Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7694bdfc-9592-4dac-9d12-f2c7d6f8af66.roa
File:                     7694bdfc-9592-4dac-9d12-f2c7d6f8af66.roa (raw, json)
Hash identifier:          vba3+/x/uurRnSQinarGL0RfiMPSbycWtvnJMyFsoII=
Subject key identifier:   23:2F:D7:DD:2F:CE:E6:3C:DF:B5:BA:42:3C:85:FF:5A:13:75:A6:8A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       17DD62FAFEC537A074DFB365A7FDF0A2ED151C57
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7694bdfc-9592-4dac-9d12-f2c7d6f8af66.roa
Signing time:             Mon 27 Jul 2026 02:41:21 +0000
ROA not before:           Mon 27 Jul 2026 02:41:21 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.214.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dd:62:fa:fe:c5:37:a0:74:df:b3:65:a7:fd:f0:a2:ed:15:1c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:41:21 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=6f7cad289d7950443f540197b48739d5396a17cb0e2bb82cb5fc3112bd70117c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:81:a3:4d:67:96:85:52:c6:13:33:24:7a:
                    77:0b:a7:78:b1:cb:c1:8d:7d:05:17:df:d3:31:5c:
                    dc:69:e1:b8:69:47:8c:a2:6a:71:57:82:40:42:67:
                    54:51:c2:ab:95:cb:d7:67:29:86:a8:45:4f:3d:d1:
                    c9:b7:fe:c0:07:d4:d8:22:1b:e0:52:62:41:64:56:
                    37:b9:95:87:e8:9a:79:37:3d:03:50:ea:b5:24:eb:
                    48:ce:a0:6f:2a:37:62:f5:2b:8a:0c:8b:dd:72:14:
                    b3:a5:d0:99:aa:e5:7f:3b:98:d4:67:e9:c5:b5:17:
                    bc:a2:93:7d:7a:5b:44:75:b1:60:34:7f:f3:20:59:
                    78:f3:ff:5d:a8:3d:a7:ee:92:34:6c:b7:a4:e1:0c:
                    83:e0:01:d4:c6:b1:85:6f:d3:df:80:fe:28:d6:b9:
                    12:1a:02:15:af:20:74:54:81:47:b4:24:78:f4:d6:
                    7f:90:4b:e1:3c:f4:77:a2:93:22:a0:59:1a:d9:c7:
                    f2:87:a4:98:3c:a2:c8:9c:be:13:99:f9:42:70:db:
                    6e:d4:29:28:a2:13:60:ca:f0:ab:f9:2d:b9:4f:74:
                    24:23:02:55:83:5d:fe:29:d8:f8:13:ca:24:a1:be:
                    ea:19:0c:ca:27:91:aa:cc:81:53:3c:ed:f5:a9:70:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:D7:DD:2F:CE:E6:3C:DF:B5:BA:42:3C:85:FF:5A:13:75:A6:8A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7694bdfc-9592-4dac-9d12-f2c7d6f8af66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:03:de:c2:fc:aa:c2:1d:99:d9:25:df:7f:4f:fb:e5:1a:12:
         06:a7:c0:78:f1:41:e3:f1:42:1d:61:10:ec:d3:99:95:00:3a:
         7b:e4:37:37:ae:73:22:93:2d:9c:9b:83:9f:41:1c:33:70:fa:
         95:37:a5:81:97:20:dd:84:23:c8:af:9c:94:a2:95:8d:cd:0e:
         1a:a2:0e:46:c3:ad:1c:1f:3a:c9:bf:db:e0:0b:66:f4:88:68:
         89:e6:52:38:c4:c4:cd:2a:cb:6b:df:c1:f7:45:55:ee:3a:7a:
         48:2a:7e:eb:c8:80:b5:04:aa:c6:f3:9c:ff:f5:1b:48:9e:ec:
         8e:9a:f4:41:39:13:f9:ea:bf:11:f7:98:68:8b:a5:8a:fa:2f:
         2d:f6:c0:0d:ed:c8:7d:c1:6b:24:68:10:de:d8:99:c9:c1:83:
         d8:8c:a9:4f:ec:11:03:01:63:97:84:f9:c0:6b:5a:e3:3e:ae:
         e8:b9:cc:d5:c6:83:00:db:c5:88:97:ac:e2:d7:8c:cf:c6:86:
         9a:e6:d9:c6:60:57:3a:2d:cb:d2:86:e0:81:ad:c5:c4:fa:bf:
         73:b5:eb:d6:25:33:d6:45:9e:02:83:d1:21:4f:99:24:80:35:
         4e:a8:2a:a5:77:a3:fd:4f:9d:d3:04:d4:0e:20:7c:ed:18:25:
         c1:a0:2a:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUF91i+v7FN6B037Nlp/3wou0VHFcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDI0MTIxWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZjdjYWQyODlkNzk1MDQ0M2Y1NDAxOTdiNDg3MzlkNTM5
NmExN2NiMGUyYmI4MmNiNWZjMzExMmJkNzAxMTdjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbdIGjTWeWhVLGEzMkencLp3ixy8GNfQUX39MxXNxp4bhp
R4yianFXgkBCZ1RRwquVy9dnKYaoRU890cm3/sAH1NgiG+BSYkFkVje5lYfomnk3
PQNQ6rUk60jOoG8qN2L1K4oMi91yFLOl0Jmq5X87mNRn6cW1F7yik316W0R1sWA0
f/MgWXjz/12oPafukjRst6ThDIPgAdTGsYVv09+A/ijWuRIaAhWvIHRUgUe0JHj0
1n+QS+E89HeikyKgWRrZx/KHpJg8osicvhOZ+UJw227UKSiiE2DK8Kv5LblPdCQj
AlWDXf4p2PgTyiShvuoZDMonkarMgVM87fWpcDttAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIy/X3S/O5jzftbpCPIX/WhN1poowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc2OTRiZGZjLTk1OTItNGRhYy05ZDEyLWYyYzdkNmY4YWY2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI21jAwDQYJKoZIhvcNAQELBQADggEBACcD3sL8qsIdmdkl339P++UaEgan
wHjxQePxQh1hEOzTmZUAOnvkNzeucyKTLZybg59BHDNw+pU3pYGXIN2EI8ivnJSi
lY3NDhqiDkbDrRwfOsm/2+ALZvSIaInmUjjExM0qy2vfwfdFVe46ekgqfuvIgLUE
qsbznP/1G0ie7I6a9EE5E/nqvxH3mGiLpYr6Ly32wA3tyH3BayRoEN7YmcnBg9iM
qU/sEQMBY5eE+cBrWuM+rui5zNXGgwDbxYiXrOLXjM/Ghprm2cZgVzoty9KG4IGt
xcT6v3O169YlM9ZFngKD0SFPmSSANU6oKqV3o/1PndME1A4gfO0YJcGgKkM=
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:43:46 2026 by rpki-client