Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f7c9df4-15e8-4f2f-bbe6-c454f297ec6d.roa
File:                     9f7c9df4-15e8-4f2f-bbe6-c454f297ec6d.roa (raw, json)
Hash identifier:          dZsDEvNlwDtzSRQvgqHGdkOqHrREjEUqrv0ruDPU5RU=
Subject key identifier:   51:75:83:3C:B1:22:AB:B7:CD:48:05:82:5F:FE:7F:9F:16:87:66:9E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       62091D5A0D110DAB7193F4F7F3966A3DAB368230
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f7c9df4-15e8-4f2f-bbe6-c454f297ec6d.roa
Signing time:             Wed 21 Oct 2026 00:50:14 +0000
ROA not before:           Wed 21 Oct 2026 00:50:14 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:09:1d:5a:0d:11:0d:ab:71:93:f4:f7:f3:96:6a:3d:ab:36:82:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 00:50:14 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=f32b252f42edc6368d8cf7b0be823db90270f4aba2137a3b5dde8f4203314b06, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:08:d0:a7:e2:ea:93:25:43:5e:cf:8b:47:
                    0a:5c:ac:5e:9f:27:fb:2e:e2:50:86:5d:fa:c8:d2:
                    89:b5:45:95:4b:5a:98:81:84:5d:ef:98:fe:eb:41:
                    d4:2c:ef:8a:5b:eb:4d:7b:b6:ed:1e:3a:c7:89:0a:
                    53:6a:44:5d:12:b0:fd:63:da:b8:4a:e0:8a:f0:50:
                    e1:f3:7f:39:6f:ee:52:61:23:06:fc:17:8c:03:89:
                    3f:28:b9:7b:ca:51:8c:60:47:8e:25:c7:77:d5:44:
                    e3:82:29:30:29:8d:97:e3:ff:90:7b:f3:42:d3:df:
                    24:43:00:53:0c:45:6e:3a:67:22:55:86:08:b7:63:
                    55:30:80:11:71:11:41:e5:e9:27:5f:8d:52:02:09:
                    97:1c:f2:09:65:d7:31:06:ef:86:0b:0b:eb:1a:5b:
                    23:a4:2d:bb:f1:54:ee:f5:83:e7:2b:f5:67:6b:a7:
                    89:13:a7:48:3d:87:08:a1:14:0d:d7:d7:2c:f3:d1:
                    fa:f0:a7:62:a4:99:a2:c4:53:d8:2e:ee:52:89:d6:
                    b2:54:4a:17:f3:c4:12:c4:01:3b:27:7c:dd:e9:36:
                    55:02:88:28:7c:d0:48:ff:df:df:c6:1d:5d:7f:c2:
                    18:62:26:ec:0f:8c:02:8f:70:d3:27:bc:28:b3:b3:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:83:3C:B1:22:AB:B7:CD:48:05:82:5F:FE:7F:9F:16:87:66:9E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f7c9df4-15e8-4f2f-bbe6-c454f297ec6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:f0:8f:e1:28:da:16:ad:44:ef:c5:9d:ff:0c:b8:0a:f6:
         ac:fb:ec:ee:99:04:b6:1d:22:32:9d:f5:43:37:83:79:f6:c3:
         16:68:e7:6f:a9:61:c5:cc:f9:f1:3b:74:40:55:47:ef:b9:8a:
         51:d1:be:89:1b:6d:0c:65:18:7f:57:b8:59:52:e4:75:19:cb:
         d5:68:06:ae:7b:f8:3a:5a:68:aa:1e:e2:b4:95:01:53:41:59:
         2f:5f:83:cb:bf:45:55:74:4b:86:ff:1f:c6:8f:2e:da:8b:c9:
         60:a8:0c:02:7b:d6:cc:5c:80:8c:8d:8a:2f:eb:cf:36:ce:1f:
         4f:e9:57:7d:02:51:16:e0:21:69:44:8b:1a:2f:89:9a:03:ae:
         06:2f:ac:21:05:39:28:24:61:b5:63:be:26:9b:e2:6a:0a:b0:
         29:ea:f3:f6:ba:3f:68:b0:c4:00:fd:75:f9:70:0c:07:ae:45:
         48:ab:00:c8:89:26:02:e9:bc:d7:4e:52:2d:71:68:37:51:99:
         31:b1:61:92:01:a1:e3:37:38:a2:9d:03:1e:5c:79:50:9c:96:
         1b:24:65:2b:a4:56:49:55:eb:be:85:ef:f7:f5:e9:a3:84:8e:
         5d:a0:10:44:75:a5:fe:61:e6:e4:53:3a:8f:60:6a:5a:34:ae:
         b0:83:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:12:05 2026 by rpki-client