Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9e2e53f-2b04-46a4-9ab5-591d3fe63d94.roa
File:                     c9e2e53f-2b04-46a4-9ab5-591d3fe63d94.roa (raw, json)
Hash identifier:          lu707GoxU4/GHMmN8jrCqUlNCW3N5Uyi/3coocpZJVU=
Subject key identifier:   1F:50:DE:70:FF:B1:14:EB:BE:35:38:BB:20:79:2B:81:4D:89:E4:A5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51CB03D167D11B7ECF5EB04F69E573662320B58E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9e2e53f-2b04-46a4-9ab5-591d3fe63d94.roa
Signing time:             Sun 02 Aug 2026 00:20:08 +0000
ROA not before:           Sun 02 Aug 2026 00:20:08 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.156.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cb:03:d1:67:d1:1b:7e:cf:5e:b0:4f:69:e5:73:66:23:20:b5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  2 00:20:08 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=dd80086db42e16b900bf0624d1bf30113ea4879eebd8ecaf4cc20d34e677f385, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:ad:34:5e:10:6a:41:de:c6:93:0c:20:ae:
                    34:09:80:c0:86:78:94:27:63:3f:14:dc:6c:b1:87:
                    46:a1:66:e1:9e:31:48:e5:6b:4a:c8:c5:ec:54:99:
                    75:5e:a3:a9:3d:d4:af:00:70:28:29:23:4e:12:22:
                    8c:c6:4a:8d:fe:dc:31:ba:15:f1:7d:13:16:b1:14:
                    6f:8f:c8:6d:da:c9:76:fe:87:0f:53:b7:33:2a:c4:
                    5f:7e:9a:c5:e6:80:ca:46:a4:ca:7c:f1:b8:08:b2:
                    9a:6d:23:ce:0c:45:30:bf:49:fc:e4:87:2f:60:9b:
                    c2:af:89:44:83:6c:54:a4:a2:15:85:21:b5:e1:2a:
                    93:9c:c1:5b:bd:e9:a2:98:6a:b2:07:0e:1c:d8:39:
                    df:13:cf:d4:82:52:28:b3:49:0c:3e:5e:2c:48:95:
                    f2:ca:80:29:7a:22:14:f5:7b:c0:0d:f1:ff:fa:c5:
                    55:76:8a:46:87:52:da:fb:f0:9f:b1:35:8b:d1:d9:
                    83:5a:f3:0e:5d:a9:b4:ba:d7:73:22:d2:69:19:a1:
                    0d:ce:d0:05:95:f2:d9:52:8f:e4:e9:61:40:dd:95:
                    ac:27:35:27:2f:43:c6:98:82:0e:56:51:0a:86:47:
                    b8:e0:1a:32:85:d9:bc:9b:22:98:29:cf:8b:f1:88:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:DE:70:FF:B1:14:EB:BE:35:38:BB:20:79:2B:81:4D:89:E4:A5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9e2e53f-2b04-46a4-9ab5-591d3fe63d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.156.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:bd:34:0a:de:0b:23:7c:cb:0c:0b:a8:e5:df:52:25:57:
         9e:b4:b1:a8:50:65:ba:81:5a:c8:48:aa:e1:59:4b:33:4f:ac:
         f5:4f:2f:c3:23:3c:8e:f8:4f:af:b3:a0:8d:4a:02:a0:02:86:
         f4:d4:1b:62:c2:84:9b:cd:9e:59:31:90:88:08:53:5e:d7:b2:
         94:5d:e7:af:9d:96:9b:b4:2b:c3:82:c9:19:96:7f:15:fa:d0:
         2f:68:0d:29:9b:f4:7e:25:6b:83:c2:96:23:06:d7:0f:ff:89:
         96:9a:05:55:62:6f:be:1a:c8:df:10:62:81:df:a3:93:38:aa:
         56:de:17:87:a9:9b:ea:f4:19:4a:92:78:54:e6:e8:ac:a0:85:
         8b:d1:22:82:a5:1e:c0:06:04:50:14:d6:9e:c1:c5:2e:9b:c4:
         19:23:b7:0c:eb:74:fb:de:64:d3:fd:ac:dd:d6:fa:21:04:42:
         55:dc:24:30:b9:9d:c0:72:c7:df:6e:d5:f8:7b:66:38:e7:be:
         68:d9:9b:57:fc:cc:58:52:34:fc:26:6c:ad:5c:28:bb:c1:82:
         cb:ba:b8:3f:f6:8c:26:ef:db:96:00:19:f5:d1:b5:b5:fb:3a:
         8a:fa:0b:11:97:92:0f:fb:d7:23:d0:30:02:8f:0b:f2:8d:57:
         90:b3:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:01 2026 by rpki-client