Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa
File:                     71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa (raw, json)
Hash identifier:          Pdnuy86HU1x8vFgCsVQEuUJBRtAbob4Ry6E4fSirSbM=
Subject key identifier:   79:A9:AD:04:8C:C2:B3:62:41:B8:F1:22:01:7A:4D:4B:AC:73:D7:D9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5D54C596D3597D71E7ECC95813EE27DE7FAC2290
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa
Signing time:             Sat 18 Oct 2025 05:41:19 +0000
ROA not before:           Sat 18 Oct 2025 05:41:19 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:54:c5:96:d3:59:7d:71:e7:ec:c9:58:13:ee:27:de:7f:ac:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 18 05:41:19 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=96197dfc0e919c59bdf7297c1a4b71beead89a856af4cbc6d6cd7e567ec6104f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:1f:92:4f:91:51:2e:69:7a:43:91:91:60:
                    d9:09:dc:2e:69:4a:d4:54:df:18:3f:ad:33:15:ca:
                    b5:e9:d8:54:84:7c:e2:68:3c:a2:c3:d3:3b:0d:76:
                    a6:b1:40:d4:9d:b8:57:68:df:1c:24:df:02:29:57:
                    66:b8:eb:9a:b1:07:c8:b3:77:9e:7d:3e:fe:ee:27:
                    d2:e0:68:f5:80:26:1b:f6:b7:cb:f5:5c:56:dd:c4:
                    b3:bd:91:45:aa:08:6d:8f:d4:c4:7a:84:b1:04:38:
                    f8:77:36:bd:7c:d4:5d:f5:d4:5e:c0:c1:ee:22:f4:
                    22:89:a9:f3:7d:92:6f:fa:35:65:4f:5b:7d:09:6b:
                    8e:86:5f:ad:dd:b4:7f:7e:a1:8f:b2:18:c8:3b:9c:
                    00:69:4c:92:87:4b:42:d6:3d:5a:e8:87:01:58:23:
                    79:fa:45:a9:cd:73:6e:71:6f:49:32:93:48:56:1f:
                    47:c2:58:90:0d:eb:37:55:19:f4:71:24:98:eb:32:
                    db:a7:cb:74:d4:f8:07:59:ee:e5:3d:86:a3:51:97:
                    50:46:48:11:78:66:4e:9c:52:b4:c3:80:fd:2d:42:
                    13:f3:bb:1b:9c:cb:2d:00:34:04:41:1b:90:d3:b5:
                    3a:01:2f:a6:40:cb:f3:32:a0:49:0d:8e:51:02:26:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:AD:04:8C:C2:B3:62:41:B8:F1:22:01:7A:4D:4B:AC:73:D7:D9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6fc9b-9b22-41df-b4d3-dd916e9addb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.252.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:27:ad:f2:29:b0:8d:a4:cf:4c:55:51:1d:a7:a6:ba:9a:
         62:c7:3f:c9:1d:f4:b6:33:d6:03:29:8c:53:b1:a5:f3:45:d4:
         88:c2:ef:b0:a1:6d:0e:ea:b7:30:21:eb:4f:66:d9:11:a7:a4:
         56:47:b6:ed:0d:20:32:81:b6:8e:18:b3:79:e1:03:63:55:1e:
         5e:4c:72:89:1b:65:9f:63:29:0a:a2:e5:e2:4a:b3:09:0d:31:
         82:8f:a4:77:50:00:89:23:e3:5e:99:c1:65:a4:d6:29:b4:4d:
         22:f7:a2:8c:d2:84:e1:11:08:17:ae:25:2a:f6:3e:58:7a:86:
         73:98:43:3f:47:3f:54:02:26:1e:e3:83:e0:d6:e8:fc:b7:6c:
         63:23:56:6b:8e:a6:7e:98:7e:1b:69:a3:e3:73:57:10:42:cf:
         b0:96:3e:84:8c:45:74:c8:08:8d:b2:4a:e0:8a:9e:f5:cd:8b:
         8f:4d:ac:25:be:79:5f:ee:6b:0f:3a:8e:19:24:6d:3f:fe:eb:
         16:cc:5e:5f:5f:99:a8:23:b2:de:26:4e:c6:18:d9:e3:ac:04:
         1e:27:23:d6:a8:8c:1f:88:4f:a7:b5:b0:10:73:0f:37:e4:95:
         1a:55:1c:1d:53:a6:b7:97:11:1c:04:68:d4:d4:65:cf:ac:00:
         d6:81:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:45 2025 by rpki-client