Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa
File:                     50ef1f8a-b614-47b4-aac9-43160386dd5e.roa (raw, json)
Hash identifier:          utdwM3o+v91rHqF4JDCUccu5z8GzVM/J+EMQ7W2JU/Q=
Subject key identifier:   2E:E3:FB:55:E3:D5:AB:3C:74:50:AE:53:73:7A:D1:8B:0D:BC:68:DA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       077D50FB876CDAF2DA2C31F49B7E62524FEF5A60
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa
Signing time:             Mon 27 Jul 2026 02:30:14 +0000
ROA not before:           Mon 27 Jul 2026 02:30:14 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        34.253.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7d:50:fb:87:6c:da:f2:da:2c:31:f4:9b:7e:62:52:4f:ef:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:30:14 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=e7a84fcb9655e6c6e5a05df3b45c1aeaeee191c141d140d75dd7586a5bb24a95, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:c7:63:1d:a7:95:3a:d9:aa:42:0d:cd:6b:
                    07:2e:b7:e4:f5:d3:f9:9f:1e:07:4a:f8:43:26:d7:
                    d7:7d:35:9c:b2:8e:d5:c7:68:9f:cc:43:74:92:46:
                    49:44:22:e0:6f:7d:34:92:eb:fa:de:e0:5f:4c:ba:
                    17:eb:6a:14:74:00:04:9d:76:e1:3f:f7:b1:a9:5c:
                    0b:4d:a2:16:a0:b6:81:5e:34:a8:b2:f6:59:31:6f:
                    c9:15:18:9e:88:98:79:e0:bc:af:9c:26:a0:f1:26:
                    77:43:69:45:6e:ca:54:74:bc:8d:f2:79:2e:08:5b:
                    f3:d1:0c:2e:bb:5f:b4:8b:95:51:da:12:68:7f:2a:
                    d3:0b:1b:56:5e:16:9e:ad:c6:7c:6f:ba:28:9e:e9:
                    70:35:5e:54:43:bd:0e:6f:4d:85:37:5c:2b:75:9b:
                    d5:18:57:56:93:3a:f2:6e:d4:c7:50:6f:d6:2d:e3:
                    f3:01:af:0a:60:13:3d:9a:44:86:6f:d5:19:e5:1f:
                    f4:fb:cb:04:23:41:aa:a1:1a:09:fa:9a:9d:2d:31:
                    91:9a:40:be:d7:c8:20:0d:8c:df:92:ff:81:2a:3c:
                    42:3a:f3:90:a3:6b:fb:33:b4:0c:a3:57:b0:5f:8c:
                    d3:6d:1f:d1:37:5b:6e:ee:cf:8f:55:1e:dc:20:8b:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:FB:55:E3:D5:AB:3C:74:50:AE:53:73:7A:D1:8B:0D:BC:68:DA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50ef1f8a-b614-47b4-aac9-43160386dd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.253.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:43:8e:3e:7f:08:a7:98:36:52:23:b8:16:eb:48:53:42:
         6f:ce:a6:0b:38:22:35:5d:b1:c5:a6:2c:02:c7:6a:4a:49:68:
         dc:df:17:f7:40:88:63:b6:6e:ef:22:8f:f9:dc:cc:6d:3d:6d:
         0b:9b:44:a8:84:e8:80:e6:4c:d1:42:d6:03:7b:14:83:f4:79:
         5f:bc:4f:e0:33:a5:50:a7:26:cd:2e:52:31:52:ad:a0:7b:62:
         e1:7e:b0:b0:89:e8:b4:6f:51:b6:4f:65:73:0e:3b:10:ef:10:
         ce:6e:d1:72:e6:7f:80:fb:c7:33:f7:b7:55:fd:75:1f:b5:64:
         89:3b:18:3e:df:4b:b3:f3:4c:d7:f9:ee:ac:46:fc:ab:f0:6a:
         95:a3:91:68:47:8a:0f:70:f9:75:cc:8a:77:28:9d:08:6c:82:
         ef:13:e6:5a:ba:9e:af:50:67:f8:3b:0f:20:3d:ee:9a:91:15:
         ff:0b:a0:6b:25:b9:dd:c7:29:f2:47:fd:f2:12:ad:7b:8a:dd:
         4a:64:23:8c:38:b7:84:4a:9d:46:a2:c1:49:0d:a8:62:fc:58:
         29:be:f2:c4:09:0e:37:f6:5c:3a:6b:37:c9:fe:da:9b:92:09:
         21:e6:51:47:07:22:cb:e7:4d:4f:00:77:c9:8c:64:03:b0:fd:
         5d:90:31:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB31Q+4ds2vLaLDH0m35iUk/vWmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIzMDE0WhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlN2E4NGZjYjk2NTVlNmM2ZTVhMDVkZjNiNDVjMWFlYWVl
ZTE5MWMxNDFkMTQwZDc1ZGQ3NTg2YTViYjI0YTk1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnUcdjHaeVOtmqQg3Nawcut+T10/mfHgdK+EMm19d9NZyy
jtXHaJ/MQ3SSRklEIuBvfTSS6/re4F9MuhfrahR0AASdduE/97GpXAtNohagtoFe
NKiy9lkxb8kVGJ6ImHngvK+cJqDxJndDaUVuylR0vI3yeS4IW/PRDC67X7SLlVHa
Emh/KtMLG1ZeFp6txnxvuiie6XA1XlRDvQ5vTYU3XCt1m9UYV1aTOvJu1MdQb9Yt
4/MBrwpgEz2aRIZv1RnlH/T7ywQjQaqhGgn6mp0tMZGaQL7XyCANjN+S/4EqPEI6
85Cja/sztAyjV7BfjNNtH9E3W27uz49VHtwgi0jhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULuP7VePVqzx0UK5Tc3rRiw28aNowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzUwZWYxZjhhLWI2MTQtNDdiNC1hYWM5LTQzMTYwMzg2ZGQ1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYi/QAwDQYJKoZIhvcNAQELBQADggEBAFHUQ44+fwinmDZSI7gW60hTQm/O
pgs4IjVdscWmLALHakpJaNzfF/dAiGO2bu8ij/nczG09bQubRKiE6IDmTNFC1gN7
FIP0eV+8T+AzpVCnJs0uUjFSraB7YuF+sLCJ6LRvUbZPZXMOOxDvEM5u0XLmf4D7
xzP3t1X9dR+1ZIk7GD7fS7PzTNf57qxG/KvwapWjkWhHig9w+XXMinconQhsgu8T
5lq6nq9QZ/g7DyA97pqRFf8LoGslud3HKfJH/fISrXuK3UpkI4w4t4RKnUaiwUkN
qGL8WCm+8sQJDjf2XDprN8n+2puSCSHmUUcHIsvnTU8Ad8mMZAOw/V2QMQs=
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:44:07 2026 by rpki-client