Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6f85268-a02f-41ea-82fa-656cc0daf539.roa
File:                     b6f85268-a02f-41ea-82fa-656cc0daf539.roa (raw, json)
Hash identifier:          FRR+HYrs9E1MlB1LblTzeKN2Ue4UkhCW7A15hpckwWQ=
Subject key identifier:   15:05:17:F9:AE:2C:52:87:D5:B9:66:38:29:D4:54:4C:F5:3C:25:18
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       51A2C1D9ADFA3E1E29A53026246E59BF777419A2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6f85268-a02f-41ea-82fa-656cc0daf539.roa
Signing time:             Wed 16 Sep 2026 00:00:06 +0000
ROA not before:           Wed 16 Sep 2026 00:00:06 +0000
ROA not after:            Tue 15 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a2:c1:d9:ad:fa:3e:1e:29:a5:30:26:24:6e:59:bf:77:74:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 16 00:00:06 2026 GMT
            Not After : Dec 15 23:59:59 2026 GMT
        Subject: serialNumber=3fc62ea133922deab344a1179e5d51d020a5ddf78eb2196071c5e23bf9910dd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:e1:24:08:23:f9:99:e6:b9:3d:55:c9:c2:
                    8d:14:1d:8d:7f:66:af:31:b9:d0:f1:e2:58:1c:b6:
                    37:f4:20:88:8f:92:95:31:46:39:b0:72:55:c9:90:
                    37:40:1b:d2:17:78:9c:16:bf:c4:7d:3c:2e:4b:dc:
                    87:ba:1c:b5:c4:67:85:a8:6f:27:99:d0:c7:d2:af:
                    62:0b:5a:3a:0b:59:e8:19:12:de:28:72:34:c6:36:
                    99:87:f1:98:d9:f8:76:90:26:84:59:84:c8:df:e4:
                    fe:41:ed:a5:b3:17:d3:65:53:54:59:f5:db:64:68:
                    7b:63:00:0a:7b:1a:e6:3b:87:9e:da:6e:70:78:0e:
                    3a:05:17:84:c1:63:2b:6f:d1:2f:84:b3:e4:30:e1:
                    54:4d:1e:b2:04:95:28:35:9a:70:b6:7b:05:ca:da:
                    42:29:ed:cb:11:68:80:46:9f:98:0b:da:1c:6e:33:
                    f4:78:4a:d0:28:9b:fa:25:88:bb:5a:e9:d2:2d:b3:
                    93:ce:11:bb:ae:1c:28:d6:71:87:28:a6:cb:ce:df:
                    21:83:a7:fc:10:e6:15:9f:79:35:84:ea:13:5d:d5:
                    12:a1:2f:87:05:7c:87:c7:86:85:59:ed:17:9a:28:
                    c3:79:e5:bb:06:3e:17:7f:50:1f:3a:09:a9:ca:9c:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:17:F9:AE:2C:52:87:D5:B9:66:38:29:D4:54:4C:F5:3C:25:18
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6f85268-a02f-41ea-82fa-656cc0daf539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:11:5a:63:db:95:ce:e7:72:03:20:68:2b:78:2c:de:d8:
         46:73:93:c8:4d:a0:d9:22:09:d2:68:9c:69:6a:08:df:e0:60:
         b0:53:7d:2d:6f:d7:be:1f:46:0b:2f:a6:c9:a0:9f:a1:3f:eb:
         73:9f:63:04:d3:10:ee:21:f5:93:00:c3:60:95:3b:da:70:a5:
         26:6b:db:4e:37:16:2c:a1:1d:dd:21:06:35:27:75:a6:60:e9:
         65:4c:ad:29:cf:db:21:1f:5f:a6:a0:aa:8d:b2:3e:7a:8d:2b:
         1f:70:bc:cb:8e:1c:c3:01:3d:fb:0c:44:73:49:a6:01:e8:5e:
         ee:fd:27:12:c0:46:58:b9:5e:4f:63:06:84:f4:40:10:29:b4:
         e9:88:56:85:40:49:5c:50:0b:eb:7d:77:1e:24:1f:69:2a:7e:
         58:9c:f0:fe:7e:a6:27:8b:48:9f:83:01:39:0b:5a:06:10:ed:
         7c:5d:cb:50:e3:c5:5b:ad:10:a3:5f:ef:21:0d:34:9e:7f:d5:
         da:35:b8:bd:72:98:fe:39:d2:e0:96:95:23:bd:d2:d5:36:c9:
         50:0c:9f:46:61:40:d5:18:22:d9:fe:a3:4c:3b:f1:1e:a3:ff:
         1f:5e:11:0e:f0:1e:f7:b2:2c:76:aa:7f:14:93:8f:ee:e5:eb:
         f5:b6:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:26 2026 by rpki-client