Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa
File:                     aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa (raw, json)
Hash identifier:          rYoNbptXGTWP+7mf90A/DvuBM8UdHfD63aj1RJrk3ew=
Subject key identifier:   15:03:B2:9C:66:B8:18:79:CE:56:3E:1E:15:77:0E:C7:9F:BD:9B:AB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D0B4D50312ABF087267443F762C0A5729E65503
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa
Signing time:             Mon 27 Jul 2026 01:40:49 +0000
ROA not before:           Mon 27 Jul 2026 01:40:49 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.215.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0b:4d:50:31:2a:bf:08:72:67:44:3f:76:2c:0a:57:29:e6:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 27 01:40:49 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b5291f2f16b2f742a2e7b3ac3e19ba7a65a819e5e462b16b3cb386d88013147b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:57:66:03:9f:45:e7:6e:b5:24:27:63:aa:
                    02:69:0f:65:ee:65:42:fc:ed:4c:d5:21:24:bc:9d:
                    15:23:1e:22:1b:73:46:0f:4a:33:16:36:48:1c:65:
                    b8:22:6e:66:f8:13:6f:84:88:e6:0b:72:46:ce:e1:
                    65:4a:c5:bb:80:cf:56:99:5b:25:82:8a:52:59:16:
                    3b:13:14:55:2f:13:9d:fd:ff:1b:90:53:55:63:ca:
                    46:13:cc:54:aa:e3:b9:13:5d:65:25:55:ca:9e:83:
                    50:be:5a:5b:56:f9:a9:c7:d0:fc:c9:c1:76:82:60:
                    b7:6e:ea:0a:75:70:e9:80:7e:49:02:5a:39:09:65:
                    f6:9e:a2:e9:a4:c7:0a:b4:db:2e:6b:9c:7e:3e:ef:
                    5c:9f:d6:a5:d7:31:84:da:94:92:d3:4f:b9:79:fe:
                    6b:56:61:f1:1a:f5:61:b2:1d:2e:79:37:c6:77:a7:
                    9e:dd:8b:44:4d:5c:c9:34:e3:8a:bc:02:60:c9:0a:
                    0d:08:bd:93:e7:a7:fd:cb:5a:7a:69:0b:44:98:92:
                    f6:d8:ae:d1:80:02:dc:b3:69:ab:53:da:19:56:ed:
                    b4:5e:cd:34:c1:58:b5:fb:99:20:12:db:78:da:ef:
                    97:6c:e2:6f:6a:f2:73:45:47:62:a3:61:40:3d:f6:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:B2:9C:66:B8:18:79:CE:56:3E:1E:15:77:0E:C7:9F:BD:9B:AB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:20:c1:d0:92:fa:c5:37:a1:d8:55:1c:41:7c:be:82:78:9c:
         ee:f8:a6:86:a1:cb:ff:2a:ff:13:ac:98:0b:43:2a:17:e8:41:
         5c:59:0e:f2:4f:4e:e4:e4:f9:c2:67:d2:c4:3c:fd:7a:90:7d:
         8e:4a:d7:8c:28:e0:dd:77:00:20:8e:5f:46:6a:b3:3f:16:e2:
         06:2f:b8:d7:77:5f:0e:83:d0:e2:2f:13:e5:a0:82:31:a4:a4:
         d5:3c:11:af:0d:25:a9:30:ee:6d:bf:39:b5:03:d8:89:81:c0:
         98:ab:a3:f4:6f:ff:b8:f7:6e:da:6f:83:d7:7e:30:09:4f:c1:
         0e:3d:5b:79:d3:08:de:1b:56:bb:e5:70:02:fb:a3:07:56:22:
         e0:57:1a:22:3f:d0:58:3a:49:28:f2:83:29:5c:c0:69:2f:44:
         cc:fa:8b:fc:e7:73:51:5e:20:a4:71:07:56:21:54:fd:6d:c0:
         cc:ef:98:b2:96:92:3b:6d:13:a9:97:a3:0c:e2:2d:fb:de:9e:
         f9:b9:9d:e3:e4:62:43:8b:0e:d9:f5:00:d2:2f:e9:3c:bc:76:
         bf:64:c3:5e:7c:6b:95:35:0b:bb:b7:83:9b:13:a8:8b:09:8c:
         c0:41:f9:6f:ae:ed:0e:64:b6:62:dc:f7:6f:ee:d4:a9:c6:23:
         80:85:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:41 2026 by rpki-client