Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
File:                     5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa (raw, json)
Hash identifier:          tzue3u2qAcZBxcabrJZDWQ422NoRzxghcGFtSUTftyI=
Subject key identifier:   39:5E:72:FE:77:D3:43:01:BA:34:AD:98:11:D1:AC:AC:D7:D4:10:1A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       6CB61D867D9AA1B40AEA99516F70007CBB80D472
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
Signing time:             Fri 15 May 2026 00:10:21 +0000
ROA not before:           Fri 15 May 2026 00:10:21 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:1d:86:7d:9a:a1:b4:0a:ea:99:51:6f:70:00:7c:bb:80:d4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 15 00:10:21 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=4c6951e53313f08d16d104db4eb8dd276a4d0fc1dea5c21b4b092f30ad716954, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:31:54:6d:85:8a:38:bf:84:2c:5d:c9:e0:
                    c0:4b:10:47:21:d1:8b:9c:b0:41:e6:29:53:f0:09:
                    b3:ea:2a:8e:51:f9:42:48:25:35:26:97:42:e8:65:
                    9d:39:2a:c0:bb:63:c5:52:75:17:52:2b:6a:91:42:
                    aa:fe:ea:e2:e3:90:25:7c:1e:41:06:fd:b4:53:f2:
                    c4:9b:fa:9f:a8:42:ff:76:2e:4e:16:f8:f7:ac:9f:
                    dc:22:af:d0:da:39:e6:c2:25:bb:a6:a6:f8:9f:3c:
                    42:7a:41:d4:f0:4e:05:bc:06:70:e6:0f:b2:77:5d:
                    15:dc:5f:4f:fa:0e:1c:2b:8b:33:e4:2f:f8:94:c8:
                    18:7b:0a:73:67:1b:e8:12:ee:20:c8:5c:8a:69:b4:
                    87:84:6e:0f:fb:51:05:70:1a:a1:50:4b:6a:2b:88:
                    56:01:99:0c:7b:27:bd:05:a3:8b:a1:f4:6e:97:9a:
                    4a:31:d3:4f:3a:58:64:a1:ba:14:31:87:cd:64:45:
                    cc:d9:1e:9e:f6:69:1a:c0:66:95:50:70:2e:2b:a3:
                    5f:a5:a1:c7:c4:50:98:4a:db:94:e9:c7:60:24:49:
                    86:bf:7e:21:13:db:c7:86:1b:fe:f2:eb:f2:84:d7:
                    4b:50:2a:94:08:bd:9c:55:73:aa:44:8a:21:45:7d:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:72:FE:77:D3:43:01:BA:34:AD:98:11:D1:AC:AC:D7:D4:10:1A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:02:ca:8c:6b:be:2c:ef:62:57:e9:55:a5:e5:5d:d1:69:95:
         e5:b6:f3:6b:5c:49:75:e3:9f:aa:46:26:b2:9a:29:5d:a0:48:
         e4:55:c6:49:58:a8:88:9c:d8:48:65:7e:5f:93:da:f6:72:34:
         17:8d:a8:9e:d4:aa:a8:66:72:bc:81:b3:5d:65:41:53:a8:ea:
         2d:2c:cb:5c:9d:07:d1:7c:b0:74:4e:7b:ae:80:8b:63:4f:f4:
         70:36:7c:3e:f6:73:c0:cc:45:84:24:73:83:30:08:94:cb:7c:
         2f:7a:a3:97:2a:0a:28:c4:74:09:2a:aa:38:ab:8c:20:db:01:
         ac:08:c3:32:21:52:d4:f6:50:fc:b2:62:53:f9:d8:15:45:6d:
         0f:ad:9a:69:4c:f3:a5:a1:5d:c6:ff:76:34:02:96:58:b4:06:
         63:6e:48:d1:e4:b6:34:a5:e0:01:cf:b2:07:cb:91:7a:74:e5:
         2c:15:07:15:89:d9:7f:58:9d:19:1d:a0:91:12:a7:2f:fd:88:
         24:fd:ef:a1:c9:cc:d2:78:5a:4b:84:8d:33:fc:44:56:13:1c:
         ba:8f:52:ec:37:b5:3f:69:53:1d:9e:e7:c2:48:23:8e:47:11:
         6d:94:53:cb:76:60:6b:7a:3a:c6:a3:79:41:93:31:60:b6:80:
         4b:d0:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:59:05 2026 by rpki-client