Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d6fa9c9-a5fe-4695-879f-c3dcd2782f05.roa
File:                     4d6fa9c9-a5fe-4695-879f-c3dcd2782f05.roa (raw, json)
Hash identifier:          CZzBArca811HGyGn9KbfGNWQJgRfB5mTypTaZP6rbGk=
Subject key identifier:   65:19:98:D1:A0:8D:78:BD:8B:08:6C:3F:82:38:80:76:B4:11:72:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14956AAF389924225F1F6D238834E2CD0861BB8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d6fa9c9-a5fe-4695-879f-c3dcd2782f05.roa
Signing time:             Tue 04 Aug 2026 01:50:42 +0000
ROA not before:           Tue 04 Aug 2026 01:50:42 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.112.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:95:6a:af:38:99:24:22:5f:1f:6d:23:88:34:e2:cd:08:61:bb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 01:50:42 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=5973c8fba19cb7f3b335093168508733f904ae85eb3593fb3f70add0386a8124, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:f8:5d:f1:57:10:16:aa:0f:7f:df:04:da:
                    23:5a:5f:ce:9e:b4:e0:6a:2e:aa:09:c3:fc:2e:e9:
                    ba:f8:9c:a9:88:fa:62:1f:99:ec:ad:11:a7:f4:b6:
                    9c:11:8b:57:3c:0f:94:e1:29:fe:10:12:eb:1c:2a:
                    7a:15:f3:07:c3:5f:35:ed:77:11:c1:89:42:a6:16:
                    c9:c6:c0:43:f8:58:9b:9a:b5:7e:85:7a:0e:7a:96:
                    c3:4a:47:70:32:d7:c6:08:b8:66:4d:31:c9:74:41:
                    eb:cc:c3:0d:00:7f:d1:61:fc:32:13:47:0d:aa:ef:
                    36:d6:b0:fb:5f:1f:48:cf:15:8b:9d:52:cf:e9:c6:
                    73:e4:3b:9a:64:ca:ad:1c:eb:76:6e:ea:02:42:3e:
                    c6:d6:46:ec:29:77:2c:bf:2f:5e:5f:10:fb:63:df:
                    5f:21:47:b8:cf:71:1a:1a:62:34:9b:43:b5:a9:9f:
                    8b:2b:31:f3:35:f6:9f:a0:ba:3f:a4:87:7b:7c:ad:
                    7b:7a:dd:ba:46:08:29:0f:44:07:cb:13:59:d0:31:
                    b9:32:56:d2:7c:19:4a:b1:1c:45:93:41:fe:cf:ec:
                    aa:38:a6:db:a9:ae:a7:38:56:25:59:5a:0e:c2:b2:
                    dd:c4:9d:16:d2:d2:66:b9:f0:28:d3:60:74:37:76:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:98:D1:A0:8D:78:BD:8B:08:6C:3F:82:38:80:76:B4:11:72:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d6fa9c9-a5fe-4695-879f-c3dcd2782f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:09:0b:c9:de:78:a6:fc:ba:76:40:19:74:99:28:e7:d8:
         b3:93:19:ad:3f:b4:bc:1c:4a:1e:54:07:c9:23:05:35:48:a7:
         f2:c9:88:66:eb:1d:35:a6:d1:8b:c6:9b:32:b5:5e:3d:c6:6b:
         55:17:ae:50:31:95:85:03:90:53:95:98:e5:6b:73:65:74:0b:
         64:ac:98:5f:f6:21:4c:a6:27:02:a5:cb:5a:28:1b:7a:bf:f9:
         52:89:b2:5a:07:f3:f3:64:56:5c:26:f6:86:b0:58:65:10:bf:
         17:f9:40:ce:0f:8b:99:93:d6:17:ac:fb:90:fd:51:67:58:ee:
         b1:54:d7:e9:cd:5d:c3:a8:d1:05:d4:e1:70:9e:5d:33:ce:ad:
         ec:3a:df:7e:99:36:12:73:de:ca:53:e4:5f:a9:54:32:fd:4e:
         29:42:0a:d5:be:b2:83:fd:ac:9f:d8:4f:44:be:35:99:f7:e1:
         35:2f:44:31:72:39:4f:19:15:ca:27:24:78:ee:d6:e4:37:f5:
         2d:9e:9a:ce:69:8c:72:23:a0:12:14:d6:c4:95:0c:b8:59:b2:
         14:fb:c9:81:7e:27:37:67:c1:76:e7:6d:02:ff:1d:af:e9:f6:
         e7:d8:ab:4d:10:fb:be:f6:ed:67:e0:30:93:9a:31:87:b0:41:
         44:36:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:31 2026 by rpki-client