Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efe89a-3988-4164-98dd-bb1f690379cf.roa
File:                     74efe89a-3988-4164-98dd-bb1f690379cf.roa (raw, json)
Hash identifier:          a8e9f8qlTPckXoaLXvY++58K5dYd3eEpiGqMytzQjdg=
Subject key identifier:   B5:0F:BA:73:BF:F4:17:D6:A8:91:19:E8:91:DE:8A:E5:09:7C:6C:8B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DCD361EA15A57D1475D3E3A4D966645BCAACCC1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efe89a-3988-4164-98dd-bb1f690379cf.roa
Signing time:             Mon 03 Aug 2026 03:20:37 +0000
ROA not before:           Mon 03 Aug 2026 03:20:37 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.94.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cd:36:1e:a1:5a:57:d1:47:5d:3e:3a:4d:96:66:45:bc:aa:cc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:20:37 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=52bb5895fc5ca8337fab35c9832420ac4dc3492a873fdb7216b9059cac89bb4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:8c:08:58:91:f7:e5:c1:65:f4:45:6c:86:
                    9a:0d:c1:56:86:9c:aa:b9:83:ed:24:af:57:17:29:
                    3f:59:45:5e:ad:92:3a:db:3e:40:70:e2:6d:0c:c5:
                    19:4e:51:ea:1d:98:a0:f0:99:48:b8:b5:8a:a5:c6:
                    0b:50:da:01:c4:12:2a:2c:07:f4:55:00:b3:4a:ad:
                    19:eb:09:f3:7f:60:4f:83:cf:75:f2:00:20:fb:2d:
                    aa:c8:39:7d:64:65:d0:90:2f:3d:ac:67:3f:b0:89:
                    9a:0f:15:39:92:e2:6f:17:7e:d6:a3:27:1c:12:e7:
                    90:05:c0:04:8b:36:ce:9d:b9:9f:1c:fe:d5:ff:34:
                    27:4e:bf:65:82:74:79:75:35:4c:87:44:86:51:99:
                    83:0b:2c:d9:77:d2:8c:53:8f:ba:5e:37:16:0b:94:
                    30:c9:8f:e8:64:0f:fb:99:a2:79:dd:c9:d9:54:11:
                    2c:41:79:f9:7e:56:33:6d:24:4a:b5:2b:79:b2:b0:
                    93:2d:a4:d3:fd:95:e0:08:80:32:68:7e:45:67:01:
                    73:a3:69:73:bd:1b:1d:61:f6:bb:23:c6:c4:c7:4d:
                    69:7d:e0:dc:c6:94:52:2c:8f:43:21:3b:3c:ea:96:
                    ed:82:a2:58:d1:e5:b8:7c:c1:4b:73:25:8b:ed:7b:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:BA:73:BF:F4:17:D6:A8:91:19:E8:91:DE:8A:E5:09:7C:6C:8B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efe89a-3988-4164-98dd-bb1f690379cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.94.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:ea:50:a1:d6:f9:ea:53:a6:07:f8:f5:26:32:14:40:b6:
         8d:c3:45:4f:e0:25:3e:01:38:cc:f4:db:6d:8f:c0:5a:a7:60:
         1c:f1:3b:de:83:06:b1:6b:02:a5:bc:35:9f:e9:c9:e2:e5:e6:
         fb:fe:9e:a6:f9:d9:cb:ac:f6:e8:4a:93:11:41:35:6d:5f:31:
         2e:42:4a:23:ae:ea:17:ba:bf:68:4b:75:93:3c:ee:0b:3f:2b:
         81:a8:42:9f:c1:2b:3d:95:17:65:47:b9:81:ff:b0:9e:14:1d:
         da:05:a1:71:b3:32:43:35:e4:9d:8e:48:ba:96:41:f6:26:be:
         2b:b7:67:48:07:58:d2:50:71:c5:08:b9:de:c9:67:fe:c7:bc:
         e5:36:5e:c4:de:94:32:0d:cf:91:13:af:97:60:b9:47:32:b7:
         07:42:2b:ef:c9:56:6b:20:7a:b6:2a:93:e2:0c:2e:ec:38:b4:
         be:53:5d:7a:a1:1a:78:07:34:42:6a:82:e1:38:36:45:a8:d7:
         ab:70:6e:4d:ff:35:45:f4:52:bb:cd:a6:2f:80:5b:41:52:86:
         15:cb:81:a2:3d:bf:d7:82:89:25:e1:b7:c4:0a:f5:55:da:26:
         9e:93:00:65:e8:a1:1b:c1:21:72:3a:26:1a:73:2b:48:27:72:
         8d:9c:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:42:27 2026 by rpki-client