Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa
File:                     5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa (raw, json)
Hash identifier:          PlwFtl/bFE9bXqD+7HmLkuXlFoaq+IICw3NArTYVmi8=
Subject key identifier:   C4:A6:12:38:D8:64:A5:7F:08:68:1E:94:A6:35:BD:70:E1:24:CE:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EF615F167C55F82CF72CF1F5E99238C70F391AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa
Signing time:             Tue 04 Aug 2026 02:10:41 +0000
ROA not before:           Tue 04 Aug 2026 02:10:41 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.54.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f6:15:f1:67:c5:5f:82:cf:72:cf:1f:5e:99:23:8c:70:f3:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 02:10:41 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=c58d76e548444871278f8c417f139dd3a8b93443a557d846c66cb3c180bbb9ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:ed:dc:a9:1e:bb:bc:08:f6:a3:09:7b:f5:
                    67:b0:b0:e2:d2:3e:0d:0a:95:45:3d:d4:b7:f2:59:
                    ef:bb:25:b8:ec:aa:68:e2:44:6d:05:1e:1b:9d:c0:
                    80:a2:5b:9a:4a:8f:11:ec:b5:7e:d3:d2:db:fe:90:
                    dc:63:dc:96:4d:9b:d1:19:86:1f:e8:b9:04:b3:04:
                    d3:71:bc:2d:2e:e9:21:44:3e:98:ab:26:14:40:0d:
                    b7:46:d5:df:51:5f:54:c8:e5:5c:5f:74:cf:f7:d9:
                    a2:74:2f:1b:ec:77:84:fd:2f:3e:91:cb:46:ab:c7:
                    73:81:32:81:ef:e1:b6:d2:f2:61:22:e1:6f:dc:68:
                    15:74:d5:74:09:97:61:03:e6:28:64:f1:ae:76:ef:
                    a4:5f:d4:6e:f4:0a:61:e0:a0:de:cb:3d:79:ae:0a:
                    ae:15:a4:94:a9:35:34:17:fb:93:4e:39:66:4f:d3:
                    99:d1:31:b4:ac:e2:31:4c:ad:f9:32:10:31:18:ca:
                    b3:6d:38:45:a7:d9:dc:fe:52:78:f1:4c:ac:af:6e:
                    d5:7a:f0:0d:10:94:d3:5f:ea:4d:bc:6d:3a:07:92:
                    05:63:b9:0f:3f:fc:d0:8c:2c:ec:84:e1:c4:df:e5:
                    da:d2:72:11:8f:12:35:88:10:15:3b:1e:de:4e:b2:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:12:38:D8:64:A5:7F:08:68:1E:94:A6:35:BD:70:E1:24:CE:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:6e:94:70:10:e3:f9:27:2f:33:35:35:b7:8e:fe:95:a7:
         7b:b0:3a:13:dc:d9:82:50:3c:fe:83:99:57:e7:c5:09:36:44:
         3a:c6:cb:1a:7b:7f:42:1b:0d:97:c4:30:03:53:45:39:50:80:
         43:9c:af:dd:4c:0c:34:46:95:fa:ec:1d:88:84:54:98:45:03:
         08:23:b1:9a:33:fe:c5:76:25:84:ca:c0:35:9e:5d:b9:84:47:
         01:8b:16:42:35:e7:91:8f:51:6d:66:4b:04:b2:ac:6a:8d:54:
         6f:9a:91:d5:58:25:45:44:d3:5b:12:57:86:1f:72:37:e0:56:
         f4:2b:a9:0c:c6:b5:53:f4:a8:8f:36:f1:b9:3a:18:8f:cd:87:
         fb:1a:96:34:6a:43:50:7d:67:86:4b:19:17:19:91:fa:ed:ef:
         b7:1b:cb:0e:3a:f2:09:1d:39:70:2c:9e:4f:6d:b0:b5:41:fa:
         bc:9f:e5:36:f2:b5:42:d1:2c:df:ee:05:14:89:97:09:4e:c5:
         e2:53:0e:38:4a:f2:17:0a:a3:da:94:a6:6d:11:c1:18:dc:e9:
         1a:fc:67:c8:fd:1f:b6:45:a2:f8:2d:97:7f:2e:a4:2e:58:a2:
         d8:76:dd:90:59:ba:36:05:c9:24:cb:27:10:b0:9d:58:cc:49:
         19:6f:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:34:48 2026 by rpki-client