Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa
File:                     7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa (raw, json)
Hash identifier:          x5MqyeMnbGl2SB5bLgYck029iVW4y1fdYxYw7kILi58=
Subject key identifier:   A5:1D:00:EE:5F:2C:4C:07:FB:AB:41:0B:27:1C:71:F6:1E:20:FA:BB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       26BE551309CAE2C89301986678A4BE8BBFE6F320
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa
Signing time:             Thu 15 Oct 2026 01:50:56 +0000
ROA not before:           Thu 15 Oct 2026 01:50:56 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.214.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:55:13:09:ca:e2:c8:93:01:98:66:78:a4:be:8b:bf:e6:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 15 01:50:56 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=8e9adc76be3259f2cceb4541ceb52b50be2719e8acc91ecbcfe81163aef0de59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:bc:1b:db:26:bd:bf:00:d1:1b:ba:07:21:
                    d4:c1:f9:9a:f5:21:a8:b6:5d:14:7d:f1:e0:a5:29:
                    b4:b7:77:4b:3b:0f:91:81:80:27:76:fb:31:ff:7a:
                    d7:4c:e6:91:4f:ca:d1:67:86:3c:17:e2:be:fd:e0:
                    03:9b:7e:28:08:de:3b:57:e8:bf:a8:8b:ad:09:9b:
                    bd:04:77:de:57:3b:a2:51:88:45:10:46:13:c0:61:
                    eb:a5:c6:9b:fd:0a:56:8d:c1:07:6a:39:53:56:ad:
                    9c:8b:14:f6:ab:9d:7e:89:be:aa:c7:85:b6:f2:b7:
                    08:cd:99:eb:bf:46:06:df:3d:a8:56:44:b8:a3:92:
                    32:97:ea:ff:97:d9:cd:64:24:c0:1a:a2:9c:bd:df:
                    75:1f:ec:10:39:43:d2:be:1f:37:9e:8a:58:06:36:
                    32:39:fb:9f:3f:8a:91:b1:0a:1c:b4:3f:42:79:4d:
                    72:8a:a9:53:83:e9:2a:59:bf:a9:ee:1a:c3:d3:b8:
                    6a:49:2d:75:fe:52:14:2d:fc:a1:19:3e:2a:51:75:
                    c5:49:fa:e1:df:9a:da:f3:84:b4:4f:f2:80:2a:0d:
                    ee:11:57:0d:30:be:ef:fd:91:a4:1c:b9:f9:ad:52:
                    06:ae:75:28:e9:f1:dd:3e:a4:a8:47:b4:b2:fb:39:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:00:EE:5F:2C:4C:07:FB:AB:41:0B:27:1C:71:F6:1E:20:FA:BB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bc2d2f7-b790-4846-bad9-b0fa648c2e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:e0:a4:31:db:96:3c:78:eb:08:bb:56:97:eb:1e:8c:4a:
         ee:ed:f7:ce:8a:f1:0e:a7:07:fa:28:56:ad:96:eb:d3:78:1a:
         db:5f:08:70:87:e3:a2:e1:58:19:f4:2f:56:1b:64:7b:d2:e5:
         ed:58:ab:d3:10:67:dc:4a:91:e3:ba:69:35:c2:7a:4b:e8:e6:
         9a:6b:19:e7:ee:1d:c8:1b:1f:e9:bf:df:d7:15:66:b6:94:e7:
         33:92:9a:1d:3f:01:a0:8e:af:f2:ed:e2:cc:c3:00:fc:5c:96:
         78:75:b7:71:a9:09:50:88:c3:9f:c5:0d:68:46:78:bc:31:88:
         a5:70:27:e6:6f:fb:7d:8b:cc:ac:02:0e:5a:bb:87:29:8e:ff:
         36:89:3b:ca:5d:21:8c:05:4a:53:bd:b7:da:ad:1d:f9:b8:0d:
         00:09:1e:20:55:fa:c6:00:0d:28:76:ec:84:85:5b:94:73:62:
         a7:80:84:81:82:23:97:d6:86:55:e8:a9:8a:86:27:44:2b:99:
         b6:58:b5:3f:90:3d:af:ba:be:4b:7d:05:44:9b:b6:13:52:4b:
         b1:be:7d:73:d9:0f:4e:a0:b9:a4:4d:6d:ea:41:c5:d3:ce:42:
         44:59:34:96:f2:63:1c:f5:4e:4f:e1:13:44:d9:f6:c5:ab:04:
         05:7b:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:09:42 2026 by rpki-client