Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa
File:                     87044d36-2d64-4c6b-86fc-d61e95c35150.roa (raw, json)
Hash identifier:          0A7HVSdoudKniH6Ses/JEqihsVEya/bEQPcG0t0Gx9M=
Subject key identifier:   55:F7:75:3D:0A:74:99:BE:3F:BD:76:C0:61:DA:72:21:99:15:CA:0A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       71F1FEAF92DFE228A4C815373EDF9AEBBABAD318
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa
Signing time:             Mon 03 Aug 2026 03:20:04 +0000
ROA not before:           Mon 03 Aug 2026 03:20:04 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.195.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f1:fe:af:92:df:e2:28:a4:c8:15:37:3e:df:9a:eb:ba:ba:d3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:20:04 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=e086bde769111ac359f1544f11d7af2907d2234731e4726d664f62e9b075299f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:2e:89:e7:2d:23:66:36:dc:db:73:14:82:
                    8c:5c:24:00:27:81:0f:80:7c:3c:f8:08:42:ed:61:
                    73:ac:04:29:fa:97:3d:0b:9d:fd:eb:a8:41:e7:b2:
                    a6:78:cc:d3:78:8c:91:3d:65:2b:7f:14:22:56:9f:
                    5b:72:2a:7f:03:6d:d1:ac:db:f2:e6:35:02:6a:ee:
                    d2:e6:20:78:30:e0:0e:13:93:75:79:18:67:9b:f0:
                    5c:1f:4c:9a:65:31:e0:6c:60:2b:c3:04:09:47:c7:
                    d7:ed:24:e6:e0:ba:ce:e9:4a:89:2e:b4:01:93:72:
                    72:3a:ba:64:a0:db:12:13:ff:a8:17:d5:92:e8:6c:
                    d5:cc:b2:24:f6:53:c8:0d:43:dd:b3:ce:c2:65:d0:
                    6f:32:79:ac:bb:e3:6c:6b:97:b8:55:4a:81:48:55:
                    a6:89:8c:78:94:31:78:f0:a3:ce:dd:ef:5e:5a:da:
                    f0:0a:f0:8c:6f:ed:e5:26:b9:a3:32:64:08:47:02:
                    b8:eb:d0:ee:83:36:33:74:f9:7e:d5:9e:a6:48:54:
                    23:11:83:e5:2d:5b:08:f5:0f:12:47:fb:4c:99:85:
                    10:0c:1e:ea:b8:34:36:a3:c0:2f:10:18:8d:2f:70:
                    25:93:d3:85:94:31:63:bf:d3:6b:70:8f:84:e4:a6:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F7:75:3D:0A:74:99:BE:3F:BD:76:C0:61:DA:72:21:99:15:CA:0A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87044d36-2d64-4c6b-86fc-d61e95c35150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.195.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:d1:f4:e5:67:98:4f:0d:b2:62:78:3f:9a:a0:af:71:b4:
         1a:68:61:0f:39:f0:54:5a:3d:fc:8d:9f:a6:fd:1a:19:61:33:
         bc:b7:e7:cb:ca:e4:67:a0:f3:bf:64:32:49:48:7d:30:40:62:
         7d:9e:44:53:01:95:49:9d:ff:cb:e6:b6:be:65:e9:ba:a5:6d:
         b1:2f:14:57:6c:c7:ed:5d:77:30:46:72:8f:88:b1:56:ef:d0:
         1c:90:1e:57:ef:9f:d4:34:8b:c1:cd:cc:b9:d0:a4:58:6a:c5:
         1d:96:9c:9b:b9:a6:73:23:c1:71:88:10:b8:59:6a:68:d7:d1:
         f0:ef:e1:b7:80:cf:3c:e9:dc:07:a6:fa:f6:ba:a6:d4:36:eb:
         54:c9:e5:17:61:bc:f1:50:1b:cc:f1:7c:4d:9a:ec:0e:ec:d2:
         7e:92:ee:05:eb:26:6e:8c:2e:31:5f:3e:fe:09:07:c7:6c:4b:
         93:12:c6:bb:0f:c5:14:8e:c3:a0:62:c0:8a:30:f5:cc:78:40:
         28:6b:34:83:a6:6e:bf:92:a7:de:c2:78:7b:0a:25:d0:79:ea:
         71:5c:fb:23:89:89:0c:78:f3:e0:63:67:57:0f:fc:d2:51:fc:
         d3:6f:73:22:22:6e:cf:a9:e1:54:d2:3b:1e:4e:a4:83:8b:06:
         4e:ad:a9:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcfH+r5Lf4iikyBU3Pt+a67q60xgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMyMDA0WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDg2YmRlNzY5MTExYWMzNTlmMTU0NGYxMWQ3YWYyOTA3
ZDIyMzQ3MzFlNDcyNmQ2NjRmNjJlOWIwNzUyOTlmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk1y6J5y0jZjbc23MUgoxcJAAngQ+AfDz4CELtYXOsBCn6
lz0Lnf3rqEHnsqZ4zNN4jJE9ZSt/FCJWn1tyKn8DbdGs2/LmNQJq7tLmIHgw4A4T
k3V5GGeb8FwfTJplMeBsYCvDBAlHx9ftJObgus7pSokutAGTcnI6umSg2xIT/6gX
1ZLobNXMsiT2U8gNQ92zzsJl0G8yeay742xrl7hVSoFIVaaJjHiUMXjwo87d715a
2vAK8Ixv7eUmuaMyZAhHArjr0O6DNjN0+X7VnqZIVCMRg+UtWwj1DxJH+0yZhRAM
Huq4NDajwC8QGI0vcCWT04WUMWO/02twj4Tkpkc9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVfd1PQp0mb4/vXbAYdpyIZkVygowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzg3MDQ0ZDM2LTJkNjQtNGM2Yi04NmZjLWQ2MWU5NWMzNTE1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ2w0AwDQYJKoZIhvcNAQELBQADggEBAFSz0fTlZ5hPDbJieD+aoK9xtBpo
YQ858FRaPfyNn6b9GhlhM7y358vK5Geg879kMklIfTBAYn2eRFMBlUmd/8vmtr5l
6bqlbbEvFFdsx+1ddzBGco+IsVbv0ByQHlfvn9Q0i8HNzLnQpFhqxR2WnJu5pnMj
wXGIELhZamjX0fDv4beAzzzp3Aem+va6ptQ261TJ5RdhvPFQG8zxfE2a7A7s0n6S
7gXrJm6MLjFfPv4JB8dsS5MSxrsPxRSOw6BiwIow9cx4QChrNIOmbr+Sp97CeHsK
JdB56nFc+yOJiQx48+BjZ1cP/NJR/NNvcyIibs+p4VTSOx5OpIOLBk6tqTc=
-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:20 2026 by rpki-client