Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e0bbe94-c032-4085-9972-3642ce491535.roa
File:                     6e0bbe94-c032-4085-9972-3642ce491535.roa (raw, json)
Hash identifier:          Lbm9gOa1bPD17sPx3svumfbhVMl3O7HK/A/dCe/HWE4=
Subject key identifier:   90:F5:96:AD:0B:35:87:64:65:49:16:41:BD:6A:B6:1F:38:39:50:04
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0EF70A72250B3BFBDF0CB929B7CB7A453DDABDAE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e0bbe94-c032-4085-9972-3642ce491535.roa
Signing time:             Thu 15 Oct 2026 02:50:28 +0000
ROA not before:           Thu 15 Oct 2026 02:50:28 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.218.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:0a:72:25:0b:3b:fb:df:0c:b9:29:b7:cb:7a:45:3d:da:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 02:50:28 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=927391885b6cd4319817ead9825cc17d00d8d245808c4052025fe7ace0d8f54d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:e3:df:b5:0d:39:d3:a6:d9:89:95:4a:ee:
                    4b:1b:10:d3:ab:28:c8:fa:71:52:28:43:f9:db:92:
                    75:2d:09:87:89:96:7c:eb:d7:5a:76:7b:bb:e0:12:
                    c0:92:ab:eb:ce:26:3b:73:9b:55:f7:ec:60:27:13:
                    50:8a:b9:a4:9d:d5:8f:ac:6b:5e:8a:88:9a:c3:b4:
                    70:27:81:93:f5:c1:3c:bd:32:68:4d:7f:9d:2d:38:
                    b5:9a:a8:2c:6f:c3:d1:7d:e5:85:91:f1:ed:c5:c6:
                    8c:59:68:7a:14:93:3c:ab:ed:1d:38:c2:96:ac:68:
                    26:12:4f:45:dd:3e:d5:c4:2f:9d:88:fa:75:e6:62:
                    d3:f7:ba:bd:85:1f:b8:2a:93:04:c8:23:ea:66:72:
                    0c:c7:d0:89:ff:b1:01:ae:0e:12:fb:c6:f8:69:33:
                    b6:61:36:5b:f0:eb:5c:8f:24:20:95:be:31:bb:cd:
                    88:bc:9f:53:89:ea:23:79:f6:d9:42:57:84:0a:d1:
                    e1:99:7b:7e:b9:a7:df:c8:31:cd:f2:6f:b5:58:11:
                    38:73:b2:1f:54:78:1a:ba:eb:41:d7:6f:95:b5:36:
                    a7:be:8d:74:ae:e3:76:64:fc:e2:0c:ae:f9:da:29:
                    86:57:53:c8:25:c6:05:59:70:2e:f5:4d:77:b9:80:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:96:AD:0B:35:87:64:65:49:16:41:BD:6A:B6:1F:38:39:50:04
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e0bbe94-c032-4085-9972-3642ce491535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.218.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:9e:da:7f:da:04:0a:fd:84:4c:87:80:e4:c2:ce:26:c6:
         85:2c:2c:65:c7:23:c8:71:e6:07:da:fd:45:a9:b1:3c:ed:63:
         ba:4c:36:7a:4b:24:4e:e0:49:fc:23:50:1b:25:8e:7a:84:f7:
         ab:7e:9e:da:33:0d:38:19:48:45:cc:ac:cc:5a:7a:3e:e4:f7:
         61:28:cf:ac:47:f5:13:52:2d:cf:6f:40:24:49:dc:e0:32:9a:
         bd:11:81:3e:ae:93:3f:3a:f4:d3:08:9f:89:3d:3a:01:18:32:
         03:f1:e2:b4:3a:3f:6c:87:38:f2:a6:f2:e6:0f:0e:d9:ed:c5:
         1b:4e:de:e4:9f:f3:70:de:c7:a6:91:80:fa:57:d1:b6:5b:f3:
         68:56:0e:64:1e:93:8d:4f:fc:33:58:7b:1d:8b:43:09:af:53:
         cd:35:35:39:6f:28:b0:3f:28:0f:f4:d4:19:56:92:8d:d2:00:
         ab:06:28:2e:e1:2b:e6:b6:f3:6a:b1:5b:e5:be:e7:a8:23:f1:
         ac:ab:f4:f8:5b:92:87:61:22:5e:cc:31:e6:9a:fe:68:d2:33:
         b6:c6:0e:b7:52:ab:ae:02:d5:49:e2:23:e6:fb:d5:e1:39:40:
         68:44:13:39:df:13:13:6c:5b:b4:e8:2f:37:70:a5:2c:f6:57:
         06:3c:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:59:08 2026 by rpki-client