Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6c5cca8-99d6-4a15-8639-929cbd34ed76.roa
File:                     f6c5cca8-99d6-4a15-8639-929cbd34ed76.roa (raw, json)
Hash identifier:          mmshwRvkFltuxROdd2fFqDIlMpVuSKPSXCLY30ibrnY=
Subject key identifier:   2D:82:D6:0B:F5:6E:01:15:21:46:3B:FE:F2:6F:F7:1F:62:20:86:18
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       07B22B25629B199A75F17FA04DFDFBC5ECA951B8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6c5cca8-99d6-4a15-8639-929cbd34ed76.roa
Signing time:             Tue 04 Aug 2026 02:50:04 +0000
ROA not before:           Tue 04 Aug 2026 02:50:04 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b2:2b:25:62:9b:19:9a:75:f1:7f:a0:4d:fd:fb:c5:ec:a9:51:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  4 02:50:04 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=1a1aad46b59f44b103560213a58d22e2d936997c80e75592629ddb071229e8a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:4a:4d:ca:6a:ba:db:74:b1:75:ed:94:21:
                    d2:ca:54:95:9b:8a:72:a9:fe:30:07:e7:19:e5:1e:
                    53:6d:2e:ec:7d:1f:78:d4:28:22:0b:57:11:85:ca:
                    f2:9c:79:18:90:86:7e:63:54:87:4e:68:1d:79:c1:
                    3c:11:c3:50:bf:da:c8:58:9d:7b:73:af:e7:9d:78:
                    15:06:e8:69:89:e2:9f:a1:6a:06:61:c4:f7:5e:d8:
                    3e:ce:a9:53:e1:57:c0:d7:0f:5a:d1:0f:55:16:9e:
                    fc:11:8a:70:be:34:ea:4d:ef:22:2b:90:25:f0:c0:
                    5a:ec:06:3b:99:e6:b5:28:00:d3:6a:3c:aa:b3:7d:
                    6d:02:1a:3d:42:a3:11:30:3a:26:58:cf:78:96:75:
                    37:6f:41:69:fa:a8:63:30:22:14:2c:36:6f:a5:12:
                    20:c9:37:d0:fe:b3:d3:33:7a:68:27:af:31:42:31:
                    0d:2b:52:75:6e:48:b1:2f:c6:cd:88:25:88:fe:e3:
                    5c:d4:00:11:b6:2c:72:27:f5:90:70:17:ef:8f:f0:
                    70:d0:7d:88:e5:2e:ca:f8:3c:a1:2d:2b:d9:10:68:
                    f0:82:c2:b6:8f:1a:86:aa:8c:6c:38:1c:35:fd:48:
                    af:81:14:51:54:0c:80:6b:bd:24:a8:50:a2:4d:bd:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:82:D6:0B:F5:6E:01:15:21:46:3B:FE:F2:6F:F7:1F:62:20:86:18
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6c5cca8-99d6-4a15-8639-929cbd34ed76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:53:73:b5:78:c1:f8:11:88:c2:0f:08:17:a3:a6:b0:21:
         7c:ca:77:c2:08:ae:45:8e:0e:64:07:9b:ee:db:d3:20:f0:02:
         13:70:79:c1:49:3e:28:f3:f9:ec:db:dd:71:34:57:c8:33:ba:
         5b:6f:3b:75:69:bf:f1:77:a8:dc:43:9b:0d:a0:55:ec:55:9b:
         f2:98:2d:66:46:3d:c3:87:60:15:83:f6:3c:dd:93:66:e0:62:
         78:b2:c1:56:10:a1:64:00:90:f9:ef:d0:d0:d6:7f:0c:51:28:
         7f:4a:e2:2e:ec:40:4e:c9:c6:20:00:9e:e5:9b:60:4e:1d:c1:
         2d:ed:a7:15:e7:4b:fb:e8:86:ca:42:6e:66:a3:5b:31:3c:ce:
         6a:b7:cf:a5:a1:b4:9e:c9:8c:33:d0:0d:58:9d:ee:84:42:07:
         38:cd:6f:a3:86:31:e9:fa:42:39:99:64:22:3b:fd:77:3c:5e:
         17:af:a4:91:9d:1a:52:70:42:77:31:de:5f:7b:30:95:54:6d:
         65:36:aa:57:30:09:e5:62:33:ac:17:4d:cf:7d:0f:5f:91:58:
         41:19:26:67:ae:0b:9e:fc:d3:48:33:49:c9:94:5b:c5:2a:98:
         87:cf:07:c7:c5:53:73:75:7a:79:04:f0:60:46:9e:6b:05:17:
         e7:a9:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:44:50 2026 by rpki-client