc40ccbc9887afd128bc041783ca05f8f16f36530e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:f0:9f:54:da:b7:35:37:63:31:1c:b0:f3:
                    ea:3e:55:b8:0c:83:e6:13:52:3c:33:eb:2a:70:b1:
                    09:65:c9:42:b9:00:22:02:17:b4:43:07:0e:c5:b5:
                    16:f2:ad:00:02:4b:ea:f4:cf:93:35:88:e4:ef:1d:
                    9e:66:95:86:5f:75:2e:23:da:a2:5c:92:3f:9a:71:
                    4f:c0:f3:5f:4a:26:86:32:7a:85:fd:8e:80:9a:41:
                    db:03:d6:1b:97:99:59:7d:61:75:fa:48:91:a2:84:
                    d0:68:05:4e:c3:c4:8b:41:da:15:56:29:55:0f:74:
                    6a:ba:a0:f1:4e:fe:81:cb:2f:5f:8d:62:d8:0d:77:
                    6a:3e:fb:7e:b9:69:9c:32:9d:1c:13:0e:c6:b0:61:
                    c1:12:5c:cc:b5:12:23:60:47:da:24:35:3a:15:87:
                    0b:0f:66:31:7f:ed:1c:9e:c5:4a:ef:d7:f0:80:28:
                    86:fb:ce:7d:5a:6a:4c:7c:d3:76:46:ae:65:68:49:
                    d5:27:78:16:23:e0:d9:39:72:a2:e5:0f:76:40:d3:
                    ee:4b:f8:ca:d5:43:6f:49:2b:a8:48:95:f0:23:dd:
                    88:55:1b:d3:3c:4b:27:3f:be:d8:34:71:af:9f:8e:
                    ce:3c:46:b3:cf:e2:f6:fd:a3:9b:d4:1d:a8:a4:e8:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:00:6C:22:1B:F1:61:92:CA:7B:C6:F4:FE:CA:B4:7F:88:8F:3E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7182a19-c3ec-4844-beb4-6a6abcfc6ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.197.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:b7:49:63:15:a5:09:bf:3c:a5:d1:18:3a:23:c4:0c:f8:
         b1:7c:1a:51:d6:19:32:9c:ad:ec:59:1e:89:a1:0d:6c:77:77:
         b6:92:07:4a:8f:89:ca:5a:05:d3:0a:f5:30:7e:68:75:1c:11:
         4d:84:20:c6:69:c9:54:49:dd:15:e3:aa:35:2e:23:23:e1:01:
         cf:68:20:c2:3c:c2:51:45:dd:32:fc:85:bc:68:7e:73:87:a1:
         a7:74:af:55:6a:88:54:b5:d8:1b:14:cc:cc:3f:97:d5:96:56:
         8a:5d:86:10:2d:ca:00:3f:7f:b5:e4:ac:cf:ba:be:fb:78:30:
         a7:c2:87:f1:2b:56:20:f7:4a:cc:25:36:37:f9:93:0f:86:ef:
         31:a6:86:77:80:cf:49:27:40:e8:d0:38:27:3f:c9:f6:52:ec:
         fb:a8:3d:a0:c6:5a:28:68:14:bd:b0:dd:0f:35:5f:cb:7f:4c:
         a8:6c:59:4f:52:cc:42:88:88:c5:2a:69:36:a6:f9:f7:3e:94:
         1c:8f:06:70:70:63:50:95:d1:4b:00:92:94:47:0b:25:e5:a1:
         bb:a7:10:13:15:ac:36:13:a6:25:01:78:33:5d:a7:7a:70:9c:
         bc:bb:dd:f7:8c:23:84:bd:b4:a1:96:ed:40:49:60:6f:b8:fe:
         f9:12:4b:b7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGJVUTvcUAJNKARHZ4dNXlhQvEZ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE1MDMzMTQyWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2U2OGIyMWQ0MTAxNGE0ZWRhMGJkZGM0MGNjYmM5ODg3
YWZkMTI4YmMwNDE3ODNjYTA1ZjhmMTZmMzY1MzBlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzUfCfVNq3NTdjMRyw8+o+VbgMg+YTUjwz6ypwsQllyUK5
ACICF7RDBw7FtRbyrQACS+r0z5M1iOTvHZ5mlYZfdS4j2qJckj+acU/A819KJoYy
eoX9joCaQdsD1huXmVl9YXX6SJGihNBoBU7DxItB2hVWKVUPdGq6oPFO/oHLL1+N
YtgNd2o++365aZwynRwTDsawYcESXMy1EiNgR9okNToVhwsPZjF/7RyexUrv1/CA
KIb7zn1aakx803ZGrmVoSdUneBYj4Nk5cqLlD3ZA0+5L+MrVQ29JK6hIlfAj3YhV
G9M8Syc/vtg0ca+fjs48RrPP4vb9o5vUHaik6Mp9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwVQAbCIb8WGSynvG9P7KtH+Ijz4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M3MTgyYTE5LWMzZWMtNDg0NC1iZWI0LTZhNmFiY2ZjNmVhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM2xcgwDQYJKoZIhvcNAQELBQADggEBAJ0ot0ljFaUJvzyl0Rg6I8QM+LF8
GlHWGTKcrexZHomhDWx3d7aSB0qPicpaBdMK9TB+aHUcEU2EIMZpyVRJ3RXjqjUu
IyPhAc9oIMI8wlFF3TL8hbxofnOHoad0r1VqiFS12BsUzMw/l9WWVopdhhAtygA/
f7XkrM+6vvt4MKfCh/ErViD3SswlNjf5kw+G7zGmhneAz0knQOjQOCc/yfZS7Puo
PaDGWihoFL2w3Q81X8t/TKhsWU9SzEKIiMUqaTam+fc+lByPBnBwY1CV0UsAkpRH
CyXlobunEBMVrDYTpiUBeDNdp3pwnLy73feMI4S9tKGW7UBJYG+4/vkSS7c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:40:14 2026 by rpki-client