Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54032bc6-1400-4d4c-bfcc-6aa097d0de1e.roa
File:                     54032bc6-1400-4d4c-bfcc-6aa097d0de1e.roa (raw, json)
Hash identifier:          9kPO/XmGBI/vJWMxas11y0Kfy19ddR5bVUVFZDUO7CQ=
Subject key identifier:   F1:88:F5:AF:3F:0E:5B:FF:19:41:A6:21:5B:BB:CB:E4:20:24:DC:A3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       15F738860E346E8A230EFE913085622CC5F09AF7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54032bc6-1400-4d4c-bfcc-6aa097d0de1e.roa
Signing time:             Fri 08 May 2026 01:21:04 +0000
ROA not before:           Fri 08 May 2026 01:21:04 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.27.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f7:38:86:0e:34:6e:8a:23:0e:fe:91:30:85:62:2c:c5:f0:9a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 01:21:04 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=4fc825e62af1e90e4714d6678d701482f9a4d2b5642c4240b8f0605f40838701, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:9e:cb:18:da:19:9b:fd:ab:97:ed:17:9b:
                    61:03:63:c7:5e:6e:b2:86:ef:ca:49:4a:d3:b5:9e:
                    ad:c1:90:99:66:85:b5:bb:64:01:e1:64:6f:4f:97:
                    7d:c6:df:40:fb:ab:e8:0b:56:bc:80:a1:12:1e:7a:
                    28:13:f9:b7:bd:e0:82:da:e2:62:4b:c4:c9:a1:aa:
                    be:3e:a2:d8:ca:82:72:bc:34:a6:7f:55:6d:8a:de:
                    08:2b:42:07:18:1a:49:4c:cd:59:cd:f8:cb:c1:7b:
                    54:72:08:8c:58:7e:43:4a:17:1d:33:57:2a:df:57:
                    2e:1f:f6:21:1b:88:98:54:11:98:61:f8:e1:35:aa:
                    42:a7:b2:e7:2e:ef:95:98:74:f7:b6:c4:3f:73:2e:
                    34:62:0a:02:ac:b8:30:b9:28:a7:83:68:36:1d:6c:
                    bc:8c:77:3d:a1:12:09:98:67:2a:fe:ee:3b:5f:7b:
                    6e:92:e0:71:6d:2b:be:81:55:24:ba:61:35:44:ff:
                    ff:28:c0:e6:f4:29:b2:30:a6:1b:19:32:73:be:48:
                    5f:49:30:8e:58:f6:5a:f4:ea:81:de:89:06:4a:2d:
                    ec:0e:bf:35:ba:82:d3:16:28:e2:52:1e:08:da:da:
                    8f:67:0c:c9:4c:98:df:d7:b1:55:58:a8:47:84:1e:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:F5:AF:3F:0E:5B:FF:19:41:A6:21:5B:BB:CB:E4:20:24:DC:A3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54032bc6-1400-4d4c-bfcc-6aa097d0de1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.27.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:23:6a:45:94:09:f9:70:e0:ec:2b:f7:f6:ec:8c:46:e5:
         fb:44:e0:30:c4:f4:e5:5e:41:53:e6:fb:9b:30:e6:e0:e6:11:
         67:5a:fb:04:11:a9:80:a5:67:84:24:a2:6a:d6:df:3a:2a:91:
         ad:0e:f5:60:5a:bb:cd:78:31:ce:04:00:a4:0e:43:f3:de:80:
         de:63:7b:47:2e:c9:a2:88:3e:8c:09:a5:97:ea:cb:dd:66:59:
         a2:5b:9e:6a:aa:71:3c:0d:27:8b:6c:42:53:7d:9f:5b:0a:49:
         39:89:d8:a6:95:13:be:e0:41:f1:ea:49:af:59:3a:4e:7f:8f:
         3e:44:6b:f9:b6:49:ab:87:02:0c:02:65:d8:81:a1:8f:9a:c2:
         d6:5e:e0:72:2e:c6:08:b8:c4:dd:6f:c5:47:af:e2:a7:b3:22:
         b9:ba:59:61:88:61:20:e8:71:f9:92:28:6d:1e:b3:4e:9a:41:
         c1:06:e5:ea:16:8d:f3:96:db:ab:96:ef:4f:fa:ed:25:a2:69:
         cf:9e:15:c2:72:4b:87:a1:2f:fa:3e:51:48:65:a7:26:9a:46:
         9a:5a:00:b5:c6:f2:58:7e:9c:d3:32:cd:cd:bb:ba:20:bb:aa:
         ed:84:e3:b8:c6:5c:bf:cc:20:23:71:c7:9e:ba:e4:f9:95:91:
         a0:12:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:48 2026 by rpki-client