Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa
File:                     f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa (raw, json)
Hash identifier:          WGZpPz4aLdU12dg9oTpeVnSKMjT7N/UFVFwt9od77fk=
Subject key identifier:   FC:B8:50:EB:BA:AF:37:0F:1C:3D:61:68:10:23:92:C6:F7:A6:71:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       76AF219ADAB4C8B1A7808D742621FEFD6FE019D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa
Signing time:             Fri 07 Aug 2026 01:41:00 +0000
ROA not before:           Fri 07 Aug 2026 01:41:00 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.152.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:af:21:9a:da:b4:c8:b1:a7:80:8d:74:26:21:fe:fd:6f:e0:19:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 01:41:00 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=cf8114ff2601d3685a3d668001c0dfb277212e07ade10c1693b6ed5edd00e3e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:17:77:e8:60:86:2c:48:b4:9e:61:fd:be:
                    ad:30:1d:7a:c4:c7:9d:94:76:b4:76:8f:4c:b9:53:
                    8a:83:1c:e2:9e:ad:c9:a5:53:df:53:f7:1b:80:8d:
                    b5:76:86:58:c6:49:4d:c8:f3:b8:03:d6:e9:08:1c:
                    f6:93:95:fd:b2:6d:bb:37:1d:14:8f:da:1f:28:3d:
                    04:7b:70:1b:a1:2c:09:d6:20:82:b7:85:40:90:f7:
                    78:3d:6b:d7:19:f5:00:30:e2:29:a4:d8:0b:22:b4:
                    31:99:b6:fc:1e:b0:e9:6d:81:17:e6:13:4a:0f:4e:
                    41:64:a0:cb:0d:7b:20:6c:6b:35:85:25:09:c1:94:
                    c5:5c:f3:a2:f3:6b:3e:12:d0:f1:70:a7:35:51:bc:
                    14:b5:91:d0:c1:73:ae:ec:bb:b8:40:9e:da:50:31:
                    e3:98:55:05:85:67:2e:c4:e0:ec:d6:1a:9a:7a:8c:
                    24:0e:73:d3:7a:3b:49:87:e1:94:01:67:f1:fb:4b:
                    50:c3:e4:5f:b9:31:c5:a3:83:aa:2c:25:3c:d2:62:
                    8a:ad:4c:7d:9c:e4:c3:38:44:18:c9:e0:9d:7c:9f:
                    72:9b:46:93:2f:83:d0:50:64:b6:1f:aa:b8:7e:41:
                    ea:74:96:71:2f:cc:18:78:02:0f:81:0a:25:b2:af:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:50:EB:BA:AF:37:0F:1C:3D:61:68:10:23:92:C6:F7:A6:71:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b1582c-aedd-46fb-b6f1-27e11dbfc7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.152.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:9b:18:92:b1:5e:8e:c8:c0:08:c9:c2:e1:28:64:01:3f:9f:
         cc:a5:09:c8:22:a6:fa:7f:ff:62:db:dc:a0:60:ab:15:5c:9a:
         bc:88:e7:20:74:b3:27:2e:ec:d5:b7:d0:b1:48:d5:33:12:49:
         b9:2e:50:2d:44:20:85:0a:1a:6e:cc:b8:fa:0d:a6:bf:24:49:
         30:c2:61:17:96:60:c9:dc:81:f5:45:d9:41:cd:7a:93:89:c6:
         89:37:c6:67:bc:e9:f3:03:c9:42:e6:48:01:27:45:33:41:0d:
         c0:aa:bb:27:e8:4d:ba:a1:13:23:74:f7:96:22:33:18:87:e9:
         d2:5a:00:dd:84:43:64:47:e0:ea:94:19:5b:c8:9b:c7:6c:c0:
         1a:b8:ce:4c:9d:54:34:ad:49:4c:41:1c:3a:8c:97:07:11:6a:
         be:a1:39:dd:cf:de:2a:f3:34:76:66:74:93:1f:95:36:a5:a3:
         b6:9e:52:88:3d:fd:93:43:1a:f7:ef:4a:b1:c4:7b:29:cd:b9:
         30:4a:e3:92:b5:8b:73:a2:fe:2b:af:68:a3:c4:7a:a4:76:83:
         17:dc:7f:19:34:2c:9c:c6:2a:f9:6b:d9:3f:7a:94:8c:ac:8e:
         97:17:c1:e7:92:9f:ea:92:10:fd:20:9d:e3:25:3c:f1:4d:49:
         8c:1c:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:22 2026 by rpki-client