Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/454fa87f-7e54-4469-8f87-2b765ba800a2.roa
File:                     454fa87f-7e54-4469-8f87-2b765ba800a2.roa (raw, json)
Hash identifier:          9f2bdaYx6LAaW68WPjH6l1Z6On9Z6CD/Smda6M7H65s=
Subject key identifier:   BE:2C:19:A0:5A:29:89:F0:72:3F:18:74:29:43:C5:A1:5B:9C:A6:58
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0F641D90D697FB5972091554ABF523376FCCC94B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/454fa87f-7e54-4469-8f87-2b765ba800a2.roa
Signing time:             Thu 14 May 2026 00:20:15 +0000
ROA not before:           Thu 14 May 2026 00:20:15 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.147.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:64:1d:90:d6:97:fb:59:72:09:15:54:ab:f5:23:37:6f:cc:c9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 00:20:15 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=99d3610298ab228ccc65e8f44c6120865623b1c6fe8dca91a60fd01c108cf5f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:d5:a9:4b:34:7e:0c:23:f6:ae:08:98:22:
                    41:e8:31:c6:a7:51:ee:ac:df:0b:2a:b7:98:0e:fa:
                    13:8a:a4:ef:0c:ab:e0:64:a3:39:40:56:3a:5c:0f:
                    52:e0:12:78:ea:bf:09:98:07:05:05:24:b2:b2:8c:
                    ab:54:9f:32:2b:68:4e:72:55:51:56:10:0f:e6:1d:
                    7e:91:30:3d:2e:21:e1:d0:9f:0a:83:ed:6e:c6:9a:
                    3f:d1:44:76:b5:8c:c3:5c:f5:c0:d4:70:d9:ea:19:
                    8f:5c:17:d6:3e:03:79:d5:81:5a:37:02:56:fd:b1:
                    82:83:e3:40:59:de:4d:ca:96:08:0b:c8:a9:22:18:
                    d9:e3:93:94:94:d7:09:4a:bc:61:60:25:99:46:d0:
                    a2:a5:62:7a:49:98:f5:88:9e:27:13:4a:66:e0:87:
                    d1:d3:68:af:71:b1:0a:51:fe:a8:78:01:46:c9:f8:
                    f3:86:6f:1d:62:ce:cf:11:84:08:66:f6:72:eb:00:
                    7d:24:85:b1:ac:8f:d0:3a:75:9f:14:e0:b0:02:6e:
                    95:2d:a6:80:b2:34:be:8a:c5:96:b6:b3:06:f9:2c:
                    0c:32:26:c9:d0:f5:9c:78:66:00:fd:a5:08:0c:10:
                    a8:35:3a:fe:3f:8a:48:48:ce:6f:04:00:e7:51:a6:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:19:A0:5A:29:89:F0:72:3F:18:74:29:43:C5:A1:5B:9C:A6:58
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/454fa87f-7e54-4469-8f87-2b765ba800a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.147.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:91:9c:d5:96:77:e5:5c:b1:b6:9d:82:a3:94:23:e2:f4:2a:
         4c:37:62:15:11:cf:c4:b4:6f:50:c7:6f:3c:b8:89:65:0a:1d:
         ea:63:57:71:75:b3:ed:d3:32:9b:0f:5a:25:9d:6a:d1:e4:0a:
         de:e1:ac:62:20:2b:2a:3c:7a:e2:c9:f4:ea:68:1f:8b:2c:ee:
         9f:cf:16:c5:d0:32:ba:02:1d:e7:e8:61:17:bb:af:5b:0e:fc:
         71:75:d4:02:19:e3:7c:67:8e:25:ab:d8:a8:64:f3:46:1c:fb:
         48:a7:6a:8a:93:e1:3b:b1:0b:c4:e4:8f:57:5b:06:ac:9a:38:
         0a:e2:3a:a4:5a:b3:0b:17:59:04:7a:39:56:d1:c5:6d:61:4f:
         fb:42:07:ba:5d:d0:61:e7:a9:46:0a:9a:6e:2c:6d:c4:b2:ff:
         52:dc:76:06:4e:00:cd:b6:11:37:43:2e:97:8c:7a:ac:11:aa:
         f2:4c:31:5e:53:db:db:f8:98:69:ff:89:0c:86:f4:42:b4:cd:
         61:a8:41:97:5b:1d:db:6c:f0:58:53:4d:89:1a:09:23:5b:a0:
         7f:9b:bd:e6:58:01:3c:97:4e:e4:60:94:c8:a9:fa:c6:00:f2:
         35:ce:f8:95:5a:3e:cf:c5:16:93:0f:7a:a3:9d:09:72:87:79:
         02:22:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:47 2026 by rpki-client