Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa
File:                     c74306aa-815f-437e-bc24-88cda4ef292e.roa (raw, json)
Hash identifier:          nSSqsaXX2spMFXbHiLKdod2M2mVvAJtnYI167kIBXhQ=
Subject key identifier:   16:2C:74:96:4C:B6:A2:34:6C:06:BF:2C:C2:51:1B:7F:97:BA:86:56
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D9DBFDEC1669D30F1CFF8AFD086CDBBD82ABF31
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa
Signing time:             Tue 04 Aug 2026 02:41:33 +0000
ROA not before:           Tue 04 Aug 2026 02:41:33 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.199.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:bf:de:c1:66:9d:30:f1:cf:f8:af:d0:86:cd:bb:d8:2a:bf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  4 02:41:33 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=43cbf2ed6afb6fe38af29d1b9a6f6831b8906d06f8dd82834fbe6a025c59718f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:7f:f1:e4:2c:b4:48:19:b5:95:29:ac:4f:
                    ce:dc:c1:27:59:f1:65:d3:cb:64:87:07:75:9a:47:
                    7e:db:94:87:42:73:8d:35:39:44:49:85:1b:eb:fd:
                    89:3b:4f:9f:2e:d2:4d:09:a2:cb:1c:7e:cf:5c:d9:
                    aa:4c:6e:82:66:46:eb:e7:71:22:39:7b:06:1f:fa:
                    49:6f:9f:39:e9:e8:99:e7:1f:30:01:8a:e4:f2:c5:
                    96:cc:35:cb:ea:a3:23:ff:be:c1:89:e4:3e:06:63:
                    41:64:b9:98:18:d0:4a:ac:59:6d:69:4c:46:7f:45:
                    eb:b7:74:fb:0f:3e:43:22:a9:40:0f:b3:09:74:d2:
                    1d:22:fa:14:33:a0:63:2c:e2:06:c2:3a:6d:59:bc:
                    46:e9:91:25:92:0f:e4:fa:92:8b:68:43:7a:45:db:
                    f2:d4:5c:4c:85:1a:7e:e9:08:72:f2:e9:5c:00:5e:
                    ae:2f:12:04:2b:e0:6f:96:fc:68:07:6b:ed:25:05:
                    94:af:ea:73:f0:ac:41:0d:a4:bb:bd:ef:1b:85:a9:
                    fd:2e:13:4f:64:74:97:d0:73:ef:de:fe:e5:c0:f6:
                    08:87:e1:f7:22:a2:95:ff:e4:8b:f3:1c:a8:e5:c5:
                    7a:57:4a:23:1c:0a:8e:03:cc:4a:a3:1f:1f:59:23:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:74:96:4C:B6:A2:34:6C:06:BF:2C:C2:51:1B:7F:97:BA:86:56
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c74306aa-815f-437e-bc24-88cda4ef292e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.199.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:56:98:67:fe:70:a6:2a:c3:23:0e:cc:a2:83:d4:4b:ed:
         95:6d:f4:7c:0c:d3:80:fe:1d:d3:d8:34:f1:b9:15:ff:f8:a8:
         ce:5f:de:99:38:b7:af:42:aa:33:c8:9e:4f:2c:1a:7b:dd:a8:
         92:42:ed:d2:1e:0e:80:c6:20:f4:26:9e:4a:02:ca:e4:45:38:
         2c:36:74:bf:2f:40:51:1e:24:cd:a0:c8:89:ae:bf:59:64:24:
         a6:32:e0:e6:8b:26:cf:28:f3:5d:54:f5:97:0b:59:24:57:2a:
         4e:ad:60:08:3a:82:cc:a0:54:ec:7a:5e:ad:fe:25:e4:af:6d:
         06:00:8a:a1:97:2e:2f:ad:d1:4d:4d:cb:f8:d3:b6:a9:85:28:
         4a:16:c2:fb:df:4e:2c:95:30:5c:df:a1:dc:e0:35:ff:bb:91:
         8d:f0:71:16:0a:29:53:ab:14:a9:3a:d4:d8:0f:f9:98:59:dd:
         16:27:14:4b:1f:15:28:81:b5:d4:30:bf:35:0f:ef:00:a8:29:
         c8:ed:0e:13:10:29:d0:d2:03:88:86:0f:c6:d5:43:55:d8:27:
         3c:ea:79:e3:13:87:ed:f9:2a:a2:2a:0d:e1:ba:f4:ac:ad:a0:
         7d:9e:ea:f8:3a:05:1f:0c:d5:54:cc:c2:c2:79:1c:7c:d1:fd:
         e6:aa:5a:aa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULZ2/3sFmnTDxz/iv0IbNu9gqvzEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA0MDI0MTMzWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2NiZjJlZDZhZmI2ZmUzOGFmMjlkMWI5YTZmNjgzMWI4
OTA2ZDA2ZjhkZDgyODM0ZmJlNmEwMjVjNTk3MThmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1D3/x5Cy0SBm1lSmsT87cwSdZ8WXTy2SHB3WaR37blIdC
c401OURJhRvr/Yk7T58u0k0Josscfs9c2apMboJmRuvncSI5ewYf+klvnznp6Jnn
HzABiuTyxZbMNcvqoyP/vsGJ5D4GY0FkuZgY0EqsWW1pTEZ/Reu3dPsPPkMiqUAP
swl00h0i+hQzoGMs4gbCOm1ZvEbpkSWSD+T6kotoQ3pF2/LUXEyFGn7pCHLy6VwA
Xq4vEgQr4G+W/GgHa+0lBZSv6nPwrEENpLu97xuFqf0uE09kdJfQc+/e/uXA9giH
4fciopX/5IvzHKjlxXpXSiMcCo4DzEqjHx9ZI1P1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFix0lky2ojRsBr8swlEbf5e6hlYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M3NDMwNmFhLTgxNWYtNDM3ZS1iYzI0LTg4Y2RhNGVmMjkyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2x0AwDQYJKoZIhvcNAQELBQADggEBAALEVphn/nCmKsMjDsyig9RL7ZVt
9HwM04D+HdPYNPG5Ff/4qM5f3pk4t69CqjPInk8sGnvdqJJC7dIeDoDGIPQmnkoC
yuRFOCw2dL8vQFEeJM2gyImuv1lkJKYy4OaLJs8o811U9ZcLWSRXKk6tYAg6gsyg
VOx6Xq3+JeSvbQYAiqGXLi+t0U1Ny/jTtqmFKEoWwvvfTiyVMFzfodzgNf+7kY3w
cRYKKVOrFKk61NgP+ZhZ3RYnFEsfFSiBtdQwvzUP7wCoKcjtDhMQKdDSA4iGD8bV
Q1XYJzzqeeMTh+35KqIqDeG69KytoH2e6vg6BR8M1VTMwsJ5HHzR/eaqWqo=
-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:07 2026 by rpki-client