Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa
File:                     126de986-01c8-490c-bf22-c5770a1efd7c.roa (raw, json)
Hash identifier:          KN7lP5PhmesgvC8PJZUGuD1GC5ReaGQYOEZ23fBkwAU=
Subject key identifier:   E2:83:8C:68:D4:D4:A9:08:9C:F2:FD:B9:B8:4F:2A:0F:0B:38:12:77
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       095D78EC8C6DD6D4DED449C7ECC8C6C893DB3897
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa
Signing time:             Thu 14 May 2026 00:40:05 +0000
ROA not before:           Thu 14 May 2026 00:40:05 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.196.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:78:ec:8c:6d:d6:d4:de:d4:49:c7:ec:c8:c6:c8:93:db:38:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 00:40:05 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=3e9ba8337a5283d304d3e20501bbf2d212f4ef17ecc7d04a6663ac3a19de1383, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:dd:85:f8:4d:e0:16:78:6b:bd:10:c3:73:
                    71:24:df:2d:d2:7f:de:95:f6:e8:73:a1:c8:51:bd:
                    90:34:3b:6f:a4:bf:46:01:be:1d:ef:73:ed:e9:46:
                    85:51:21:7f:a0:c5:22:13:9c:19:d5:25:bf:df:62:
                    87:59:8c:2a:33:36:3b:b1:60:91:d0:24:88:07:af:
                    76:4b:77:fc:05:f0:49:3f:f3:78:70:fa:24:7a:81:
                    53:60:77:dd:c0:ec:84:33:3d:be:a6:d4:c7:69:19:
                    e9:d7:5d:8a:69:0a:71:15:07:54:93:fa:1c:46:8a:
                    28:ff:36:84:b8:e1:31:db:bc:65:f6:3c:51:76:d0:
                    f7:4c:2c:71:6c:a5:e8:ef:a2:2d:fc:77:b5:0b:88:
                    9e:5b:82:7d:d2:ef:19:f9:9e:89:17:ff:25:5a:cc:
                    4e:66:c4:af:09:d5:95:75:cc:b9:46:62:4b:a9:87:
                    c8:0b:25:ed:f0:36:5a:0a:15:64:fa:0d:d4:1b:87:
                    ee:ee:eb:c2:c2:9b:4e:b7:3c:2a:50:09:b2:98:4a:
                    ea:92:c2:62:95:5f:9f:7e:73:b4:32:9d:39:33:53:
                    7b:b8:04:69:bd:bf:80:a1:95:48:e8:19:3f:5f:df:
                    2a:78:dc:18:55:e7:2a:e6:a0:67:08:0d:d0:b7:d7:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:83:8C:68:D4:D4:A9:08:9C:F2:FD:B9:B8:4F:2A:0F:0B:38:12:77
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:f0:02:c6:8b:58:e6:de:99:7f:c9:17:86:d7:be:11:b3:
         7d:73:29:79:cc:72:e4:e2:0d:b0:63:f9:5f:e0:ea:0f:3d:38:
         85:c3:26:0a:79:e7:34:45:2d:45:db:94:77:a9:d8:90:b6:5e:
         7d:18:2a:9e:72:50:e8:12:6f:a2:00:4c:c3:9d:71:9c:c2:e8:
         3c:25:b1:a4:4e:7c:3f:06:ea:4f:74:92:0d:b5:33:e6:8d:33:
         ef:42:e2:91:6a:f3:c0:12:17:51:6f:bd:a4:99:50:c3:66:51:
         7a:19:b5:75:ee:39:df:c9:2a:dc:49:63:2b:7a:ac:6b:c6:bb:
         07:f8:8b:ea:4c:bb:1b:82:60:ea:5f:58:76:1d:c7:68:ac:85:
         0e:38:9d:0a:93:8d:68:4b:46:8c:2f:83:e7:25:f5:34:98:2c:
         2c:40:b5:a4:e5:1a:6e:ca:d8:d6:d1:78:24:5f:2c:d8:09:32:
         2d:2c:47:59:8e:71:df:97:f2:7c:ac:c9:b7:2a:9c:24:b9:70:
         78:b6:4f:13:86:a6:67:7e:5e:1d:54:6a:d5:9d:67:93:ec:84:
         bc:11:5c:95:f6:d1:56:66:6c:65:53:96:ce:a3:b7:b6:d9:54:
         45:39:9f:53:59:75:71:38:6f:65:b0:a6:00:d4:76:7e:2b:1c:
         17:01:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 01:54:12 2026 by rpki-client