Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0519116a-a4b2-4717-bb1d-13c3d25535a0.roa
File:                     0519116a-a4b2-4717-bb1d-13c3d25535a0.roa (raw, json)
Hash identifier:          wEFCK2CYtXDkLjTw/XquSZVxGoTjsOFFgvy5rNt+RAs=
Subject key identifier:   CD:75:C9:3C:3F:9A:23:C6:D7:5B:82:3A:1B:D2:BD:52:E6:EE:00:FD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D0D6339C1287F3B2F92219892B3B98D86AC6DD0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0519116a-a4b2-4717-bb1d-13c3d25535a0.roa
Signing time:             Fri 07 Aug 2026 02:20:10 +0000
ROA not before:           Fri 07 Aug 2026 02:20:10 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0d:63:39:c1:28:7f:3b:2f:92:21:98:92:b3:b9:8d:86:ac:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:20:10 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=95c8439332f71c4c903a526c83afe3e3255f9fdd645785f6496ba6b757c66aaf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:47:de:6f:00:e0:b1:aa:d2:a1:70:4a:84:
                    b4:ea:4a:6e:29:14:08:27:ca:66:66:59:bf:2b:a8:
                    6c:36:66:d8:3f:94:ca:4d:74:ef:19:d8:8f:fe:1f:
                    1c:41:ad:dd:d7:92:59:ae:8b:21:41:d9:87:d4:51:
                    4c:6c:a4:f7:6d:63:04:10:22:5c:0e:c1:ca:06:ff:
                    0f:10:9c:17:52:16:97:ef:ca:f5:94:e3:7d:83:28:
                    8f:dc:ad:5a:e0:27:b0:7c:e6:f0:9b:9c:77:eb:81:
                    a1:6d:b7:2c:e3:33:d2:48:b9:29:cd:39:bc:69:06:
                    1b:b2:36:6b:5f:63:ec:9a:4f:7f:08:04:47:20:2b:
                    35:5e:5e:25:26:52:62:6f:d8:11:c2:2e:55:7d:31:
                    a2:82:41:75:f6:56:18:42:80:2d:69:3c:74:5e:70:
                    68:4a:96:9f:b3:af:e6:1e:ea:25:2f:95:29:f3:8e:
                    52:21:56:d9:c9:79:d7:c9:42:e0:74:d6:18:dc:9d:
                    65:80:57:bc:38:43:e3:44:d7:4d:2d:22:5b:ef:1b:
                    90:2c:27:2c:f2:91:cc:0d:6f:25:2c:d5:cb:72:4b:
                    cb:45:06:73:34:6e:c7:57:57:3c:d5:eb:d3:1c:bc:
                    52:7b:a7:d6:7c:90:03:01:32:93:64:dc:ba:99:e2:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:C9:3C:3F:9A:23:C6:D7:5B:82:3A:1B:D2:BD:52:E6:EE:00:FD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0519116a-a4b2-4717-bb1d-13c3d25535a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:30:90:8c:ec:0b:b0:1e:fa:2f:70:f0:33:ee:12:08:e0:
         45:2d:aa:0a:f3:ca:cd:aa:d9:8c:b5:78:a2:26:ed:ac:82:0d:
         ef:11:4a:9c:4e:c8:37:a6:76:23:17:07:0e:f8:48:0d:a1:c2:
         e6:02:07:39:b0:b7:61:f0:c6:7d:ee:b4:88:c4:5e:38:23:56:
         69:38:d8:74:d3:be:d2:a9:9b:83:76:04:3a:2e:5f:b1:88:6b:
         0c:61:cf:0b:53:42:13:36:62:2f:44:5a:51:e6:f0:0f:be:d1:
         2a:44:08:16:9c:72:2c:fe:a9:3d:b3:b7:34:36:a0:14:ac:19:
         30:b5:96:ba:98:ce:b8:c5:9e:76:85:4a:6b:d8:19:f0:a6:f3:
         40:31:fa:8f:19:a4:8d:ad:2f:5b:fc:d0:a3:68:b2:4c:51:88:
         eb:1c:3a:ba:55:2b:42:cd:93:92:c8:05:e5:6c:08:ff:b0:9c:
         43:71:b3:c8:4e:b0:56:ce:97:cd:16:c8:2f:6b:2a:f6:2e:37:
         5a:4c:dc:6d:52:6b:35:bc:11:01:83:0e:5e:07:68:0b:4e:67:
         32:83:91:53:a7:33:ee:c3:e9:15:44:ce:16:ba:0a:d7:9b:5c:
         0a:61:2e:ee:23:77:4f:5a:a8:90:c8:9a:ef:9c:d0:36:25:3a:
         2f:89:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:34:35 2026 by rpki-client