Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
File:                     5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa (raw, json)
Hash identifier:          FbIiMnMqkp2T6dH0NsUc0QpVA6MmfCSnihL3vHRFrv0=
Subject key identifier:   E8:45:90:47:01:AD:97:F9:EB:91:B9:7C:47:D4:97:AA:C9:61:8B:D1
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       3481373D4290B3415EF6A3D0969DED11BD40C4EA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
Signing time:             Thu 22 Oct 2026 00:10:09 +0000
ROA not before:           Thu 22 Oct 2026 00:10:09 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:37:3d:42:90:b3:41:5e:f6:a3:d0:96:9d:ed:11:bd:40:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct 22 00:10:09 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=4a81588d872fbb1805a0149ac0f3e5f934a858aad25c0ea4eab5fcdd82002a4b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:85:e3:3a:99:45:6b:f9:cb:ea:3d:95:31:
                    42:3d:f3:2b:e2:56:ef:34:95:7f:8c:cb:07:9a:a1:
                    ce:e8:3d:d9:45:de:7a:46:39:d9:ed:36:63:7d:52:
                    b9:a4:a7:26:58:c6:f6:88:81:35:9c:16:89:79:72:
                    33:a0:71:ad:ed:90:44:30:86:63:98:20:7d:c6:56:
                    20:48:c4:73:57:91:0e:be:12:a9:cd:76:8c:ad:65:
                    2d:a8:62:ad:1d:0a:8d:73:4e:38:61:76:4f:36:2f:
                    36:aa:c9:b4:20:79:4c:af:a9:3f:19:e2:a8:10:30:
                    a0:b6:4a:cf:42:71:49:20:35:12:74:54:27:e7:5e:
                    25:13:75:de:f0:c4:e1:15:26:08:00:9d:4d:66:68:
                    0c:7d:45:c0:a4:b4:02:f2:2c:42:87:40:f3:3f:bf:
                    fe:ce:c0:08:3b:f2:a9:8e:a1:d4:70:22:f6:ca:84:
                    0e:1f:dc:be:c2:ff:93:0d:9a:32:37:5f:8d:04:5f:
                    e3:6a:7d:eb:fc:df:32:f1:68:bf:29:fe:0f:46:9b:
                    c5:54:76:b2:47:56:cd:ae:81:0e:6f:61:e0:6a:eb:
                    44:f7:16:28:04:f2:90:01:0c:de:7c:e5:57:1d:14:
                    57:7d:02:2f:50:94:e5:44:16:d4:1e:09:95:dc:9d:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:90:47:01:AD:97:F9:EB:91:B9:7C:47:D4:97:AA:C9:61:8B:D1
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:59:45:64:c0:88:f5:a1:2a:74:10:79:a8:fc:7b:97:1a:67:
         8b:a6:30:7a:ee:eb:55:42:0f:b8:59:e9:f6:ac:10:06:9f:1c:
         3b:be:0f:a1:37:dc:a0:7c:44:63:0d:75:5b:d5:bb:c3:0b:d9:
         98:e2:d0:9d:aa:3c:9e:e2:d3:18:a0:b1:36:20:ef:12:8a:4d:
         34:0c:28:7b:a2:89:08:72:b7:09:77:c0:e1:b0:4d:bb:1c:8d:
         b0:75:0e:3f:c6:9c:bf:97:c2:b2:fc:5f:17:36:54:3c:52:5f:
         aa:1d:b4:09:3d:2c:7e:8a:ba:08:a5:c1:b1:73:72:bd:78:1b:
         7a:a5:4e:e9:32:50:36:fc:6a:c2:48:52:97:ee:cc:44:1f:2f:
         67:5b:ad:1b:49:4d:4c:ed:dd:0c:0e:16:b8:4c:5b:31:db:f6:
         01:3b:61:92:12:cf:71:51:4c:20:18:30:92:70:13:5d:99:9c:
         26:e3:0f:5e:29:76:8c:db:63:f5:0c:1d:73:92:e4:56:b1:6a:
         ba:1c:d6:00:5b:cf:bf:a8:1f:1d:4b:57:4a:66:3c:a6:94:d5:
         88:5b:1d:4c:f6:52:ca:bf:e5:0a:ab:22:00:7f:1f:e7:37:c1:
         68:96:06:a2:74:62:d4:78:9a:ee:24:b2:7c:46:bb:49:34:5f:
         7b:ad:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 07:55:13 2026 by rpki-client