Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa
File:                     bdffb411-66a4-449f-a139-b67509e160f8.roa (raw, json)
Hash identifier:          F2wb/vgAxZaBvpQq45YYc3j3sy20VrdBO3CgicSF12Q=
Subject key identifier:   A9:03:07:9D:CA:37:88:83:11:DB:7A:AE:C9:48:DC:6F:64:72:BB:7B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4EA905EB41B1E7F2E8FE73189DD2EF49123DAF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa
Signing time:             Tue 24 Feb 2026 03:21:22 +0000
ROA not before:           Tue 24 Feb 2026 03:21:22 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.235.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a9:05:eb:41:b1:e7:f2:e8:fe:73:18:9d:d2:ef:49:12:3d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 24 03:21:22 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=a88685711caa99e564cfc48674b1fbc26b48c9a7ff06bd2e99c5bd6b6244e684, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:94:da:83:87:6e:02:f0:72:d6:ff:48:50:
                    25:f4:b7:72:da:1b:4a:77:b6:62:79:35:c5:d9:33:
                    f4:79:c8:a0:45:f9:a9:da:95:1f:cd:c8:49:10:a8:
                    9f:5c:c0:ac:42:4c:72:4c:41:b8:dc:69:3d:9b:a0:
                    fb:4c:3a:6e:fd:11:88:28:a3:ff:5d:69:af:d4:40:
                    6c:91:55:d2:fd:ba:65:e5:47:cc:0e:73:16:0b:f3:
                    eb:d4:5b:27:8b:01:ba:73:fc:82:fc:97:92:83:0d:
                    09:93:6b:3f:12:fa:45:89:77:8f:bd:bc:75:5a:ea:
                    78:69:2f:02:14:d8:40:bd:20:2a:ea:8a:26:e3:49:
                    25:aa:f7:8a:33:83:e6:60:ab:20:f6:aa:a8:4b:b3:
                    22:a8:a8:1c:69:09:0d:b4:2a:57:08:25:c1:84:bb:
                    d5:2c:b7:ac:63:34:6b:d4:3f:01:71:d2:10:72:ce:
                    b9:13:b4:8e:8f:f7:70:aa:7a:dc:f6:32:1c:c3:65:
                    28:97:1a:31:0e:59:d4:c9:0d:18:59:63:e1:0b:1a:
                    da:6c:05:0b:6d:f7:7e:a5:9b:76:6a:a0:74:25:81:
                    b7:02:66:9e:39:39:8b:45:87:63:0d:45:5a:46:8d:
                    8f:2f:d2:7d:6c:1c:15:c4:b0:e8:34:05:d2:d1:2d:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:07:9D:CA:37:88:83:11:DB:7A:AE:C9:48:DC:6F:64:72:BB:7B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdffb411-66a4-449f-a139-b67509e160f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.235.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:36:dc:4c:cd:1f:e9:59:01:05:ed:2b:f5:0f:e9:62:f2:
         55:0f:8b:2e:0f:28:48:62:4c:02:59:db:80:63:b6:40:97:b5:
         e5:46:8a:57:6a:01:61:2d:04:71:60:9c:4c:0b:12:0d:be:7f:
         55:f1:ec:fa:34:bf:e5:7b:66:d8:ea:99:a2:5d:73:0e:e4:ff:
         f8:ac:66:b8:f3:c7:c1:d9:4b:2a:1d:ef:bc:e7:72:3e:ce:d3:
         04:3f:01:02:04:c6:15:db:74:6b:40:f7:56:8c:4f:48:b3:62:
         9a:9d:84:8c:b1:15:68:d4:cd:7e:d7:79:f7:32:18:84:a0:e1:
         fa:01:9e:34:c3:7b:6b:d1:a7:af:ed:8d:b5:1f:33:79:71:af:
         05:02:69:6d:c8:eb:6b:84:3a:87:46:ff:46:77:c5:f2:aa:63:
         c0:3d:59:6e:08:46:eb:63:40:f2:a0:9c:ba:41:c3:1b:49:33:
         e9:3c:12:00:d9:54:81:29:f8:06:dd:de:ed:de:c5:5c:41:18:
         29:97:c6:fe:2b:74:96:76:23:53:03:62:61:63:69:37:3b:1f:
         1e:0e:1d:80:d8:60:c4:b3:fe:51:1b:c4:2d:eb:33:fc:e5:c2:
         66:26:6b:37:ba:3d:06:47:82:c5:fd:d5:3a:42:26:05:fb:dc:
         ef:fd:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:07:24 2026 by rpki-client