Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa
File:                     52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa (raw, json)
Hash identifier:          cEhMqp0Yf5LaCvIp4uLaId01pgz8qQSLr/5HBIw097I=
Subject key identifier:   72:27:BD:BA:3A:1F:CC:37:BA:5F:94:F6:DC:99:0C:C2:2B:1F:EB:DF
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5937E8FDA3174544F9C4B865074B4BDB81DCCE46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa
Signing time:             Sat 28 Feb 2026 01:30:56 +0000
ROA not before:           Sat 28 Feb 2026 01:30:56 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.172.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:37:e8:fd:a3:17:45:44:f9:c4:b8:65:07:4b:4b:db:81:dc:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 01:30:56 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=212369fe663eb7a9175f82283abcda2fe04a4b7983f4b91c5ed5fb6e97879355, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:64:f4:d7:f9:42:1c:c3:81:77:56:e9:4b:
                    15:a2:35:fd:a2:f9:76:d1:03:f4:8c:08:8a:11:31:
                    7b:b1:2f:b8:78:09:2f:b8:e8:0b:52:6a:d1:4f:fa:
                    23:f5:8a:6c:bb:5b:58:ba:42:2a:72:37:cd:e2:0d:
                    2d:32:da:81:85:0f:1c:b0:3b:8a:c7:cb:23:c9:29:
                    bf:7e:84:5a:62:94:73:83:b3:e2:0f:94:13:c8:4a:
                    ee:7f:58:28:9a:6e:09:ce:b0:84:f9:d4:2a:5d:8f:
                    fc:5c:7d:57:26:27:a2:6b:9a:69:ba:ce:ae:d0:2d:
                    2f:ac:d3:3a:3d:d0:f8:b4:b6:68:cc:71:fc:8f:2e:
                    02:25:1f:90:ea:10:6a:80:98:df:b2:68:4f:a9:44:
                    c5:69:bc:08:b7:e7:c2:3d:95:bf:8f:29:e8:0b:52:
                    ae:19:3e:c7:36:23:ba:84:76:c2:2e:5c:94:d3:3c:
                    97:70:a7:6e:41:18:e4:bb:9c:36:56:ff:a8:83:ae:
                    18:5e:7c:6c:a5:65:5b:24:54:90:18:73:ee:d8:d0:
                    6f:36:7d:45:65:7f:f7:a2:e3:5c:6b:c8:7f:32:64:
                    2c:f1:2e:ed:b9:5c:bd:8e:5b:22:8d:69:af:3e:0e:
                    2b:e1:e9:45:63:19:d7:e8:5d:25:a5:1a:95:82:74:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:BD:BA:3A:1F:CC:37:BA:5F:94:F6:DC:99:0C:C2:2B:1F:EB:DF
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.172.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:06:58:00:3e:04:c8:a6:8f:99:dc:4f:86:89:57:b9:d3:
         22:5a:13:b1:f7:57:2c:30:4f:b7:81:76:ed:b9:e0:4b:ab:b5:
         61:a8:b5:de:86:54:6b:67:33:3b:3f:a8:2f:1f:d3:8e:c4:0e:
         3a:51:5f:e4:a0:28:2a:80:43:b8:2d:c6:f7:87:f4:7a:ea:0e:
         ee:b7:c2:65:48:c8:fe:cb:07:30:7a:63:67:cf:96:2d:95:ea:
         88:79:ef:d3:3c:8e:8f:82:0a:81:82:2e:a5:30:4c:97:40:a8:
         e6:ce:83:27:f6:95:05:a8:57:93:05:d1:3e:f6:50:8a:23:6d:
         ee:1b:a0:ca:54:77:fb:0b:3d:c8:ba:0f:a4:7f:77:80:37:a9:
         a8:78:4d:26:1d:ab:cc:40:bf:0c:b3:ea:fa:e8:ff:e2:c9:97:
         76:ba:f9:b3:a2:c6:31:11:f5:26:03:60:55:0a:76:5d:a9:f4:
         b5:df:8d:a6:a2:ea:84:db:ac:2c:f1:f5:a0:01:96:bd:da:28:
         d5:98:cd:da:64:0b:28:58:53:49:21:64:48:96:b3:1e:41:ee:
         42:66:51:68:08:fc:30:6d:a4:19:27:e1:0c:b4:7e:71:ec:ea:
         00:a4:5b:e9:5d:5e:58:32:f2:33:af:1d:44:25:56:cb:6d:36:
         82:6e:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:28 2026 by rpki-client