Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
File:                     74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa (raw, json)
Hash identifier:          c5icjhgkgrYFu9iUcPuRU5XJRZOms34q7ciYyMTCcPE=
Subject key identifier:   2F:0E:48:BA:43:41:4B:C9:5C:53:37:19:9D:9F:E8:BC:C0:C6:75:94
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1875C73C64454D5858F65069F0C03E48F5515344
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
Signing time:             Thu 26 Feb 2026 01:30:11 +0000
ROA not before:           Thu 26 Feb 2026 01:30:11 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:75:c7:3c:64:45:4d:58:58:f6:50:69:f0:c0:3e:48:f5:51:53:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 26 01:30:11 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=3e7e04ff1c4ae0246bde5b700f50cf210e4289068f49517a908cf6be9add5362, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:79:0f:73:29:b4:51:df:ad:ec:ae:8e:ae:
                    b7:08:e0:8e:c4:16:92:eb:47:de:54:9d:47:eb:3a:
                    59:a9:52:bf:9e:1e:8f:94:0a:52:02:3c:91:03:d2:
                    74:e7:f9:5e:c5:f4:31:13:0f:73:de:01:66:49:04:
                    37:08:51:2a:aa:4f:bb:ba:0c:4d:aa:8a:b6:60:c8:
                    db:fc:ea:f6:53:dd:b7:82:08:d7:a4:e0:f5:4e:29:
                    a4:b0:50:f5:f2:33:72:87:db:e5:78:82:48:78:26:
                    07:33:7b:23:8a:8e:70:c8:5d:3d:cd:55:bf:19:cc:
                    22:e7:4c:29:90:15:66:35:41:41:68:ff:d3:af:99:
                    a8:82:37:ee:2c:e4:6e:42:0d:e6:36:f5:ad:df:84:
                    d2:93:e7:83:3f:a5:eb:0c:79:eb:e4:69:c0:fb:17:
                    c9:64:d1:8d:69:af:57:28:e1:ef:6f:34:a6:64:90:
                    b0:f1:a8:4c:24:d7:b9:81:55:65:18:ca:12:86:5e:
                    b3:60:74:25:7b:da:1f:3d:ce:42:99:06:a2:9f:42:
                    a2:4e:cf:a3:bf:ae:17:95:58:e6:26:a1:8e:36:18:
                    9b:ab:24:de:d7:45:0d:d9:ec:a7:5a:65:da:90:13:
                    a5:00:fe:bc:df:0a:39:9c:ab:dd:54:51:e7:fd:09:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:48:BA:43:41:4B:C9:5C:53:37:19:9D:9F:E8:BC:C0:C6:75:94
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:4f:2e:0f:41:94:ac:1d:b2:2b:ed:4a:4b:4d:2a:de:60:08:
         3d:a1:0b:ca:3d:7c:b8:05:e6:10:43:d5:7a:c2:21:46:44:01:
         b2:53:5c:c8:fc:4e:6b:3a:cc:c6:22:a5:69:0b:0e:87:a0:bc:
         b4:84:ac:a8:4c:51:66:52:a9:60:75:9a:3e:f0:3e:ef:4a:ec:
         95:62:81:5e:6d:03:a0:50:71:e0:59:6a:13:68:59:31:2f:ca:
         0b:ce:fd:65:0e:1d:77:95:e0:13:f8:c5:9e:21:07:55:7d:99:
         69:c1:00:cd:f5:4e:02:cd:dc:c3:72:06:b4:15:99:9a:9c:b5:
         3f:f8:dd:83:db:2b:7a:b6:59:bd:59:a5:87:7c:d9:49:2c:5a:
         6d:84:23:23:ec:8d:0e:da:02:30:c3:f0:a9:92:fe:16:bc:f0:
         ac:18:c0:08:2d:e9:21:e7:e4:67:00:c9:e5:f9:34:32:19:fc:
         da:2d:24:06:68:ae:c7:f8:3d:aa:66:93:bd:e6:68:d1:55:e3:
         ad:9c:cd:ec:74:f4:ce:9d:e7:c1:9d:3e:f3:84:1a:30:6d:67:
         4d:83:01:2b:e1:59:02:3f:85:e1:d6:7f:d8:4f:03:01:0b:c4:
         34:ee:83:a4:62:9c:f1:eb:15:86:1c:73:7d:53:52:8e:d6:11:
         93:4f:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:29 2026 by rpki-client