Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa
File:                     729f57a1-2802-4df9-8207-2be1edbefde3.roa (raw, json)
Hash identifier:          K9AStgYPXPkag4GT9QcUfliCVQWNoiSaojy/7rz+RTg=
Subject key identifier:   42:2A:59:7D:3B:8E:7B:FE:25:36:E5:F2:A1:6C:A0:FC:BC:37:E2:3C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1D2A94F3483BAC066BA787B9D5766E477B8CB9CF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa
Signing time:             Mon 27 Jul 2026 01:11:49 +0000
ROA not before:           Mon 27 Jul 2026 01:11:49 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.170.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2a:94:f3:48:3b:ac:06:6b:a7:87:b9:d5:76:6e:47:7b:8c:b9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 01:11:49 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=d15d55d5e2d769d666505014bc65905b03ddff117db9107a35174d858f78ee6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:e1:d6:c1:2b:d9:93:63:80:ef:1b:71:f5:
                    06:2b:23:26:b8:cd:ca:30:a6:f3:0b:99:a1:a5:28:
                    ab:ab:78:45:9f:c7:c2:43:62:14:a6:2e:57:0a:da:
                    27:a4:74:51:71:b6:2e:45:dc:48:c9:cb:da:c5:96:
                    92:62:6d:e4:78:c6:77:d5:2a:1a:35:8d:f1:5d:3b:
                    93:fe:77:a3:eb:25:e0:6e:53:5c:93:44:c2:39:33:
                    83:e6:a3:45:f3:36:4d:68:b4:e2:d4:cc:7b:cb:fc:
                    52:ab:ab:76:10:95:a8:f9:bc:97:3c:72:9c:54:51:
                    1c:1c:82:bd:ea:3b:1c:67:f7:c2:d6:86:17:7d:dd:
                    13:96:86:de:6c:c3:0d:1a:ad:46:ca:d8:e3:cd:1b:
                    42:e9:db:ea:9b:d5:c5:93:5c:94:52:33:36:5b:0b:
                    ae:d8:d0:7c:e2:5f:2d:24:ec:92:d9:23:36:92:58:
                    e5:e7:20:26:1c:4b:c2:11:bd:ae:90:eb:8e:f2:e8:
                    80:15:20:84:ba:a8:1f:f6:69:26:01:91:bd:f5:71:
                    21:67:cf:bb:d1:be:6c:7e:91:bb:94:84:9a:41:97:
                    61:42:b5:6d:39:33:91:03:31:c7:ae:d3:ff:22:3e:
                    ee:10:e6:b7:63:f5:a2:10:d1:e2:88:b9:ff:3a:1d:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:59:7D:3B:8E:7B:FE:25:36:E5:F2:A1:6C:A0:FC:BC:37:E2:3C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:ae:f2:79:c0:36:64:70:cc:49:10:1e:49:18:61:36:9e:
         13:29:7b:5e:cc:98:4b:97:83:26:ef:c4:af:ad:ca:c9:31:4c:
         6e:13:f1:0a:c9:df:bc:3d:9e:b3:b2:7b:41:d2:6d:d1:c0:26:
         a6:0e:9b:8a:f7:1a:d7:13:4d:e3:8c:d3:5e:4b:21:57:19:fa:
         75:37:a3:32:ba:98:fa:97:74:b5:9d:81:cf:2d:ac:d0:af:98:
         c9:fb:da:43:c9:86:66:28:04:f1:d1:78:e1:c8:f5:bf:9f:f3:
         0b:1c:ae:40:b9:da:53:f7:99:6f:d4:20:e3:02:3a:b0:aa:f9:
         81:98:6d:a8:78:ab:c2:67:72:54:e0:42:70:7d:96:0d:1a:66:
         45:01:42:55:1a:ab:0a:ce:62:c6:dc:85:52:2e:6a:62:59:a3:
         7d:a8:1c:4f:20:e6:7e:13:19:f5:18:ea:d6:63:ff:93:cd:08:
         27:7c:4c:70:78:cc:5d:4d:35:07:3d:35:d1:a0:f0:a8:42:d9:
         42:e3:2a:a8:63:ee:fb:d2:81:01:c2:f9:c8:61:11:60:84:d7:
         4c:9e:b5:56:27:29:ac:ea:0b:6f:44:13:89:2f:db:5e:39:c9:
         d8:87:3c:85:60:9d:41:ca:94:63:4a:85:26:fd:00:11:4a:02:
         d0:e1:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:41:13 2026 by rpki-client