Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa
File:                     a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa (raw, json)
Hash identifier:          t6zwe5Po2/TZUtKLWpig5trdz+m7lXlCsBThMXnWDCI=
Subject key identifier:   89:24:98:33:23:38:4A:B0:FE:C1:E5:9B:32:23:3D:87:85:71:D9:B4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       218A43879F044970B6DB0EAB9E61FD36EA1DF91B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa
Signing time:             Mon 27 Jul 2026 02:31:00 +0000
ROA not before:           Mon 27 Jul 2026 02:31:00 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.214.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8a:43:87:9f:04:49:70:b6:db:0e:ab:9e:61:fd:36:ea:1d:f9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 02:31:00 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=64c7570c9d4d8bfe1ae3157bb2b8054d222a4bd6d62e677a76a2c0ab77d662c2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:2f:cc:72:29:46:76:35:f5:67:3c:6a:f6:
                    7a:3c:4a:f7:c0:b8:9f:75:6c:4b:84:e6:25:d3:28:
                    9f:f8:7e:79:7d:7d:ba:ce:f2:bf:d9:fa:47:27:6e:
                    95:71:f3:8c:cd:71:0f:77:4a:e0:f6:89:3f:56:50:
                    8e:6d:34:30:c4:7e:79:62:b4:4f:18:8d:28:57:5a:
                    44:dd:5d:11:ad:25:33:40:12:43:aa:6f:40:6b:3a:
                    68:9d:ab:48:60:6a:37:4d:c1:4c:64:ce:ab:08:c0:
                    31:cd:32:e5:5e:a4:af:dd:0b:5b:85:9b:23:d6:ef:
                    ea:4a:11:2e:08:d6:60:85:03:14:f5:71:59:62:cb:
                    ce:a5:69:09:99:ed:d2:3b:81:1f:90:22:13:3d:d3:
                    e8:0c:b7:a1:8e:57:22:f2:ce:49:e3:90:75:63:49:
                    bb:1e:b2:ad:a2:9d:35:01:ef:74:0f:a2:06:65:b1:
                    4a:7b:70:37:6e:b9:16:a8:ec:d5:a4:f5:1a:70:1e:
                    c9:47:5a:d6:20:44:ac:9c:27:47:ee:80:1b:b0:5e:
                    95:33:be:bd:5b:c3:ea:d8:9b:61:3c:4c:14:3e:a9:
                    5c:5e:ed:60:a4:fa:f9:54:b5:3b:09:54:80:78:df:
                    0a:dd:f0:6e:64:e5:7e:c0:f8:23:ff:79:64:a1:1d:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:24:98:33:23:38:4A:B0:FE:C1:E5:9B:32:23:3D:87:85:71:D9:B4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:be:69:a7:16:9e:4b:18:1b:f4:7e:ca:9d:90:6b:38:3b:
         c6:bd:b6:70:89:31:f5:bb:9c:ac:95:13:46:36:59:fe:1c:07:
         e2:e1:3f:9c:89:4e:02:4d:a8:85:9e:95:4c:a1:a6:84:a9:50:
         e0:5b:5d:d8:d2:cf:bc:90:47:4f:28:c4:57:6d:32:c9:61:ce:
         04:d5:3d:24:cc:44:02:57:29:93:61:34:c4:6f:89:e1:e7:70:
         b4:e1:cb:83:b5:17:b3:4b:10:1d:0f:d1:88:ad:e9:3e:ee:ec:
         72:4a:9a:73:dc:27:de:99:41:16:52:a0:55:64:89:b1:bb:44:
         5c:84:d8:02:ea:94:a8:50:52:0b:39:71:f5:64:dd:8b:66:96:
         5c:4e:16:fe:af:25:4c:f0:3d:ac:7f:b0:26:58:78:53:8c:d4:
         89:05:84:4e:54:19:12:1c:ce:e8:3a:31:16:c1:ae:77:55:a8:
         bb:87:73:ee:4f:25:a8:ea:82:b5:a1:f8:8d:69:ed:e2:c7:f6:
         64:a2:3f:5b:69:39:95:72:61:a1:ad:64:7f:72:31:6e:f0:25:
         87:8f:c4:12:a5:90:3c:11:25:8b:ea:f8:c9:77:fd:45:5d:56:
         8d:7a:ad:9c:e3:ce:ae:e4:90:49:dd:4c:b4:78:dd:3b:d2:09:
         93:c4:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:39:40 2026 by rpki-client