Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e081e31-8e5e-4339-b24c-1437a75dc6da.roa
File:                     0e081e31-8e5e-4339-b24c-1437a75dc6da.roa (raw, json)
Hash identifier:          jzuN+mxiZ3r1KQ9slxAFfDTZjCcZGjKl8IhUaOyY0Ug=
Subject key identifier:   E7:6D:B4:70:B2:77:73:12:4D:D2:C6:B1:49:20:38:CB:EE:6E:82:EC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       63F0F90FC344CA14E1674FE5321859CE1129F7A7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e081e31-8e5e-4339-b24c-1437a75dc6da.roa
Signing time:             Mon 03 Aug 2026 03:00:34 +0000
ROA not before:           Mon 03 Aug 2026 03:00:34 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.244.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f0:f9:0f:c3:44:ca:14:e1:67:4f:e5:32:18:59:ce:11:29:f7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:00:34 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=f37be4f71932355908d348895263c5fff209eaf244a749cb04496d8732d9462c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:c8:6f:d8:79:f8:aa:27:1d:cb:28:2b:e8:
                    be:ec:5a:77:69:9d:c6:20:99:3d:7d:35:ab:95:44:
                    be:18:a2:e5:73:4a:3d:8c:f0:ca:88:f4:e4:13:19:
                    81:dc:65:9f:85:9e:c5:a5:e2:16:7c:4e:60:87:fd:
                    b1:e6:e9:cd:f8:92:92:86:e4:f7:ad:42:24:59:ce:
                    c4:23:69:76:26:30:84:91:9c:61:f3:bc:3d:b5:e4:
                    2d:28:04:20:ee:0f:90:db:c9:be:17:94:e1:51:73:
                    47:a9:e4:f1:72:73:ab:11:56:39:b8:a4:6e:11:fb:
                    cb:07:8e:02:e6:73:70:70:91:79:b0:c1:c1:67:ae:
                    5a:68:88:3c:ff:d5:4f:fa:d5:69:4a:cc:75:78:e2:
                    2c:45:27:31:57:05:7e:7e:56:dd:39:5d:d9:c6:b0:
                    8f:7f:3c:c8:08:c1:29:90:be:1e:88:16:9d:78:7c:
                    9a:11:2c:02:e0:59:0a:39:09:8b:68:1b:d7:31:58:
                    aa:19:6e:cd:4b:42:bb:fc:ca:c7:29:e5:91:08:c9:
                    fc:69:91:48:f8:04:a8:cc:b9:1c:c1:08:70:4b:90:
                    3a:87:da:e3:a0:6d:f8:13:1a:f5:7f:d8:b7:7e:7e:
                    ad:8c:5a:11:40:f7:6e:a3:17:90:02:82:e5:bb:3e:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6D:B4:70:B2:77:73:12:4D:D2:C6:B1:49:20:38:CB:EE:6E:82:EC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e081e31-8e5e-4339-b24c-1437a75dc6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.244.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         89:96:69:c8:fa:87:7b:23:a7:1c:fa:44:e5:af:8e:43:8b:71:
         5d:3c:f9:46:cf:7a:bc:88:a6:7f:0d:c2:eb:c6:06:35:95:9b:
         f5:d9:7f:87:8a:bf:89:12:49:90:fb:bc:5c:02:f9:39:ef:4e:
         8f:31:44:9a:64:ec:b1:10:24:98:19:86:76:06:c6:c5:fa:30:
         22:60:fa:0c:02:f1:f3:ed:e8:f0:dc:c8:ad:c0:42:04:12:e8:
         9e:da:6b:68:3b:84:8a:1e:f2:75:7c:e5:83:af:58:0c:c6:ba:
         d3:0f:6d:9b:57:3e:67:ee:67:c0:5b:e2:eb:32:ae:9c:f9:13:
         73:48:e3:18:54:ca:77:91:50:45:83:f8:ec:8d:49:26:57:f6:
         27:77:9d:cd:c9:29:c0:0b:4a:78:5b:d9:d7:8e:c7:4d:63:9f:
         99:f2:8e:c6:2a:65:96:69:9c:74:ed:5f:b9:96:8d:39:4f:9d:
         65:dc:19:df:99:f5:fa:69:1f:fc:e8:30:a2:e1:09:de:c4:47:
         e1:9e:9d:d5:ae:04:a1:1c:f3:2d:6b:36:e3:be:80:97:67:65:
         0c:ca:4f:75:f5:fe:73:02:1d:1a:22:8b:56:bc:cb:ca:6b:48:
         0b:40:81:fb:ff:89:58:b7:f8:42:72:e1:08:cf:24:47:2b:19:
         0a:07:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:42:17 2026 by rpki-client