Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
File:                     06632fd0-6abb-437c-aec2-0a661e165739.roa (raw, json)
Hash identifier:          x/f9MmheTfnhm3aHsfF6k2gJ/0eM735gBjA9hMq0XYw=
Subject key identifier:   A7:43:25:6F:10:EA:DD:27:3B:12:7A:F9:35:CC:C9:8A:50:F1:79:3A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       380D2F62E868D7F0FF05E98723A36C639B992F6D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa
Signing time:             Fri 07 Aug 2026 01:40:59 +0000
ROA not before:           Fri 07 Aug 2026 01:40:59 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.83.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:2f:62:e8:68:d7:f0:ff:05:e9:87:23:a3:6c:63:9b:99:2f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 01:40:59 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=0cc7b8c840037b13d1d002f785d87a5e53302d8fd747fe87f2174f61201cdfb0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:76:24:70:73:5f:5e:22:59:a8:00:b9:7a:
                    b3:ee:dd:5f:06:52:a2:d4:34:f2:88:de:d9:09:77:
                    cb:15:89:28:22:73:e6:4e:f8:22:ec:62:ff:98:ef:
                    e0:e5:58:bd:e6:c2:79:21:b7:cb:70:db:d2:80:76:
                    e9:bb:95:e4:f4:d1:48:be:21:b2:57:c3:a3:f8:c4:
                    47:13:8d:52:75:66:b6:a6:2a:46:17:50:e5:fd:f2:
                    73:fc:6b:f1:35:3a:d0:37:26:2f:be:78:3d:2e:ea:
                    0d:03:0b:48:e9:88:d8:7b:bf:c0:20:e4:15:dc:bf:
                    69:57:9e:ce:63:93:f1:a4:88:e1:5f:07:33:bc:86:
                    43:71:8e:42:17:3a:d1:cb:ed:a5:61:c0:8c:43:6a:
                    04:ef:dc:e6:c2:dc:ee:ec:a1:3d:18:02:49:52:2c:
                    e3:c0:52:5f:43:35:53:32:f6:8f:87:65:b8:2d:10:
                    44:73:9e:2d:18:29:05:42:f0:39:d7:7f:a4:55:2b:
                    9f:38:4a:5e:44:60:90:5d:a1:e0:03:c3:d7:5c:43:
                    f5:ca:8d:07:71:dc:9f:93:a5:32:2f:76:83:a8:34:
                    69:d4:f8:5d:4b:e4:52:41:b6:41:18:5e:ce:fc:ec:
                    6b:9a:e7:32:9d:67:db:5b:aa:9e:46:9d:0c:31:9e:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:43:25:6F:10:EA:DD:27:3B:12:7A:F9:35:CC:C9:8A:50:F1:79:3A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06632fd0-6abb-437c-aec2-0a661e165739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.83.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:0b:f6:ba:76:6d:6c:93:4f:00:d0:d1:aa:69:f8:34:e1:
         3c:83:f5:e9:21:6c:4e:a4:ec:4a:8d:b7:98:5a:fa:7a:68:fa:
         90:e5:9c:11:be:9d:04:a1:90:1f:27:8a:7c:42:8b:82:8d:1e:
         75:7a:4e:6b:b6:ae:51:77:d5:dc:db:b2:0d:ab:24:02:5e:be:
         29:b0:64:de:f0:6d:7c:ce:06:99:ee:5c:1f:8d:87:ce:c1:91:
         d5:c6:25:8f:03:c9:06:25:b0:c0:70:a4:3c:a6:93:d0:88:b2:
         ed:7c:d8:e2:c8:1e:ac:be:ef:b6:5d:53:7a:bc:93:24:de:dc:
         fc:cb:6a:1f:d2:0d:6c:2a:98:ca:ab:92:c4:1b:15:71:98:27:
         7f:f1:4a:54:e2:b6:61:21:b2:a8:dc:97:b0:96:09:29:78:c9:
         c9:40:56:06:fd:c0:c3:64:77:e1:64:cf:97:d2:dc:83:63:40:
         b6:51:5f:31:89:a7:d2:16:8a:3d:84:45:fa:2a:12:0a:22:71:
         eb:fa:b5:3c:73:d2:c8:06:43:ef:82:6d:4d:8e:b8:b3:c9:69:
         3b:1c:e3:55:99:90:53:53:5b:41:85:25:ee:73:8c:7b:6c:47:
         c0:71:40:88:f5:ee:7c:54:88:c9:bc:af:36:67:22:2e:42:b3:
         32:26:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:27:32 2026 by rpki-client