Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e6d17b7-34a6-4151-8a41-12f370573800.roa
File:                     1e6d17b7-34a6-4151-8a41-12f370573800.roa (raw, json)
Hash identifier:          +wNth2h1cN/qso2nhHHABI6GhAvqPIv8Kp4Adgkw7+U=
Subject key identifier:   78:DE:0C:D0:A0:60:EF:AB:B2:22:C9:A7:4F:E1:A1:3E:A6:98:EA:D2
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       70D70A96F7857AD3E0D713DCF071CA2ED670B5C3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e6d17b7-34a6-4151-8a41-12f370573800.roa
Signing time:             Fri 07 Aug 2026 02:00:59 +0000
ROA not before:           Fri 07 Aug 2026 02:00:59 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.82.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:0a:96:f7:85:7a:d3:e0:d7:13:dc:f0:71:ca:2e:d6:70:b5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:00:59 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=8cb6a81b3941e1926554b14019330279b5d67ada23cf802bddd2fc61d7f1d7f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:46:1c:27:60:0d:db:7f:6b:f5:e8:6e:0c:
                    96:b0:23:34:70:98:5f:f1:5f:f5:28:23:55:d9:1d:
                    92:da:d8:a4:e1:a4:d6:e8:aa:06:5f:4f:f0:e8:42:
                    be:6f:85:1b:05:18:1b:5e:da:6f:b7:35:1b:6a:4d:
                    a4:60:4a:ee:94:e4:4f:da:9b:21:63:8f:40:15:10:
                    42:91:0c:af:59:94:bd:7e:e1:29:2d:b2:92:3e:50:
                    f0:6f:d7:49:d3:37:22:4d:40:f5:bb:27:31:de:a8:
                    e3:d1:07:38:98:d8:97:e7:86:0b:d3:19:90:1c:d7:
                    cc:20:32:0a:2f:93:ed:a3:f3:fc:68:3c:52:64:77:
                    8c:c4:19:23:30:3f:03:20:0a:fc:87:ad:3b:48:f9:
                    1b:92:cf:54:26:d4:a7:0c:82:89:54:18:9a:94:0e:
                    6f:6d:af:90:66:78:fe:b0:51:bc:4d:98:5e:b4:61:
                    26:13:87:c5:d9:a0:a6:16:17:8e:ff:a3:4e:cd:1f:
                    f6:b7:3d:9a:1c:16:fb:9f:6d:91:db:59:b0:32:78:
                    d2:12:bd:15:1a:4e:da:30:5c:00:5e:b9:13:d2:1b:
                    b2:51:c8:a8:20:2e:e1:21:b9:b8:81:ec:2c:5b:6d:
                    10:6a:f3:d1:11:67:3c:ac:b3:38:77:ec:87:49:f9:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:0C:D0:A0:60:EF:AB:B2:22:C9:A7:4F:E1:A1:3E:A6:98:EA:D2
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e6d17b7-34a6-4151-8a41-12f370573800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.82.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:4b:bc:36:43:23:7a:2e:55:5d:0d:6d:52:4a:1b:5c:f6:
         8d:60:af:f9:3d:9f:e0:e3:d3:04:73:a8:59:ca:2d:f5:cc:b4:
         7f:25:54:d3:18:be:45:0b:4b:c4:09:94:76:bb:c7:1c:d5:18:
         81:c5:21:70:4c:3b:73:8a:67:b8:76:b0:c8:a1:99:a3:20:14:
         56:51:35:87:11:6a:83:47:71:f1:21:76:ca:f2:ae:d7:1b:50:
         1a:57:b0:88:23:83:89:79:40:0f:81:16:85:16:bd:db:74:af:
         db:0c:05:85:f5:d3:11:18:df:48:08:81:e6:12:62:e4:45:e4:
         42:51:4b:21:15:91:ff:e8:d7:8c:7c:ed:f2:c3:c4:05:a7:56:
         96:c5:22:fe:58:67:cf:8b:7b:23:d4:0b:a1:7b:2c:93:43:28:
         9b:00:ea:a5:be:e5:29:59:d5:b1:3d:58:81:50:a7:4a:08:c1:
         1e:b7:d8:59:5c:9a:4e:bc:56:ac:76:60:53:60:0e:7f:99:ca:
         0d:0c:86:53:2e:a3:cc:e8:74:89:ad:b5:10:bf:99:6f:50:19:
         d4:37:2e:5b:1f:4c:1e:80:d6:7b:ff:d8:be:25:13:ba:c2:03:
         ca:ec:81:8a:60:7f:84:80:d1:aa:31:22:2f:18:b2:cb:de:df:
         4e:91:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:03:35 2026 by rpki-client