Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee989803-71c3-46b2-86a1-9cc67d2d0fcb.roa
File:                     ee989803-71c3-46b2-86a1-9cc67d2d0fcb.roa (raw, json)
Hash identifier:          +GUcGWD4eTcVufTVV/McvFwTWb+4sZ2j/IFL60xbkcA=
Subject key identifier:   92:2B:48:C7:69:99:4C:2F:8D:56:E6:7F:7E:C3:65:5F:53:B1:BD:44
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2761A31ABDC31949F83A8E6DBAC0A340C5F36419
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee989803-71c3-46b2-86a1-9cc67d2d0fcb.roa
Signing time:             Mon 03 Aug 2026 03:20:32 +0000
ROA not before:           Mon 03 Aug 2026 03:20:32 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        54.193.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:61:a3:1a:bd:c3:19:49:f8:3a:8e:6d:ba:c0:a3:40:c5:f3:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  3 03:20:32 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=817bc2167fd69ef283031951e508b35ce89c26b2a7b6ad822726168e50d43beb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:8c:c4:0e:47:1f:1e:92:a6:c2:0d:bc:32:
                    48:c8:f6:d5:78:62:33:2c:f0:8c:8e:2f:bd:9f:25:
                    1f:24:36:cb:39:d9:64:2e:ee:99:22:3b:10:8a:fb:
                    d7:00:3f:97:02:4a:8b:55:5a:f8:02:4b:57:30:08:
                    bc:f3:28:83:15:85:7c:35:7d:8d:d2:12:ac:92:71:
                    f1:3d:8e:72:26:72:ef:b4:ca:87:64:22:69:ef:53:
                    1b:c1:30:af:93:5c:94:7b:5d:2a:58:34:cc:f7:aa:
                    bd:ad:f3:17:c3:36:47:83:10:b9:74:16:af:89:ae:
                    2a:d1:ee:d7:f8:51:be:1e:eb:11:fb:88:65:e1:4c:
                    2b:44:d8:d4:df:56:a3:59:41:4c:fa:65:08:a7:aa:
                    3c:31:87:09:58:4e:97:4a:3d:7c:ee:87:23:e2:a4:
                    74:6a:a9:41:6e:2e:b0:c8:3c:14:e8:c1:d0:8b:3b:
                    ec:ce:14:ee:56:ad:84:d1:dd:41:bb:b0:16:11:9c:
                    0d:ca:98:98:29:57:3c:6a:e1:1c:45:c4:d8:53:8a:
                    24:9e:a1:da:1a:0f:b8:37:4d:53:83:ac:86:6e:04:
                    14:73:12:a4:1f:16:a1:a4:84:c0:b9:28:4f:da:ed:
                    43:28:3c:26:ed:14:35:bc:b3:02:2b:b7:be:db:fa:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2B:48:C7:69:99:4C:2F:8D:56:E6:7F:7E:C3:65:5F:53:B1:BD:44
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee989803-71c3-46b2-86a1-9cc67d2d0fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.193.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8c:97:6c:9f:4e:fe:25:b7:44:8b:3b:60:fa:47:d9:f7:42:e4:
         cf:7e:b1:5a:35:14:02:45:2f:b3:c7:c7:9c:66:cd:05:c1:f7:
         13:b7:d9:54:14:34:fe:e6:ee:34:1a:e8:5c:cf:76:65:e1:83:
         c3:25:7e:c0:a5:f4:2f:1d:50:b9:ff:5e:2e:1a:52:60:a5:c7:
         0f:f3:fd:a8:be:bb:cc:08:c3:da:e6:fd:fd:d0:fa:66:16:94:
         e8:50:98:f8:9f:34:74:fa:75:a0:f7:aa:53:28:00:e9:21:61:
         eb:4a:81:8b:ae:3b:c6:1b:db:20:03:9c:38:17:cb:7b:db:50:
         04:aa:08:60:c6:f5:28:70:c7:7b:a6:92:e3:ba:81:11:c6:8c:
         53:7a:00:06:dc:9e:bc:3b:84:71:ae:be:f7:0d:20:64:a6:b0:
         cf:dc:39:c0:06:f4:80:52:90:bf:cc:83:9d:6e:15:1c:99:16:
         c0:70:8c:55:52:46:b7:f6:56:0b:a3:74:89:f3:c8:6b:73:0b:
         30:bc:a9:9e:1c:96:6b:dc:49:3f:30:f5:01:80:c0:46:2d:01:
         6d:a3:55:a5:f3:4f:95:81:c3:85:13:26:10:4f:6c:f3:e9:b5:
         68:45:25:48:ef:b2:b2:1e:89:90:d8:12:ab:93:d7:ff:4a:9e:
         ed:8a:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:42 2026 by rpki-client