Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa
File:                     7c0db66f-b1b7-41ba-b26b-712811ca2047.roa (raw, json)
Hash identifier:          zVBHzVdO6ulDO/rXQCAVeii7B7QMLcSGhUKCJZDKJf8=
Subject key identifier:   9A:26:25:0B:03:B9:3B:68:47:52:77:CB:57:9E:63:77:B0:C9:73:7B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       59F9606F77219E0B864FE61AB0D0367341E8BEA1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa
Signing time:             Fri 07 Aug 2026 02:20:12 +0000
ROA not before:           Fri 07 Aug 2026 02:20:12 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:60:6f:77:21:9e:0b:86:4f:e6:1a:b0:d0:36:73:41:e8:be:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:20:12 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=c91d35795edd9a92d928a29d0f126032070d9ff40794060a284136b9942777e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3c:05:cf:b9:83:22:a6:8a:6c:3b:77:66:bb:
                    39:fe:c1:a7:24:93:1f:5e:be:55:da:87:3e:20:96:
                    d5:d9:4e:93:31:f7:0d:26:b7:01:38:82:92:d1:db:
                    aa:de:4c:c7:09:54:6f:01:11:46:cb:b9:88:e2:6d:
                    ba:61:f0:64:79:d8:3e:5e:6e:3a:6c:1f:67:ab:77:
                    39:03:a8:7d:f6:a7:cd:af:b7:de:44:2c:d3:ac:14:
                    54:1f:d0:42:1d:ec:aa:bb:62:03:ef:28:4d:f0:b6:
                    ab:b9:12:00:b8:85:6f:68:c1:37:8a:ad:f9:05:0e:
                    86:e4:ce:df:5e:c1:13:2d:94:0f:c0:00:cf:f9:6c:
                    eb:3e:6d:90:55:95:ff:e4:ab:18:44:83:4c:6a:00:
                    63:7a:8e:47:7a:ff:f8:51:88:b9:6c:64:b9:5a:3c:
                    11:98:6b:33:79:84:0c:31:dd:46:b9:40:a0:b9:d9:
                    dd:8d:07:eb:34:b3:12:d8:98:9f:17:6b:c1:14:7d:
                    34:2a:50:40:a8:8b:64:1c:fe:ca:ec:53:e7:c5:19:
                    b1:85:20:8a:ad:4d:5e:eb:4c:2c:f6:f1:86:e2:85:
                    7b:ca:b3:a7:ee:7a:21:aa:d7:97:91:a9:fa:ab:37:
                    9b:44:08:88:04:33:17:41:8c:82:a9:e5:7c:97:84:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:25:0B:03:B9:3B:68:47:52:77:CB:57:9E:63:77:B0:C9:73:7B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:b3:03:35:a1:5b:02:cc:fe:56:a6:36:8a:6c:c8:6a:82:
         a8:77:2a:60:4a:89:a5:b7:5e:84:03:5a:8e:9d:29:cb:e2:57:
         e7:5d:4c:c8:6d:9b:99:26:03:d5:44:4e:05:e5:31:54:e0:3b:
         a7:be:ce:b8:f8:68:e3:42:78:12:34:e7:ea:7b:5c:53:3b:1c:
         4e:23:45:5a:fa:f8:8b:93:d6:30:52:11:bc:32:40:e2:61:91:
         be:18:7a:e7:59:c3:00:91:b2:f7:68:ca:ff:e4:47:d9:dd:8e:
         f5:22:b2:e4:9c:67:b2:3f:20:aa:76:4b:3a:04:85:49:3e:9b:
         da:1f:c4:0e:51:3d:24:fe:60:bc:d4:15:32:32:e1:93:0c:a2:
         3d:86:8d:bb:db:fd:f2:62:b8:d2:d9:1a:1b:e8:53:8c:74:4d:
         dc:14:18:cc:63:8f:0e:77:6a:e2:c0:ca:a8:77:82:f2:f7:4d:
         15:10:0a:b7:c0:f4:22:aa:17:ee:b9:9f:65:71:ac:f9:12:6b:
         f7:c6:6d:57:b4:9b:c7:46:49:05:72:65:6a:c1:5b:5b:44:de:
         6e:b5:bc:5e:35:e6:96:73:c8:6e:2c:04:10:71:80:e9:8f:8f:
         f1:82:ae:36:77:4d:b9:0a:f9:6b:57:25:1c:7b:83:05:06:cb:
         60:35:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:04:50 2026 by rpki-client