Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7eb6f0d-2f2e-4285-bfb1-5a9235c335b6.roa
File:                     d7eb6f0d-2f2e-4285-bfb1-5a9235c335b6.roa (raw, json)
Hash identifier:          Je6yE8g6RWUKWopkbEUStNl1Scf7RfOPB4gZlMsGoBs=
Subject key identifier:   EE:D1:E9:F3:62:1D:9D:D8:B7:56:F5:F0:73:CC:8A:A0:DE:83:CA:C9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7624AD2BDFACF5E9D5E949079B14FEEDC4808C7A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7eb6f0d-2f2e-4285-bfb1-5a9235c335b6.roa
Signing time:             Fri 07 Aug 2026 02:20:32 +0000
ROA not before:           Fri 07 Aug 2026 02:20:32 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.119.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:24:ad:2b:df:ac:f5:e9:d5:e9:49:07:9b:14:fe:ed:c4:80:8c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:20:32 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=48ba2fabbacc4f7dbdce87bf2286f739d009420a3334fdfa6ed9fe17ad9f3619, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:c8:e4:4a:10:ef:ac:14:1a:88:a4:b1:30:
                    25:bc:43:27:e4:0a:8c:d7:32:49:16:06:10:36:c6:
                    1b:c0:0a:e1:a5:bc:af:f8:42:43:a3:e0:65:f1:76:
                    76:21:c2:f4:58:3f:50:90:00:c8:fc:95:ea:68:76:
                    da:74:42:3a:c7:19:dd:d6:9a:7f:6f:6d:6e:38:b0:
                    d3:9f:15:2a:1f:38:9c:f6:ac:ec:e1:7d:31:d2:36:
                    d5:88:5d:a1:f2:71:21:2b:d6:0b:55:2e:a5:4d:4f:
                    fd:3f:85:70:2c:54:88:ed:1f:1c:97:c0:ec:62:72:
                    1c:8b:3d:91:bd:8b:d2:b6:6e:06:a0:34:4c:e4:96:
                    c9:02:a4:59:84:58:70:6f:f2:bc:21:ca:e2:ac:5b:
                    27:65:63:dd:60:f3:3d:fa:e8:c7:e1:9a:db:e2:d1:
                    0d:a6:f9:61:51:9f:1b:58:38:f2:52:b7:bc:c0:5a:
                    74:e1:4b:86:43:d7:7d:8d:87:9f:82:b1:bf:51:46:
                    c0:8d:2b:ef:bd:5d:62:5d:b2:7c:7b:41:a6:a1:64:
                    dd:8f:9c:d3:12:ec:fd:20:57:fd:7e:b6:a4:bb:68:
                    36:f7:72:29:6a:52:ba:5c:c7:42:b1:93:46:25:c0:
                    8d:a4:8e:16:58:08:ae:ac:c4:38:c2:94:86:90:6d:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:E9:F3:62:1D:9D:D8:B7:56:F5:F0:73:CC:8A:A0:DE:83:CA:C9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7eb6f0d-2f2e-4285-bfb1-5a9235c335b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:c1:de:cd:92:45:00:df:73:33:0f:c7:f2:bf:8d:40:8e:
         1c:c7:0a:e2:c9:01:ae:4e:15:69:40:04:78:47:aa:1d:7e:f7:
         2b:6a:23:d7:ba:47:e4:13:2f:cc:21:9b:60:27:04:4b:a4:e9:
         5d:d2:0c:b2:54:83:98:9b:29:c6:c1:c8:cf:81:7b:70:0c:87:
         34:a2:c9:78:44:1a:b9:3d:cd:40:f0:b9:8d:55:b7:8d:ea:ee:
         e2:fc:41:95:c9:c7:07:b2:8b:c9:71:0c:b8:30:cc:66:99:e0:
         c9:c9:f5:d0:80:79:60:58:d6:aa:74:b9:d8:73:d5:c1:64:80:
         49:b1:ff:27:2b:04:40:bb:2a:1f:c7:19:53:30:b7:57:3e:0d:
         07:91:86:0c:8a:49:43:5d:35:92:b3:24:12:0f:cb:c3:e4:50:
         74:eb:14:9d:bb:29:e3:49:e6:ef:18:59:a3:fe:67:a9:55:50:
         59:c3:b9:b2:5e:6d:dd:b9:2e:c8:97:65:75:7c:40:cf:f3:da:
         5b:17:13:af:97:f4:10:8a:c3:15:d9:ce:9a:d1:fa:7b:fe:f4:
         8d:0e:25:88:17:57:4c:dc:2a:ef:3f:47:16:81:ec:b5:95:05:
         89:b1:ea:2e:4f:8f:af:fb:10:e0:0b:38:5b:61:5d:74:f8:88:
         e3:3a:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:19:18 2026 by rpki-client