Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b6fbd7c-2bd9-4807-b22b-63b76ab39f90.roa
File:                     5b6fbd7c-2bd9-4807-b22b-63b76ab39f90.roa (raw, json)
Hash identifier:          1duKBEyQsM5uVqY7lzq9UoNcK0c+M9xiEMUgyiEBcUY=
Subject key identifier:   AA:C0:EA:35:1C:25:C4:8A:C1:10:D0:9E:0B:1A:E4:75:60:06:82:D8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       48F8F8A9E615109171537ABCDEDA25FA9B1D0971
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b6fbd7c-2bd9-4807-b22b-63b76ab39f90.roa
Signing time:             Thu 14 May 2026 01:00:12 +0000
ROA not before:           Thu 14 May 2026 01:00:12 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:f8:a9:e6:15:10:91:71:53:7a:bc:de:da:25:fa:9b:1d:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 01:00:12 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=b9efdf2b03f32d2ec1acde85c3e2f0f246af531735ff7c0980446c2ab5cea18a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e3:e5:b6:73:7d:39:35:b2:ac:44:a6:c3:4b:
                    60:48:41:9b:78:2d:2e:7d:03:85:19:30:e0:7f:cf:
                    3d:8d:22:e6:ca:e0:30:d4:eb:a0:59:76:eb:a4:ad:
                    8a:9c:37:01:10:c2:4f:c5:59:1a:88:2a:43:4c:f0:
                    0c:da:d3:8b:37:6b:9a:ec:6a:b6:b0:5a:c4:64:3c:
                    5e:66:c9:70:c9:0e:48:25:f2:31:71:6a:9a:49:a9:
                    9e:47:00:b6:af:f9:57:75:b3:5b:1e:d8:bd:c9:6b:
                    cc:58:28:4f:c0:15:4c:86:d6:ae:5f:49:75:2d:88:
                    fa:53:02:02:ca:cc:9a:39:ae:14:79:fa:75:7e:5b:
                    f5:a7:bb:85:14:76:30:6a:e0:36:d2:d1:38:28:7d:
                    5e:ed:0f:ca:48:34:9f:f1:72:ec:b6:24:f4:09:2f:
                    61:1c:77:be:2a:2f:1e:f4:94:0f:63:ae:db:e8:4e:
                    45:fc:c4:2d:cf:d3:2e:c6:ea:f0:f7:e2:60:ff:8f:
                    dd:f6:e5:49:28:da:10:d7:1d:b5:f1:60:72:bb:4c:
                    98:7e:4e:99:00:17:e4:c5:57:ca:28:1b:31:bc:02:
                    b5:8b:b1:45:24:00:af:4e:a0:60:7a:9d:4d:df:9a:
                    4c:f4:07:83:a4:0d:ae:5e:ac:38:21:8c:85:6f:e4:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:EA:35:1C:25:C4:8A:C1:10:D0:9E:0B:1A:E4:75:60:06:82:D8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b6fbd7c-2bd9-4807-b22b-63b76ab39f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:c2:69:ca:17:7d:f0:62:f5:a8:9c:85:d3:cc:94:cd:50:
         9d:77:a8:99:fa:4e:aa:17:e5:a7:98:fe:ad:59:77:c9:98:fe:
         fe:0d:e2:35:3b:2d:b0:8a:b0:2f:a3:de:d7:e5:d8:55:40:d4:
         ee:b5:97:79:f0:31:e2:d5:f3:d3:4f:b7:cc:14:16:af:c9:e2:
         47:12:fc:6f:33:93:ea:20:40:81:56:af:d7:7f:85:72:06:7d:
         d8:5a:df:d0:76:c7:92:fb:38:c8:3e:08:83:73:f4:1f:80:d4:
         9e:de:5c:2b:f2:ca:b1:28:7b:da:c1:ef:50:36:31:d7:39:cf:
         81:76:44:1f:84:15:ba:00:73:7f:a2:4a:1d:f6:f1:36:10:f2:
         de:76:34:b9:34:ba:c5:21:1e:c5:20:db:7e:4e:1f:36:f2:3f:
         5b:59:c7:95:d0:be:75:c0:5c:b4:0a:f7:9e:ee:10:57:17:0e:
         d0:dd:3f:0d:96:b6:32:e0:06:4b:3f:b3:c4:47:2e:06:a3:89:
         c0:02:76:22:30:65:80:c2:d9:82:40:67:9f:1b:56:9c:17:06:
         49:81:dd:bb:c4:83:97:bc:ab:18:b9:60:64:0d:d3:04:77:82:
         56:b3:26:7d:79:d9:a0:66:f2:f1:19:ac:13:ac:9a:9f:94:e9:
         34:d2:57:87
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSPj4qeYVEJFxU3q83tol+psdCXEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDEwMDEyWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWVmZGYyYjAzZjMyZDJlYzFhY2RlODVjM2UyZjBmMjQ2
YWY1MzE3MzVmZjdjMDk4MDQ0NmMyYWI1Y2VhMThhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDr4+W2c305NbKsRKbDS2BIQZt4LS59A4UZMOB/zz2NIubK
4DDU66BZduukrYqcNwEQwk/FWRqIKkNM8Aza04s3a5rsarawWsRkPF5myXDJDkgl
8jFxappJqZ5HALav+Vd1s1se2L3Ja8xYKE/AFUyG1q5fSXUtiPpTAgLKzJo5rhR5
+nV+W/Wnu4UUdjBq4DbS0TgofV7tD8pINJ/xcuy2JPQJL2Ecd74qLx70lA9jrtvo
TkX8xC3P0y7G6vD34mD/j9325Uko2hDXHbXxYHK7TJh+TpkAF+TFV8ooGzG8ArWL
sUUkAK9OoGB6nU3fmkz0B4OkDa5erDghjIVv5H51AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqsDqNRwlxIrBENCeCxrkdWAGgtgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzViNmZiZDdjLTJiZDktNDgwNy1iMjJiLTYzYjc2YWIzOWY5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0fIgwDQYJKoZIhvcNAQELBQADggEBAHv8wmnKF33wYvWonIXTzJTNUJ13
qJn6TqoX5aeY/q1Zd8mY/v4N4jU7LbCKsC+j3tfl2FVA1O61l3nwMeLV89NPt8wU
Fq/J4kcS/G8zk+ogQIFWr9d/hXIGfdha39B2x5L7OMg+CINz9B+A1J7eXCvyyrEo
e9rB71A2Mdc5z4F2RB+EFboAc3+iSh328TYQ8t52NLk0usUhHsUg235OHzbyP1tZ
x5XQvnXAXLQK957uEFcXDtDdPw2WtjLgBks/s8RHLgajicACdiIwZYDC2YJAZ58b
VpwXBkmB3bvEg5e8qxi5YGQN0wR3glazJn152aBm8vEZrBOsmp+U6TTSV4c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:48 2026 by rpki-client