Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa
File:                     ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa (raw, json)
Hash identifier:          aPf3SRmrcD/pB1WRgCuNh/1omKfLTNOrQ6AQc1Y4+jA=
Subject key identifier:   5D:CD:D7:7A:95:94:75:33:CF:6A:FA:EF:C5:8A:84:BE:15:B0:2B:46
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       11111AAEA2A8B38D0FDCC72A4AE9A44C1BF43EE6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa
Signing time:             Tue 04 Aug 2026 02:40:06 +0000
ROA not before:           Tue 04 Aug 2026 02:40:06 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.197.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:1a:ae:a2:a8:b3:8d:0f:dc:c7:2a:4a:e9:a4:4c:1b:f4:3e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  4 02:40:06 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=1146c5f6f7f95d305a63c9ffd3c60f83a6186a114eeb3e989f6830614003a43d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:77:ce:0e:1f:10:08:ab:d1:7e:9a:1e:9f:
                    c4:1f:a4:be:65:74:2f:ef:60:19:e1:8b:eb:81:fd:
                    68:5e:39:31:06:ae:01:eb:8f:bf:f8:41:64:a4:06:
                    f6:5e:2f:1c:04:e4:a0:b0:ac:da:7e:db:7e:fe:de:
                    bf:27:a5:f2:ed:24:79:63:dd:17:71:84:d3:9d:23:
                    29:7d:f3:b7:f1:44:af:62:16:97:23:04:40:7a:90:
                    ac:77:d0:60:56:3e:a6:fd:f5:7e:93:c1:7c:5e:7a:
                    69:91:a2:4b:43:4e:01:1a:38:7c:f8:67:24:f5:4f:
                    1e:0f:9f:b4:1d:d3:c6:3c:21:6a:5d:37:51:0f:0f:
                    90:1e:1d:1a:4e:1d:24:dd:78:9f:48:c4:06:8b:f0:
                    da:69:7d:89:2e:61:85:7a:04:cc:96:68:f7:94:da:
                    c4:30:65:e4:56:2c:2a:d8:03:39:a1:ec:65:c9:38:
                    51:09:38:0c:71:f7:2e:e3:2a:65:26:d3:74:a2:b3:
                    ba:37:ef:47:cb:a6:73:4a:77:d5:db:9e:ea:67:40:
                    3b:97:48:f8:ba:75:a2:cf:58:64:30:12:3f:e7:b7:
                    8b:72:30:58:e7:aa:70:fe:0d:04:58:3d:9d:f9:63:
                    9d:0f:d6:c5:ed:a5:44:80:5e:9b:cc:24:a2:97:20:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:D7:7A:95:94:75:33:CF:6A:FA:EF:C5:8A:84:BE:15:B0:2B:46
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae67e5e6-bedf-4a62-bfbc-987b7fca6fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.197.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:73:86:f4:98:9e:d8:cf:18:fd:66:78:2c:42:d9:9d:8a:
         f1:7a:94:15:b0:65:a3:74:21:47:b0:77:0e:46:61:81:01:fd:
         db:41:ff:8f:38:84:33:86:28:17:05:06:7d:24:a6:e9:0d:d7:
         c6:c9:7a:44:e9:96:c6:19:1b:c6:34:80:03:64:0e:92:de:6b:
         a1:d9:44:2e:ad:26:e4:6b:72:70:94:e8:86:53:36:a6:52:21:
         0d:db:86:b3:f1:1f:fd:8d:3c:e7:dd:e9:5c:89:87:d7:e4:46:
         dc:fe:97:25:d7:06:02:97:de:ee:46:c0:0e:4e:1f:6b:24:3a:
         32:55:bb:e4:d7:f3:6d:fa:b5:09:e9:c7:0a:57:2a:70:0e:de:
         39:be:2e:f2:fc:42:f7:18:51:5c:e3:dd:80:80:7a:cb:3a:be:
         71:a3:b7:62:ca:21:0f:ff:db:4b:df:96:55:c9:ce:6f:79:eb:
         f3:72:eb:2c:51:52:92:c1:ef:25:5e:53:af:b6:1e:23:0e:f4:
         c8:0b:f9:a3:be:3d:35:4a:af:e2:fa:8b:5d:59:e3:42:2e:18:
         c7:0b:dc:6c:43:f1:bc:9f:fa:ae:3c:0a:8f:55:0b:4f:d2:3a:
         85:3b:1e:af:c8:a8:81:36:df:35:23:ae:4c:84:25:36:65:9b:
         86:c9:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:40:40 2026 by rpki-client