Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
File:                     b56fba09-b4fa-43df-b98b-b19d88820996.roa (raw, json)
Hash identifier:          jQnd8CM/SVuUIHwKQ9OPG61xaRsSnizVNUyCsdcnQio=
Subject key identifier:   CC:75:D7:E7:EE:8C:A3:80:DE:77:ED:0B:0E:B5:AD:B3:45:D5:F6:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1D0BAB09297D6789D9397236F276CAA904E6B482
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
Signing time:             Thu 14 May 2026 01:11:01 +0000
ROA not before:           Thu 14 May 2026 01:11:01 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.124.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0b:ab:09:29:7d:67:89:d9:39:72:36:f2:76:ca:a9:04:e6:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 14 01:11:01 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=bc79775f3eb1e37470a1cba123a8a067c56a12c4dac5d0c7ba78123c79061e54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:09:46:93:84:63:55:0e:49:d0:f3:f7:22:
                    c5:48:31:5f:6f:6a:d9:3a:c8:1e:6c:52:89:8b:19:
                    c2:8d:7d:da:fd:af:8c:db:fd:e5:89:aa:a6:e2:8b:
                    c5:e0:7f:d5:2b:2e:0e:8d:a8:aa:c3:b1:1f:35:5a:
                    92:e1:bb:8c:3e:fe:cf:18:9b:03:ba:9e:6e:e9:2e:
                    a2:7b:7c:ad:ac:b2:e4:5b:51:3a:e0:f9:d1:32:25:
                    21:63:ca:0c:9f:94:c5:bc:20:5a:f6:f8:cb:5a:89:
                    6e:07:4d:bb:74:b5:e3:2b:dd:3f:0d:f8:e1:cf:e9:
                    9e:9b:97:84:d4:38:4b:74:59:2b:ec:20:d9:a0:4a:
                    a9:c8:9f:05:f5:93:19:fa:c6:ab:b4:b9:06:5f:ec:
                    df:c8:22:63:e5:57:12:10:8d:be:c0:6b:ab:9a:6e:
                    18:a5:9f:88:8f:47:c4:b6:81:3a:ff:d1:de:32:0a:
                    96:24:a7:75:b7:19:19:ae:e7:96:2a:d1:5c:08:1e:
                    7f:9f:9f:dc:ab:0b:5e:95:f8:39:2a:ea:44:6a:99:
                    26:ca:90:7b:65:ee:c1:c5:61:b5:29:18:85:a7:9a:
                    14:37:93:b7:d4:e6:50:36:51:e7:81:9f:b4:66:ca:
                    b3:28:b5:32:94:e1:f0:b4:bf:63:a8:82:16:87:de:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:75:D7:E7:EE:8C:A3:80:DE:77:ED:0B:0E:B5:AD:B3:45:D5:F6:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:0d:57:40:29:5b:9a:4b:81:27:47:7f:21:2b:ca:62:c9:
         25:11:48:fd:24:e1:79:cc:e6:d6:72:28:fa:8c:21:a1:71:46:
         96:17:31:00:32:4d:cf:cf:27:ee:d5:3c:5d:40:d3:02:1d:b7:
         b8:a9:f9:b9:d0:39:f4:f0:f3:c1:df:b5:a3:65:f4:75:80:97:
         29:4f:d5:da:57:49:dc:32:87:36:53:6d:91:f6:b8:a5:eb:85:
         68:5c:20:b2:3f:16:72:43:c5:23:98:b6:3f:4b:71:3c:3b:13:
         61:c1:7e:37:a4:be:00:c4:a0:bf:ee:f6:13:e4:b5:29:3e:f3:
         39:9b:11:92:7d:bf:e6:bb:35:6c:20:69:b9:c1:c4:60:b1:62:
         1c:f7:46:90:f7:6e:d5:25:86:be:7b:6a:10:f5:0a:c2:73:a6:
         6a:ba:f1:38:02:21:4c:b8:ce:e8:af:ae:b3:71:d5:97:ea:b1:
         96:79:73:e2:e9:3b:8a:20:43:fa:4f:07:01:37:61:f5:4e:3d:
         66:20:1a:16:49:08:ae:31:e1:f8:20:02:1f:0f:32:93:92:9c:
         05:b2:0b:a1:2c:31:7a:6b:a1:f6:1c:6b:71:08:a1:47:05:ea:
         e8:98:0a:6d:6f:65:5f:76:55:96:61:03:2c:99:71:50:dd:fd:
         fe:6a:af:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHQurCSl9Z4nZOXI28nbKqQTmtIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDExMTAxWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzc5Nzc1ZjNlYjFlMzc0NzBhMWNiYTEyM2E4YTA2N2M1
NmExMmM0ZGFjNWQwYzdiYTc4MTIzYzc5MDYxZTU0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJzglGk4RjVQ5J0PP3IsVIMV9vatk6yB5sUomLGcKNfdr9
r4zb/eWJqqbii8Xgf9UrLg6NqKrDsR81WpLhu4w+/s8YmwO6nm7pLqJ7fK2ssuRb
UTrg+dEyJSFjygyflMW8IFr2+MtaiW4HTbt0teMr3T8N+OHP6Z6bl4TUOEt0WSvs
INmgSqnInwX1kxn6xqu0uQZf7N/IImPlVxIQjb7Aa6uabhiln4iPR8S2gTr/0d4y
CpYkp3W3GRmu55Yq0VwIHn+fn9yrC16V+Dkq6kRqmSbKkHtl7sHFYbUpGIWnmhQ3
k7fU5lA2UeeBn7RmyrMotTKU4fC0v2OoghaH3rQBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzHXX5+6Mo4Ded+0LDrWts0XV9ucwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2I1NmZiYTA5LWI0ZmEtNDNkZi1iOThiLWIxOWQ4ODgyMDk5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0fOgwDQYJKoZIhvcNAQELBQADggEBAGbUDVdAKVuaS4EnR38hK8piySUR
SP0k4XnM5tZyKPqMIaFxRpYXMQAyTc/PJ+7VPF1A0wIdt7ip+bnQOfTw88HftaNl
9HWAlylP1dpXSdwyhzZTbZH2uKXrhWhcILI/FnJDxSOYtj9LcTw7E2HBfjekvgDE
oL/u9hPktSk+8zmbEZJ9v+a7NWwgabnBxGCxYhz3RpD3btUlhr57ahD1CsJzpmq6
8TgCIUy4zuivrrNx1ZfqsZZ5c+LpO4ogQ/pPBwE3YfVOPWYgGhZJCK4x4fggAh8P
MpOSnAWyC6EsMXprofYca3EIoUcF6uiYCm1vZV92VZZhAyyZcVDd/f5qr3w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:25 2026 by rpki-client