Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa
File:                     b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa (raw, json)
Hash identifier:          +HMwScPVRrB0zjPEXsSk7qslbO69tdw2gWBhbjynpEs=
Subject key identifier:   4E:F5:78:33:7B:60:3E:38:85:A9:43:DD:82:F9:BE:37:03:E0:39:52
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       764A714B24B70025D206C06A1A1E7A7DD0DE5331
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa
Signing time:             Fri 07 Aug 2026 03:30:35 +0000
ROA not before:           Fri 07 Aug 2026 03:30:35 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.95.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:71:4b:24:b7:00:25:d2:06:c0:6a:1a:1e:7a:7d:d0:de:53:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 03:30:35 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=b294029605babc106a59569483272e1d634d0277f57d190093cc43a03de45a43, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:97:05:56:02:67:89:7c:23:84:3c:d4:b3:11:
                    69:3c:61:63:40:a3:b1:57:eb:0a:b9:e9:1c:8b:51:
                    d4:f7:20:e1:5b:4f:83:0a:d1:8f:13:8e:a4:4e:e7:
                    83:32:14:fc:8a:83:f7:72:36:b8:3f:89:2a:a3:92:
                    cc:4b:f4:a2:e2:f8:30:21:6d:8f:c4:ee:45:a9:27:
                    4f:8e:05:85:4f:d5:1f:a7:58:d2:65:16:47:f0:c3:
                    b7:4b:c6:cc:21:e9:2d:a9:ad:91:b0:1c:be:db:62:
                    00:a1:5a:af:96:4a:9c:79:d3:bd:f0:91:d8:e9:6f:
                    82:c9:a7:77:53:25:b9:e0:5d:82:e3:84:9d:c9:d8:
                    1d:53:3a:34:75:3f:db:db:13:51:36:df:11:61:9c:
                    f7:df:e2:72:10:09:b8:a7:1d:36:47:06:bf:f0:cd:
                    f5:32:b2:e5:5e:05:50:71:8f:c2:6e:ef:99:e2:28:
                    63:f6:80:dc:42:e8:23:ce:a9:20:cf:35:10:32:7b:
                    fe:7e:b6:95:44:56:f2:5a:6b:a2:4a:18:8f:0f:d5:
                    7a:5d:5e:73:e8:cd:8d:48:63:7a:bd:0e:73:75:cc:
                    86:f7:20:26:c9:9c:0d:74:d9:03:62:68:65:95:38:
                    3d:c4:00:af:3d:b8:9b:f7:53:1a:1e:bf:60:f8:0a:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:78:33:7B:60:3E:38:85:A9:43:DD:82:F9:BE:37:03:E0:39:52
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6fcfcee-8141-4ef5-95ca-3ea2875c3e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:1f:6f:96:2a:a0:15:e5:c5:6b:fb:a9:10:8e:ed:d8:4d:
         c3:f9:6c:05:e4:b3:54:03:23:e4:4f:d4:48:3a:0a:61:e1:2e:
         bc:63:b2:57:6b:83:bc:0e:a7:f0:c0:b8:8a:73:b6:42:f8:62:
         0a:b1:c1:b3:d3:6f:62:fe:b0:91:59:e3:01:3c:a5:35:77:42:
         f9:3a:d3:83:3a:7a:09:5f:25:5c:51:4a:9b:e1:f2:53:ca:ad:
         a5:03:eb:9f:37:00:aa:b5:fe:ce:ad:bd:c1:0b:e4:a0:5a:5a:
         e2:9b:9c:1e:b3:d4:7d:01:3e:85:39:e0:d3:8b:f7:19:37:ea:
         a7:31:bd:06:bc:70:4a:4c:1b:36:59:1e:64:ae:e6:15:ad:87:
         45:45:9e:41:fa:6a:a5:84:aa:34:c8:b2:49:6c:98:db:60:89:
         7e:1d:1d:d6:d7:94:00:6b:2e:45:58:d2:89:d3:ca:2a:46:39:
         79:24:6b:f9:d6:07:b4:7d:d6:22:dd:1c:23:63:a5:f6:6e:d7:
         0f:67:0a:cc:22:6d:2e:7b:de:a1:2a:05:00:e0:3b:00:8c:d3:
         75:94:61:14:52:0d:a2:4b:25:b8:1d:9f:bc:98:fa:d3:85:59:
         17:c5:26:f6:40:20:38:7c:50:27:d5:54:46:84:46:6a:07:a9:
         b2:23:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:10:26 2026 by rpki-client