Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa
File:                     a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa (raw, json)
Hash identifier:          qBn+SPUkwUEc3sOChRKDvsxa9Hm7fxENGtM6Lzv8tgw=
Subject key identifier:   F3:A6:97:DB:96:4A:04:B6:DB:D8:AB:6B:5A:60:0D:21:1B:72:05:8A
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1F95EE7F9ADAB60A2DBB603D9171DE1346AAF374
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa
Signing time:             Mon 04 May 2026 14:20:12 +0000
ROA not before:           Mon 04 May 2026 14:20:12 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.93.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:95:ee:7f:9a:da:b6:0a:2d:bb:60:3d:91:71:de:13:46:aa:f3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  4 14:20:12 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=75621171fe013718c89fbc834230fa6e7d372b5b8de6dbaf103bde4d57163b53, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:da:86:f0:b3:96:62:78:2e:ca:12:8b:54:
                    7c:d4:f9:5a:03:02:55:90:80:28:65:52:b9:3c:4f:
                    93:27:09:89:f8:c7:4d:82:11:62:01:cf:7f:1e:13:
                    e4:2d:54:94:54:16:57:45:b4:0e:f8:0f:ad:4a:8b:
                    27:a5:ea:cd:3d:ba:7a:13:8a:9b:51:44:d9:53:ac:
                    83:9c:4f:4d:5d:87:0d:4c:15:d5:2b:f2:90:db:17:
                    30:aa:34:75:91:b5:25:a4:87:4b:2c:41:71:db:4a:
                    a9:fe:3a:b6:be:47:2c:d5:c5:a2:85:e0:d0:05:35:
                    f2:a0:07:36:f0:86:58:21:06:89:d5:ea:ce:7d:a3:
                    72:8e:d1:6e:75:3d:30:1b:f5:a5:0e:0f:a9:93:82:
                    2a:e3:97:42:5c:44:63:51:ae:e6:ba:bc:43:98:b0:
                    f8:7f:25:50:11:53:b3:a1:11:27:ab:db:d4:87:6f:
                    df:0e:c4:0b:f5:83:14:50:7e:cb:91:54:d3:80:0d:
                    75:3c:2a:a1:a7:f5:7c:83:ad:56:d7:4d:fb:f9:75:
                    a7:77:cd:eb:89:e7:b8:a9:a5:09:1a:ae:64:55:cc:
                    ac:f1:cf:f6:b3:6c:ab:b2:fc:2a:85:32:10:00:bd:
                    1c:82:52:6c:cf:93:b6:c2:2b:36:81:74:d9:f9:64:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:97:DB:96:4A:04:B6:DB:D8:AB:6B:5A:60:0D:21:1B:72:05:8A
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.93.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:e2:3c:ac:ce:a4:bb:15:fa:0a:6f:9a:9f:e2:50:2f:fb:
         c6:61:0e:10:3e:1c:ba:b0:27:84:56:7b:f6:41:a0:bd:94:40:
         9c:40:d4:ad:6f:d5:6a:1a:dc:4a:50:b5:3e:0e:83:5d:76:c4:
         e7:73:6e:8c:06:b9:08:1b:94:3e:08:05:03:6e:bb:10:f4:b1:
         a5:78:58:b2:c5:5e:98:cb:ed:c6:b2:9b:68:0f:7d:15:9a:d6:
         1e:07:cc:88:4a:a1:7d:b6:87:28:5a:ec:82:54:f7:c6:06:a5:
         9d:0d:7c:3f:7c:5b:71:f5:3f:d6:16:8a:e7:c6:0c:ff:b0:c1:
         6e:cc:93:f6:80:56:87:bf:dd:10:c3:75:9d:7a:42:bf:71:6e:
         8f:ff:ef:5f:fd:fe:2d:25:7f:8e:5a:cb:0e:f0:5c:85:90:84:
         42:db:68:62:3b:dc:5d:06:aa:11:f6:79:0b:e8:86:08:7e:cc:
         8d:1f:d3:2c:9a:a3:cc:af:dd:46:2b:97:3e:d2:ea:1d:6c:2a:
         e1:d1:b9:70:b7:ef:78:13:b1:39:78:69:a4:29:78:94:a9:fd:
         78:9d:ad:ee:0e:35:9f:c4:11:24:d2:bf:62:6f:9a:28:fc:2c:
         ea:77:14:27:87:73:e7:9f:0a:25:a8:c4:6f:44:40:c3:5f:26:
         f1:c1:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:00:40 2026 by rpki-client