Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5f25a6-6f6e-42a5-8341-8075b45bf84b.roa
File:                     1c5f25a6-6f6e-42a5-8341-8075b45bf84b.roa (raw, json)
Hash identifier:          jcU9nQcTwIz3IBAdp5xTghLpCUSX+uTUPSZeOy2dFLc=
Subject key identifier:   1E:C9:84:41:4F:73:BB:2E:22:CE:7C:31:62:81:6A:68:79:EF:4E:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E0959E8485C14BD5D7D145323694DF258E324EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5f25a6-6f6e-42a5-8341-8075b45bf84b.roa
Signing time:             Sat 01 Aug 2026 00:41:50 +0000
ROA not before:           Sat 01 Aug 2026 00:41:50 +0000
ROA not after:            Fri 30 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:59:e8:48:5c:14:bd:5d:7d:14:53:23:69:4d:f2:58:e3:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  1 00:41:50 2026 GMT
            Not After : Oct 30 23:59:59 2026 GMT
        Subject: serialNumber=655134ba435bc772c375495fd084e3aae9e79cd439e71a8bdd7d2cd314506816, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:13:d4:42:6f:d5:06:86:94:d7:da:ef:33:59:
                    2a:22:08:83:3c:56:b4:75:ff:d4:90:b7:f3:39:0b:
                    fe:60:1d:08:7d:87:c0:49:50:52:3e:8c:d2:d4:98:
                    71:75:67:02:27:f6:49:9d:93:ce:95:c5:71:4c:50:
                    6f:d2:cd:6e:eb:0b:9f:cc:35:72:d1:6e:70:9a:d7:
                    18:11:d8:7a:00:0d:ef:fd:ab:55:46:ca:8b:80:22:
                    a2:1c:7d:ea:df:32:61:33:93:af:ca:ac:aa:10:9a:
                    43:0e:7e:29:69:46:33:0f:dd:0c:20:40:dd:8f:5f:
                    fa:da:05:7b:7f:86:4c:ed:c3:e7:70:5b:0b:70:25:
                    60:19:64:89:5c:30:12:17:a1:f6:d7:97:c6:73:49:
                    63:c3:ce:38:3a:6b:44:8c:47:8e:5f:d5:b7:c9:62:
                    a9:c3:61:6e:60:06:79:8e:26:e5:2c:d5:3f:3f:82:
                    e2:2c:1d:e9:0f:e9:5e:06:45:8d:91:56:99:3f:d7:
                    ba:87:f5:e6:51:fc:67:aa:83:df:6e:a1:a6:0e:95:
                    1a:bc:27:2a:86:fe:5a:b3:d0:6e:c3:1e:14:68:1a:
                    db:d8:72:fe:0a:a0:69:c6:a8:fe:e9:6d:43:02:c9:
                    65:07:8f:a8:fc:d7:2b:8c:b9:86:47:2a:b5:99:45:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:84:41:4F:73:BB:2E:22:CE:7C:31:62:81:6A:68:79:EF:4E:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c5f25a6-6f6e-42a5-8341-8075b45bf84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:a3:af:ce:4e:ee:59:29:25:68:e1:3c:99:02:99:f8:5c:
         52:b6:44:0c:a0:0b:48:2a:da:23:12:1f:4e:a6:20:fb:32:ab:
         83:d5:6f:5e:ad:bb:93:03:9b:9d:e3:69:df:0e:65:d2:bb:07:
         bd:00:f3:58:73:ad:1c:2b:d0:e9:8d:bd:7e:8d:99:5d:d7:93:
         ac:3b:c6:47:47:00:3b:0f:e6:1e:2a:40:c0:57:bc:e7:2a:29:
         c5:70:4f:a1:bf:9f:b4:e7:b6:34:09:7d:73:e9:e3:9c:16:c4:
         88:c0:52:cc:80:76:34:57:02:7e:03:ff:92:f7:10:8a:05:c5:
         35:0e:aa:bc:78:ac:be:1c:69:f9:b1:76:ac:8e:15:d1:37:8d:
         d8:9c:d4:27:ce:6c:61:c4:0d:6b:aa:62:b8:a5:c3:fe:78:8e:
         4a:b3:b3:de:af:51:cd:9c:86:2d:e4:a3:b1:66:1b:2d:2e:67:
         f0:39:15:01:89:05:6a:64:e3:cf:7a:01:b7:4d:7b:1b:f0:f7:
         ef:97:6a:d6:00:fd:75:9e:7d:f3:9e:d6:8e:26:22:57:05:61:
         17:e7:62:32:05:6b:78:24:f1:d7:53:88:3b:60:04:c1:ac:4e:
         a6:58:5e:aa:f5:d5:b6:bd:42:9f:d0:72:a6:a1:60:01:f7:23:
         e8:d7:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:33 2026 by rpki-client