Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8aba3fd-07a1-449c-9f6d-0e973d7a3012.roa
File:                     d8aba3fd-07a1-449c-9f6d-0e973d7a3012.roa (raw, json)
Hash identifier:          N7DqVpZFq0m5zOt86lr4DQRKuX34ICPL+YjZJ2kWsPg=
Subject key identifier:   30:70:43:24:16:90:A5:CE:FE:9F:51:A5:A4:EB:54:43:E1:E6:0E:D5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       374AEB65AFDE51EC9B5BA0808CCFBCC9085DC620
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8aba3fd-07a1-449c-9f6d-0e973d7a3012.roa
Signing time:             Mon 03 Aug 2026 03:10:27 +0000
ROA not before:           Mon 03 Aug 2026 03:10:27 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.204.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:eb:65:af:de:51:ec:9b:5b:a0:80:8c:cf:bc:c9:08:5d:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:10:27 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=ea1e60809f70236b4905dc42c66fc8f24f4e78f94e931b57510a18b1b456e6fd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:10:5c:1d:e8:be:fc:a5:c5:64:01:55:60:
                    25:b8:13:4e:71:e4:30:f2:53:3d:0a:4f:e2:70:2c:
                    50:21:55:a7:02:c6:ec:39:ba:1b:53:20:21:5c:07:
                    6b:e7:80:69:76:0c:75:0c:9b:d6:4c:b0:37:ef:c3:
                    3a:7c:ea:66:4a:16:34:1d:77:87:96:4c:78:92:a0:
                    d6:c5:5e:08:ca:fb:2c:92:42:f8:b2:66:1b:33:b0:
                    6a:88:33:bc:8f:51:45:33:68:4e:cd:98:cc:c1:19:
                    ed:ce:b9:08:a7:e3:8a:70:7c:0a:aa:8d:c1:1c:4f:
                    87:c8:b1:ea:b6:0f:dc:29:08:85:d1:88:84:3f:6f:
                    1c:82:6c:0a:90:6c:2d:e2:3a:a9:d5:0d:22:f8:75:
                    11:c3:78:5f:9f:23:21:1d:9b:00:9e:a1:db:d3:ab:
                    a8:1a:22:fe:5d:c3:6b:c8:f7:82:ce:44:c2:94:57:
                    77:96:c2:7e:0b:58:d1:29:b8:f5:32:d3:d1:a8:4b:
                    21:cd:0c:18:5f:66:a8:94:8d:f8:45:3e:f1:ea:e8:
                    dd:8d:cd:d7:71:18:bc:04:3a:52:4e:43:b9:71:22:
                    60:0d:b7:d2:b9:45:fa:b3:ae:c8:50:fd:5f:8b:d6:
                    fe:8d:22:be:4b:c6:75:f0:8a:3c:3e:08:08:0b:53:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:43:24:16:90:A5:CE:FE:9F:51:A5:A4:EB:54:43:E1:E6:0E:D5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8aba3fd-07a1-449c-9f6d-0e973d7a3012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.204.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:03:51:6e:a6:55:82:a0:7a:69:90:e1:7e:7b:49:1a:70:
         9d:74:e1:6b:9c:ea:d6:b0:c3:df:76:68:17:c4:ed:7a:7a:24:
         cb:fa:9a:cf:ec:45:5a:ba:42:e0:c2:11:b6:a0:fc:7c:cc:c1:
         fd:54:a9:73:bd:12:c1:70:e8:88:92:dc:4d:13:a8:60:fd:38:
         20:03:6e:4b:9e:7b:e3:b3:47:a7:05:a2:39:52:9e:e8:a3:6c:
         9e:10:5c:99:d6:64:ef:a7:81:b9:e8:87:54:60:e2:72:3b:f5:
         11:02:a7:b2:ed:9f:fa:37:27:d8:19:54:44:39:3f:e3:67:04:
         ad:9c:47:be:67:70:42:88:07:7f:94:b3:37:b9:3d:fd:99:29:
         46:e1:30:a2:66:7d:6c:f4:b1:84:43:e6:b1:75:5b:bd:66:d1:
         c6:89:ca:30:dc:d8:e5:45:56:f4:fa:d2:aa:f9:39:de:7b:8d:
         68:49:38:57:1d:98:e4:0e:f1:47:7d:48:25:53:b5:1a:0a:7b:
         65:8b:39:06:b5:e0:ca:17:0b:ea:7f:fb:c8:f6:87:69:d4:00:
         2b:1a:4f:1d:43:90:95:c5:2e:e0:9d:a2:48:3f:9a:a0:2b:bf:
         05:b8:63:08:7d:65:e4:cf:7d:ad:18:e5:f2:20:d1:f4:9b:45:
         75:bd:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:42 2026 by rpki-client