Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7566444-89cd-4f02-ae9f-71d3853db438.roa
File:                     c7566444-89cd-4f02-ae9f-71d3853db438.roa (raw, json)
Hash identifier:          nhabrRSMGuZG5WePbRXqAuy5xp8f1FpqHtU4hHH+qLY=
Subject key identifier:   DA:86:A8:CE:7A:C3:EF:99:64:8D:40:15:EA:10:47:ED:0F:F4:D8:89
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       4EAEFE54B4E97657EE565164E2DA02C02E395255
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7566444-89cd-4f02-ae9f-71d3853db438.roa
Signing time:             Fri 15 May 2026 03:30:09 +0000
ROA not before:           Fri 15 May 2026 03:30:09 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.252.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ae:fe:54:b4:e9:76:57:ee:56:51:64:e2:da:02:c0:2e:39:52:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May 15 03:30:09 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=0b7cd86e58a7379933411f15d473906fef34fb3a8c3f6cdf3d5a1f4a0018d80f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:52:33:86:24:ab:51:a9:54:c1:a5:2c:47:
                    d8:06:68:fd:b8:e4:c4:1d:d2:dd:55:fa:49:1a:6d:
                    58:71:ee:1f:38:f6:1b:00:db:02:2c:a8:52:64:13:
                    4d:bf:68:2f:84:f2:08:33:83:5d:5c:d9:8c:93:23:
                    07:c0:ad:04:e0:ac:0b:c9:88:31:db:ae:c4:ff:dd:
                    34:a4:9e:d5:5d:a1:76:bb:ff:64:de:31:74:76:ca:
                    97:ed:84:de:50:c6:2e:eb:ef:8a:2f:ce:2a:4b:bf:
                    2e:f8:f9:a4:9d:52:ab:52:a6:72:2d:5e:cb:c8:80:
                    43:c1:85:33:97:02:bf:5d:82:a6:29:fa:63:7f:7b:
                    43:2b:8c:c4:25:03:dd:c2:f0:2c:5e:27:96:b3:e5:
                    2b:ad:25:2a:cd:05:6f:58:db:4d:cf:71:3a:4a:2f:
                    66:cd:73:4b:4b:15:13:64:ce:05:28:bf:b5:06:04:
                    56:33:96:0e:c3:6a:d0:59:6d:2d:99:ab:40:37:8e:
                    d5:f4:36:70:1d:25:20:55:23:23:e0:e1:b2:4f:9c:
                    ed:c0:40:52:fb:90:5a:a8:87:88:86:29:da:53:1d:
                    e1:f0:d9:0f:cf:4d:e6:9d:b0:c3:ea:12:4a:88:66:
                    98:2d:cb:88:c8:99:11:23:67:f8:d0:a9:0b:e2:24:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:A8:CE:7A:C3:EF:99:64:8D:40:15:EA:10:47:ED:0F:F4:D8:89
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7566444-89cd-4f02-ae9f-71d3853db438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.252.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:e8:55:2b:34:9a:87:75:f8:98:ac:09:28:d2:3a:ce:2a:
         1b:ca:97:7a:4d:a8:26:d6:c7:f2:35:9b:e4:ca:7c:2b:69:b9:
         b3:db:79:80:23:90:f3:b6:8d:40:55:62:9c:78:63:91:9b:40:
         9b:22:51:fd:dc:b4:df:91:28:6c:3f:f6:f9:d4:e2:7f:72:24:
         e1:a4:63:c9:f2:2d:07:db:0a:c2:b2:9b:f9:70:92:9e:a7:c4:
         b7:ce:a7:64:65:f2:89:de:4d:4c:fd:0f:80:23:96:f0:c1:28:
         7f:e1:08:00:1c:86:44:c3:bd:f1:0a:76:6f:03:a2:42:53:a4:
         89:6e:5d:7c:15:e0:68:12:b6:88:25:38:54:3b:59:4e:f4:2b:
         e7:7e:5c:a1:b3:9c:84:6e:48:b4:e7:b4:7c:07:28:a1:77:b3:
         1d:78:96:de:d7:d6:73:9d:54:94:41:6c:94:b7:14:0d:f9:57:
         a9:6f:4d:70:c7:df:82:00:22:09:3a:8f:53:3d:24:25:90:c4:
         88:e3:64:3b:da:f2:08:ba:95:70:7e:30:b7:40:0b:4d:ff:2e:
         b3:1a:95:b4:28:31:8d:31:ad:e7:a3:86:6d:ba:d8:8e:b8:5c:
         d2:96:19:32:78:79:9f:b8:30:fe:17:9b:7b:c0:14:9a:e6:a1:
         1f:89:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:51 2026 by rpki-client