Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b663720-077c-41a7-8fe2-c73d5f8c253d.roa
File:                     1b663720-077c-41a7-8fe2-c73d5f8c253d.roa (raw, json)
Hash identifier:          poYvHh5Z/oOJEiN/kqNHshZkuZZShjYiqylfpLwOAEs=
Subject key identifier:   4E:78:75:21:4F:74:15:17:62:A3:16:D8:70:C7:C3:E0:A9:6A:59:40
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       15EB4340D8B19A50C4B7D2EC75DFA45CFD19FC15
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b663720-077c-41a7-8fe2-c73d5f8c253d.roa
Signing time:             Sat 24 Oct 2026 01:31:08 +0000
ROA not before:           Sat 24 Oct 2026 01:31:08 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:eb:43:40:d8:b1:9a:50:c4:b7:d2:ec:75:df:a4:5c:fd:19:fc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 24 01:31:08 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=1cc24f11b7d5906a5e1b52edf8f4c3ed94de5b9d34923b8768cfaca698b58f2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:f3:25:71:74:6a:12:02:89:23:de:f6:5d:
                    04:bc:f3:77:a3:9b:ef:d2:45:20:0f:f0:a1:83:bf:
                    c1:ee:e8:51:2f:81:07:15:31:b4:b6:59:de:3d:82:
                    03:00:80:e5:5d:ee:c2:92:c7:77:43:90:d2:16:bf:
                    73:9e:cd:82:81:ec:02:46:9e:32:4c:3a:5f:23:2b:
                    fe:7e:37:21:0a:6b:2b:76:aa:ef:16:be:72:90:e8:
                    64:5d:e2:91:c3:0e:3b:71:38:7a:1f:57:9a:8f:7d:
                    29:71:08:98:54:37:be:fe:14:7a:83:5a:85:23:6a:
                    26:e4:46:64:9e:8c:89:16:8a:50:bb:b6:66:7a:7c:
                    9a:e8:e6:d9:24:92:e9:49:cb:f2:c0:30:56:d6:40:
                    13:28:0c:7e:6f:fc:7c:31:7d:10:34:e2:9e:93:77:
                    4d:8f:14:76:ea:a3:ab:dc:41:06:90:85:ee:91:22:
                    10:b0:28:ac:8d:c8:ec:75:64:2f:79:5f:c5:d6:40:
                    3b:6d:8b:6e:d7:eb:24:4f:e4:77:db:7a:9a:12:4d:
                    62:49:ed:db:45:c4:2e:8e:72:87:ea:8f:e6:b5:47:
                    1b:43:92:95:9e:12:f9:ab:14:9f:6f:43:7a:7a:1f:
                    b7:42:b7:6a:a2:ed:12:0b:99:f3:0c:4e:c6:c5:39:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:78:75:21:4F:74:15:17:62:A3:16:D8:70:C7:C3:E0:A9:6A:59:40
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b663720-077c-41a7-8fe2-c73d5f8c253d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:47:1d:b1:dd:d0:37:93:48:05:c5:0b:db:5a:2b:20:5c:
         3e:be:67:01:08:4d:13:c2:5f:79:5e:e5:7e:8d:b6:38:72:a2:
         37:b0:3f:e9:84:e8:f6:be:90:2d:6e:70:5b:05:af:d8:40:d9:
         21:71:a7:4b:00:79:f0:8b:06:09:9a:4b:09:37:ca:55:ca:25:
         3f:5f:8c:10:1c:6f:58:90:0c:fc:27:ac:73:d7:45:7d:4f:14:
         8d:e7:14:1c:7f:86:96:2a:dc:8d:bf:cb:23:9f:d0:32:da:0d:
         b9:51:42:4e:b7:66:69:3d:72:47:7e:26:46:e9:77:04:68:8a:
         43:eb:33:e4:d8:0a:18:98:f5:ca:98:43:74:c0:42:31:56:81:
         7a:b7:76:2f:31:9a:0b:ed:f3:82:63:3d:d4:1d:7f:fd:74:55:
         a8:0c:f6:a7:69:17:61:36:1d:f9:20:60:57:29:05:67:d6:6c:
         0d:7f:f1:7e:51:f0:05:6f:6f:d1:db:f3:6e:a5:ef:68:30:05:
         0c:99:e3:aa:c0:d9:ca:fc:45:0b:36:6b:b1:db:b8:9b:e2:25:
         32:34:16:0e:08:5f:7d:c2:a8:f8:1d:5d:00:b8:84:e6:65:76:
         47:8c:4d:6e:22:9e:f2:d1:e9:5c:3e:fa:2c:84:80:9a:9a:28:
         42:e7:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:54:21 2026 by rpki-client