Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa
File:                     d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa (raw, json)
Hash identifier:          mGHdhZ6PoEmDFlgQE6cTTYZUryu8Kg5GWiVHj8LN3vM=
Subject key identifier:   9D:9F:44:3D:E8:34:1B:9A:ED:0E:E0:64:E2:73:DA:6C:49:F6:3C:63
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       05943420790173312719B5B5A2E268E2CB08A114
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa
Signing time:             Tue 04 Aug 2026 02:40:04 +0000
ROA not before:           Tue 04 Aug 2026 02:40:04 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        54.237.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:34:20:79:01:73:31:27:19:b5:b5:a2:e2:68:e2:cb:08:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  4 02:40:04 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=8dbd3419926f4dc1340f4d8c8f0a2e27d359198c9ccfdba0a9b7906df583cbd5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ea:1a:61:5b:b3:b7:b0:db:fe:4e:58:1c:17:
                    50:73:68:a9:ef:d9:15:59:c9:21:cb:5a:fb:73:8d:
                    20:ab:42:b5:58:68:9e:24:84:3e:8e:55:5c:31:10:
                    8b:68:49:a8:4f:9e:7d:4d:f5:70:94:26:5a:23:ee:
                    8e:84:4c:ce:27:89:54:17:d4:b0:cd:52:40:75:21:
                    ce:e7:77:48:7e:2a:c7:78:ac:f8:07:57:d5:b0:98:
                    90:47:65:43:72:77:25:04:9b:c3:aa:86:5b:70:c8:
                    66:d3:6d:dd:2f:9a:a4:14:ba:9d:13:3e:08:ec:24:
                    ad:8f:a2:71:d9:52:6c:30:f2:00:a8:b7:15:cd:20:
                    c1:a2:ac:62:3b:a8:1c:7f:0f:5f:d9:24:29:f3:25:
                    b1:44:3c:ca:af:ef:cf:9e:a9:ba:8f:80:be:6e:b9:
                    a0:a2:e4:e9:b2:69:2c:90:c2:32:9a:1d:dd:0c:99:
                    98:27:37:0d:9e:eb:9e:e1:d5:49:b9:a3:ce:46:d0:
                    81:58:4e:7a:ac:ca:fe:30:0e:a0:b7:ac:b5:cb:9e:
                    ee:aa:72:1d:fe:5d:68:12:2c:79:f6:ce:99:62:1b:
                    0f:93:cb:b3:1e:a3:01:b6:ab:98:7f:78:fa:c0:37:
                    97:a4:c9:ee:5a:cd:55:2b:ae:30:95:51:87:76:dd:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9F:44:3D:E8:34:1B:9A:ED:0E:E0:64:E2:73:DA:6C:49:F6:3C:63
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9bda163-e4c4-4a0b-a17b-80c77fecb3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.237.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:f9:42:3b:17:52:27:da:d4:0f:88:c7:a6:02:cd:a4:99:c6:
         b4:e6:4e:dd:f4:e8:67:1d:2f:39:5d:e2:01:dc:3d:fa:42:b7:
         ea:4e:74:96:2d:d9:e5:af:1e:5b:6e:54:28:50:c7:52:63:56:
         fc:30:5e:52:2f:0b:35:27:a8:42:5e:ce:a1:4d:97:72:51:dd:
         d3:17:85:bf:e7:c8:bf:0a:8b:d1:88:7c:7f:9b:e4:ed:88:77:
         c0:29:25:96:92:4e:25:8b:66:8f:43:6e:71:cb:b1:c4:7c:00:
         ac:f5:be:a2:9b:1a:15:05:01:4b:d3:1c:95:93:99:6b:aa:d9:
         d6:2d:2e:79:5b:cf:c1:30:f2:ba:06:73:05:53:55:d9:e8:cc:
         ec:65:c6:fe:fd:31:a8:36:e4:ca:b4:97:5a:e1:88:89:59:78:
         70:d8:b5:0d:36:33:16:5b:af:33:6c:e1:c3:bd:54:ff:b1:e0:
         91:1a:52:ae:d1:11:35:b0:f2:59:73:ef:56:9e:5a:f4:b6:5a:
         30:e1:49:fe:81:00:9a:b8:92:50:c1:cf:05:8e:4f:9f:e3:c5:
         15:04:2c:a3:e1:a7:53:04:84:3b:2e:e4:6c:d8:fb:4c:60:ed:
         88:87:e9:f6:10:00:72:81:86:9f:07:40:da:9e:24:88:89:4a:
         84:4a:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 08:03:02 2026 by rpki-client