Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e51b6c4d-806e-4ece-b0a9-76a9012c8460.roa
File:                     e51b6c4d-806e-4ece-b0a9-76a9012c8460.roa (raw, json)
Hash identifier:          fc3pYdhVnQKaekDhcfOBPHGGo4U3Xq3o5M7uQI6wQbs=
Subject key identifier:   95:A0:12:C1:90:F2:AF:DC:A3:44:37:ED:D1:E0:32:93:B0:17:0E:AA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4E12301165E652EFD744E316FD1F683705AA5E0E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e51b6c4d-806e-4ece-b0a9-76a9012c8460.roa
Signing time:             Fri 26 Sep 2025 17:34:25 +0000
ROA not before:           Fri 26 Sep 2025 17:34:25 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:12:30:11:65:e6:52:ef:d7:44:e3:16:fd:1f:68:37:05:aa:5e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Sep 26 17:34:25 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=0b65a1548f9eeab7cab33de725180002aa2610298b5cde4342ba1c3c52acec7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f3:e9:9d:e0:13:d9:37:d4:d3:b1:df:57:87:
                    36:81:53:b3:6a:9c:a0:be:c1:ff:49:33:b0:75:73:
                    c0:1c:e5:9e:4d:3c:c3:26:1e:b6:90:02:fc:2d:04:
                    75:84:50:4c:a4:d2:9f:60:d1:f5:56:65:ed:05:42:
                    64:b5:29:be:68:a6:76:ea:12:35:7e:7a:54:24:a2:
                    f8:ad:35:d7:ce:53:ed:90:a0:89:26:44:67:1e:21:
                    6a:a1:ac:f6:b9:e4:28:c0:df:6e:3f:3a:16:ed:69:
                    ce:d4:b2:a3:fd:8b:90:96:e4:f9:04:5a:73:4c:9e:
                    2e:c6:92:22:ee:e0:c3:87:c7:92:69:8f:91:93:48:
                    5a:04:e8:39:31:bf:d0:2e:c5:0c:3e:d1:87:15:28:
                    b4:99:1a:26:e2:62:5d:5a:b1:1f:83:18:3e:df:72:
                    84:12:eb:3a:9b:17:bf:7f:65:00:8e:6d:93:5e:b6:
                    50:f2:cf:6d:23:46:8e:10:39:f5:9f:33:75:49:6f:
                    e9:38:53:e7:cd:6e:b6:f6:cf:96:79:89:24:e6:7c:
                    a5:41:ec:fb:63:23:33:99:49:eb:f4:f3:9a:96:c9:
                    a2:10:4f:fa:e3:0a:39:21:2c:18:e8:be:ef:87:e7:
                    61:96:d4:f7:7b:ac:32:bd:3b:d1:df:16:d0:cf:7d:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:12:C1:90:F2:AF:DC:A3:44:37:ED:D1:E0:32:93:B0:17:0E:AA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e51b6c4d-806e-4ece-b0a9-76a9012c8460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:19:3d:3b:17:b3:7d:87:df:16:28:61:05:f2:ec:cc:89:
         76:b7:c2:60:40:42:4d:76:2f:db:43:38:f4:2d:76:72:53:be:
         61:07:13:bc:44:67:d0:19:23:d9:5e:7b:df:5f:68:1d:bd:5e:
         df:da:15:e8:59:5d:40:5d:d6:e5:75:8f:34:cb:e6:95:09:46:
         75:f9:d8:7e:5c:6d:ea:b0:40:e1:87:36:f8:97:72:3d:5d:36:
         98:e5:78:c6:65:2d:9b:9b:78:2c:3c:47:ab:3b:46:99:31:8c:
         9b:f9:b2:1b:22:84:16:11:aa:ac:89:b4:0c:64:ee:d3:6e:c3:
         eb:25:cb:e6:5a:9a:55:09:3d:9f:c5:ee:f9:38:ff:3f:7b:95:
         fd:6f:d5:13:8b:cf:44:ea:ee:54:70:b7:07:1e:21:69:49:e9:
         5a:9c:0b:56:63:f0:62:93:50:f9:82:32:e9:3e:2b:2a:8f:44:
         b6:0b:93:03:c5:20:d4:94:2e:17:57:58:69:23:1b:00:34:78:
         f2:98:d8:ed:ee:b3:6a:84:10:0b:08:5e:a0:7a:03:b6:b8:b1:
         a7:94:8c:cd:5b:39:5d:41:5e:64:9c:04:00:16:2c:13:45:81:
         b8:2f:2c:b9:a3:5c:3d:0f:d6:d6:2b:a2:be:eb:e1:ab:8a:fc:
         60:81:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:28 2025 by rpki-client