Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
File:                     74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa (raw, json)
Hash identifier:          vc3Cc7oBeXrn7DbKxUaEDw0mbsrL2b3Gs7bJoXNVthc=
Subject key identifier:   DD:E5:58:64:10:69:32:DD:9A:B2:DE:FC:7E:4C:9A:10:72:F7:ED:B6
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D5908D7926F79442CA6FBCBFE38B3C552BB0C8E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
Signing time:             Wed 05 Aug 2026 01:30:41 +0000
ROA not before:           Wed 05 Aug 2026 01:30:41 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:59:08:d7:92:6f:79:44:2c:a6:fb:cb:fe:38:b3:c5:52:bb:0c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  5 01:30:41 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=586b370f80b887fbcb6e99fe48ec8cbefa7f5d0cbcdf27d11beaecd010115f68, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:05:82:8e:81:de:2e:03:1c:29:01:2e:14:
                    24:a2:13:45:70:a9:0c:32:3d:9b:af:c9:1e:9b:d8:
                    c8:71:e2:cc:5b:77:f0:26:97:59:32:5f:be:fd:c5:
                    50:1b:2f:e3:e9:4f:be:9f:c7:d6:23:d1:18:7f:ed:
                    68:89:27:96:60:76:11:a6:8e:70:05:71:ef:39:02:
                    60:ba:1b:d6:b5:c4:3b:13:50:4d:01:aa:d2:d8:ec:
                    87:ff:66:c3:71:01:d7:fb:22:96:5e:b8:0e:cc:b5:
                    dc:3d:ba:99:96:81:ec:cf:b9:4a:99:bb:45:d4:4a:
                    ef:d4:63:95:7d:79:07:89:9b:67:a5:75:35:f8:82:
                    b6:4b:6d:fd:a5:09:dd:ba:6a:15:8e:36:b1:7b:e8:
                    96:90:ee:c3:81:ae:10:25:f2:31:e0:e5:25:e4:e7:
                    75:f5:cf:55:a2:07:6c:11:fa:a1:cc:4d:ef:f7:8f:
                    a6:fc:b2:d6:89:a5:87:ac:76:87:8d:a6:da:1c:05:
                    0a:d6:3e:81:0b:7c:b4:8d:31:58:27:13:54:dc:9c:
                    ea:7c:ad:2b:13:51:4e:eb:b7:d8:9a:a3:f7:1e:d7:
                    1a:20:b5:74:46:c7:a0:64:bc:df:11:b8:d1:a1:08:
                    4e:c4:ca:e4:6f:4d:61:1e:d1:67:44:c5:07:3d:dc:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:58:64:10:69:32:DD:9A:B2:DE:FC:7E:4C:9A:10:72:F7:ED:B6
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:d9:f8:f0:f8:44:f0:16:b3:26:a1:6b:95:06:4c:36:bd:
         81:4d:a4:9c:7e:59:58:ba:68:03:70:f8:4d:85:6e:2e:31:f5:
         8a:ad:11:6b:6e:87:e4:e3:a2:cd:4a:bb:29:f3:ab:f3:8d:12:
         75:2f:7e:ad:dd:2d:e2:8d:eb:6e:d7:66:0e:68:af:06:d0:5c:
         f5:4c:f4:91:3c:9e:80:11:04:c5:b1:6c:a2:07:57:6b:9a:63:
         db:b5:5c:73:ed:7c:24:3c:85:25:06:82:2f:2e:4d:81:3c:d0:
         b2:ae:ee:cb:f3:93:4d:00:de:0c:e5:ec:42:62:91:85:1c:ee:
         d8:fe:00:29:4b:40:4f:5b:29:b8:71:2b:3a:65:43:ee:da:2e:
         4f:34:43:50:7c:68:6c:8c:43:50:d2:a5:40:17:e4:cb:8b:e6:
         03:b6:b0:86:30:4e:a8:5b:9c:25:24:a3:de:a3:a8:b0:54:2d:
         c5:0f:c9:ef:03:c0:ce:4a:43:8f:53:82:0b:77:f9:a4:38:5a:
         02:b9:15:43:1d:a4:de:73:55:73:56:7b:63:b0:d8:1f:1d:9e:
         6a:aa:be:3b:4d:42:40:4d:61:be:0d:e6:44:c4:bd:73:7a:9c:
         2f:1c:6d:8c:4e:3b:11:e3:c8:26:44:34:3d:fb:60:f2:6a:43:
         94:8b:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:26 2026 by rpki-client