Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa
File:                     f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa (raw, json)
Hash identifier:          V+4MfrmEPqkkeiG3z1F0QuvtcSeEIj6eR57iBQnE+cs=
Subject key identifier:   F1:42:39:BE:07:EB:31:10:8C:4E:9D:A0:AD:89:D5:C6:12:02:2F:CD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1748674026213621B7269B1806939A1AE93D668A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa
Signing time:             Thu 22 Oct 2026 03:40:06 +0000
ROA not before:           Thu 22 Oct 2026 03:40:06 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.254.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:48:67:40:26:21:36:21:b7:26:9b:18:06:93:9a:1a:e9:3d:66:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 03:40:06 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=69d28f6b950640d229cdec8869910a283c8b0ff585459cabf5820eca22cbb5e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:05:03:37:69:1d:e6:a3:c7:66:9e:d9:ce:
                    8f:32:85:a9:7d:32:9c:35:57:ee:84:d1:ea:80:82:
                    cf:42:60:7e:85:36:5d:e3:c6:c7:6d:2a:09:d9:73:
                    aa:ac:d1:3b:8a:94:24:e9:da:9b:12:8e:44:31:76:
                    c1:5f:48:3b:5a:48:b8:4d:9c:18:54:80:bc:8e:c3:
                    d1:1c:4c:09:95:e6:29:0c:c2:a1:88:04:2b:cc:87:
                    78:f8:bf:bf:0a:dc:ef:26:7f:b7:41:6a:d8:15:52:
                    db:a2:94:e5:de:5d:71:07:2d:d8:cc:40:0d:50:3b:
                    2b:ff:16:98:23:b6:bb:ff:37:d9:5f:a8:3d:09:11:
                    86:11:43:69:5c:5f:6a:a7:60:d8:fe:85:06:77:7f:
                    8f:de:17:5c:72:9c:5d:16:b7:5e:30:44:d5:7d:7d:
                    68:53:5a:e5:0a:26:52:28:88:96:e7:69:8e:d7:b3:
                    cf:63:ab:44:62:94:d4:5d:d2:b5:18:0b:d6:ab:31:
                    44:b5:2e:7a:ca:d9:25:e1:08:89:51:9f:06:80:c4:
                    02:38:6f:1c:f4:3b:0c:a2:14:a8:09:9a:87:e3:9b:
                    11:57:e8:2b:2c:6c:b4:dc:e6:81:63:a9:b5:a6:9d:
                    eb:d5:e8:84:76:ae:ca:67:8d:9c:6e:e9:15:8e:b4:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:39:BE:07:EB:31:10:8C:4E:9D:A0:AD:89:D5:C6:12:02:2F:CD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.254.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:73:13:94:5f:1e:30:b1:15:25:9f:f5:84:2b:ac:c6:26:b6:
         94:a9:c5:ee:be:9c:08:88:77:c3:1a:c2:d6:47:c4:e2:cc:d9:
         df:07:ac:45:78:81:af:e8:a0:60:3b:4c:16:2c:f3:12:1d:57:
         e2:c1:be:2d:74:24:70:06:f8:0c:2f:07:0b:38:e8:43:64:db:
         d7:dc:1b:65:c0:d6:8f:f9:2f:e7:8f:81:d5:fb:14:50:7f:78:
         06:51:02:7e:b5:40:9e:ae:cb:8e:51:6c:eb:85:96:68:9d:c1:
         a4:5f:77:03:ef:ad:23:26:b1:30:10:e6:7e:55:5c:c9:8e:8a:
         35:80:f5:06:4f:02:ce:7d:8c:22:93:80:64:b7:1a:4a:ed:75:
         5e:73:68:5b:3e:5d:ac:29:32:a3:cc:58:08:40:d9:24:23:93:
         7a:a9:f7:19:c4:ad:12:c8:85:0e:d8:68:ae:5f:86:4e:91:7e:
         4f:0c:7f:7b:b1:bb:53:74:ce:c0:84:11:8f:04:88:27:ed:af:
         0a:64:bc:b4:3e:d9:bf:75:16:5c:14:4b:9c:21:72:1c:38:84:
         17:d3:47:03:9a:62:3c:bb:ac:9e:de:d1:e5:70:fc:bf:33:d2:
         b5:23:8f:54:69:ba:bf:c5:07:2c:13:88:e2:05:d1:bd:8a:f0:
         c4:6b:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:33:06 2026 by rpki-client