Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa
File:                     dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa (raw, json)
Hash identifier:          NrsBT8QcYJN2g3g/wGeogjq2GB/2v+5fvuxY6q5EzR8=
Subject key identifier:   E9:79:A8:34:D6:9E:ED:96:3D:F6:9C:FA:C7:2E:18:5C:61:22:D5:46
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       01929E3B07C5C76F22614305FA6B6B397DE32979
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa
Signing time:             Tue 28 Jul 2026 00:40:05 +0000
ROA not before:           Tue 28 Jul 2026 00:40:05 +0000
ROA not after:            Mon 26 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.54.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9e:3b:07:c5:c7:6f:22:61:43:05:fa:6b:6b:39:7d:e3:29:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 28 00:40:05 2026 GMT
            Not After : Oct 26 23:59:59 2026 GMT
        Subject: serialNumber=2440aae323e3eb7a89ff9e8a273fbdd44322da61f79e7e5aa7f5f7bd4d989c0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:8d:86:2d:9c:41:5c:df:87:53:af:3e:4c:
                    bc:1b:11:cc:57:dd:1a:34:5f:58:5c:d9:39:d1:ef:
                    06:64:3c:dd:56:85:ed:74:a9:97:a2:e8:cd:6b:ca:
                    3b:4c:d2:b1:21:88:41:39:98:56:79:8d:22:2a:bf:
                    c0:c1:8a:78:d7:22:70:a2:60:8c:d5:a7:07:c4:9c:
                    b0:c0:06:be:2e:96:5b:45:51:fc:d4:c9:29:c2:19:
                    f9:2c:6d:f8:8f:4a:14:6e:d3:fa:d9:03:c2:7d:d1:
                    f7:20:19:ab:c6:c1:30:f7:f0:26:27:ed:fc:d1:33:
                    be:a0:57:e0:b9:cd:a6:08:f1:53:dd:2b:b9:bf:82:
                    f2:14:65:6f:2b:3e:35:e2:01:ea:78:34:99:fd:77:
                    d4:db:57:97:7a:f0:13:02:22:fb:66:c9:f7:a5:5c:
                    2e:0c:2e:66:45:3c:9e:ef:73:41:fc:51:17:ec:7e:
                    a5:04:24:74:8c:31:49:98:c7:90:1e:c8:70:7b:53:
                    db:03:18:4e:27:04:e2:ee:d0:2d:63:6c:0f:20:73:
                    16:8a:a1:7e:4e:de:70:90:e4:42:43:cd:38:91:3f:
                    22:82:e2:42:00:ca:bf:94:2c:9c:04:8e:f3:2f:12:
                    bb:ba:af:4d:94:1f:7d:72:9e:0e:9d:81:4d:34:68:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:A8:34:D6:9E:ED:96:3D:F6:9C:FA:C7:2E:18:5C:61:22:D5:46
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:76:c4:a6:23:3e:5b:e7:07:9b:a3:a8:0f:14:ea:42:b0:01:
         3c:0e:96:87:4e:3b:32:f3:c7:d6:57:f4:c5:34:c8:63:30:2b:
         64:41:fa:2b:c9:38:c5:81:a9:e1:6c:68:c3:fe:9e:a2:1e:b5:
         97:31:8c:0f:f1:71:6c:30:e2:41:59:e8:16:a5:f3:74:df:1e:
         f1:2c:ef:0d:66:bd:30:a6:33:4b:2d:97:4d:4c:83:7c:d6:72:
         55:bf:11:78:5e:70:bb:35:52:3f:2a:a3:c3:ef:e7:b8:3a:c7:
         71:2b:a9:ba:f8:f0:86:42:5d:af:8b:18:92:71:f7:3b:68:bb:
         d3:38:bc:17:7d:95:49:73:4d:5e:ca:a2:d5:41:76:58:26:77:
         12:c5:3b:dc:98:a2:e6:30:29:d2:1a:e2:46:7d:cf:a4:37:18:
         62:63:4f:39:2e:3e:9c:30:02:04:e1:30:d6:ee:26:d2:37:eb:
         ca:af:d2:bc:7c:ab:8e:26:82:e1:da:d0:71:e9:8c:b2:e8:15:
         53:55:97:b0:46:16:e2:82:d9:b4:d5:db:3c:d4:cd:0e:76:0b:
         a1:c5:d6:0e:04:b0:71:dd:1c:7d:85:69:5a:68:83:c8:4a:a5:
         1d:07:b2:80:bd:ff:47:61:d3:cb:36:57:90:e7:b9:01:bb:71:
         f1:a7:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:03:37 2026 by rpki-client