Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa
File:                     70f0c689-ff16-4581-8f2c-df50728b514a.roa (raw, json)
Hash identifier:          VveXNeNFF5dh/3OmA4kPF3tJ83CmJFZZ7HtRh/4AwI4=
Subject key identifier:   C4:00:56:AD:1B:5A:17:0B:1D:FC:D0:89:E5:00:9D:FB:6A:AE:48:95
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       514A510C254A527F1884CEC727E272C5C8A9DAFF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa
Signing time:             Tue 19 May 2026 01:01:35 +0000
ROA not before:           Tue 19 May 2026 01:01:35 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        52.119.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4a:51:0c:25:4a:52:7f:18:84:ce:c7:27:e2:72:c5:c8:a9:da:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 19 01:01:35 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=6400422e0b038d786da5df8bc7d03aa73a341c79d620c59a623c225f0880e1b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:84:14:e3:ba:94:bb:99:55:9c:be:e3:03:
                    b2:9b:84:ca:d1:26:fd:64:6f:be:0f:a0:65:3b:a7:
                    1b:ba:f1:53:fb:f7:b5:d3:eb:d5:b1:b2:52:83:fd:
                    08:2d:dc:fd:08:9e:36:4e:b6:79:0e:c0:00:f6:41:
                    a9:71:5d:87:96:ec:09:7d:52:b2:be:36:bb:de:3b:
                    36:92:c2:2c:09:fd:79:4e:3f:37:56:0c:7d:a7:f9:
                    ca:38:8e:52:a2:aa:59:aa:99:3d:6a:9a:5b:af:24:
                    7a:54:29:97:fe:f3:35:c5:f1:44:d3:75:fc:be:6a:
                    74:02:02:3c:81:d8:55:f4:75:26:d0:51:67:ff:c1:
                    2f:a4:3a:3a:20:59:10:e7:d3:92:21:5e:14:ff:88:
                    36:b6:7a:e5:4b:a2:61:a5:53:a6:68:29:af:e3:c9:
                    37:94:49:c0:8e:16:f8:22:3e:a8:98:33:40:92:c9:
                    df:c8:78:51:62:ae:2e:2d:f9:71:44:39:a5:40:35:
                    fd:7f:9e:b8:9e:cc:8c:db:d6:c8:1b:d9:0b:b4:6b:
                    4d:94:29:61:d7:04:e0:11:c0:4b:c6:e1:6e:da:8a:
                    a3:e8:43:c6:96:88:48:25:ab:c2:2a:41:d2:04:69:
                    f0:2e:6d:10:1a:a3:c2:83:b3:60:44:4a:fc:22:ff:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:00:56:AD:1B:5A:17:0B:1D:FC:D0:89:E5:00:9D:FB:6A:AE:48:95
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70f0c689-ff16-4581-8f2c-df50728b514a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:f1:5e:f1:56:8f:b2:33:40:b6:4a:20:e3:4a:02:c1:26:
         f7:46:22:6f:c6:69:b0:a7:23:ea:fe:ac:54:9a:07:90:99:56:
         ef:fe:09:44:e9:24:88:be:50:b2:06:a2:a9:14:ce:9a:2f:2d:
         87:4d:68:4c:12:19:6f:22:98:43:f9:48:a4:96:34:e6:d9:ac:
         99:30:2b:a4:77:93:4e:3c:01:87:f1:cb:31:d7:a0:bb:0c:32:
         9b:e7:e9:e5:66:19:e3:71:39:ff:8e:ba:ae:ce:fb:73:47:d2:
         9e:06:57:87:da:65:0c:6b:a3:82:74:fd:01:72:5b:9e:8c:a0:
         7c:c0:eb:55:43:4a:ba:63:2f:64:5b:6e:77:5b:fb:3f:62:3e:
         e4:74:66:8a:61:da:0c:2b:39:aa:fa:17:35:84:22:9f:34:67:
         4a:fe:5f:c6:53:00:13:6f:1e:00:93:31:7e:8d:0b:30:49:6c:
         fe:81:40:4e:81:2c:75:78:c3:b6:24:fe:c2:71:1e:21:9c:96:
         b7:18:19:cd:87:f4:26:04:cf:32:3e:cc:42:39:16:79:12:98:
         38:a2:b6:ab:9b:33:01:df:2f:53:82:1e:25:44:70:56:55:f4:
         54:5c:97:e3:14:30:0d:67:9f:5a:83:44:00:1a:7c:9d:7c:e9:
         15:69:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:49:55 2026 by rpki-client