Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa
File:                     ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa (raw, json)
Hash identifier:          ZCLmoItY4XjopM4ROhdQycaLONPYYaEbbNpeJPFy4Cc=
Subject key identifier:   1B:6B:A7:F0:20:59:DD:C6:3F:02:1C:07:C5:A9:BD:8B:C1:3B:CA:10
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       644C6A1820F9AC3DFF2C132F55355427E4E1168A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa
Signing time:             Wed 05 Aug 2026 01:20:55 +0000
ROA not before:           Wed 05 Aug 2026 01:20:55 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.119.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4c:6a:18:20:f9:ac:3d:ff:2c:13:2f:55:35:54:27:e4:e1:16:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  5 01:20:55 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=e67741c69a78a20918a597b6ebd632dd3632a784935d75110f5fbe849526bfaf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:df:68:c8:0e:73:7d:61:71:73:1d:24:7a:
                    8d:25:8a:ad:3a:b1:97:93:9f:49:68:8b:d4:98:3f:
                    c7:9c:cc:da:83:f7:73:ff:2e:46:e0:d7:a1:8d:c3:
                    19:40:08:37:a7:2c:6e:dc:da:b7:12:0e:7c:f7:36:
                    db:aa:3c:33:5c:86:e0:54:3b:64:f3:59:02:59:f5:
                    57:b4:c0:27:10:73:8b:e7:c8:30:11:d5:0b:84:38:
                    e5:07:58:0d:d6:a8:53:e6:aa:8c:f4:ac:98:86:22:
                    a9:e9:b0:7c:60:a9:c4:cc:57:b4:17:ae:32:d0:cb:
                    5a:6a:02:c7:88:b8:aa:cc:f4:e5:67:43:c6:6e:16:
                    1f:3d:24:73:a7:2e:d2:55:f0:a7:fa:8a:ac:8a:91:
                    da:88:32:53:4b:17:91:c8:a0:14:08:56:c6:3b:c9:
                    33:03:5e:32:75:cd:dd:af:17:ad:42:36:07:63:6b:
                    dc:f5:35:a2:26:14:06:25:c6:bf:7b:a6:98:a5:4f:
                    e6:91:c6:07:4c:4b:6a:27:08:69:34:44:8f:8f:ca:
                    98:38:5c:88:3a:81:00:e9:36:78:8d:e5:ae:39:49:
                    3f:15:e6:32:ab:b6:15:ec:32:ce:1e:bd:8a:9c:c3:
                    1c:de:f5:7e:42:26:e4:5d:ec:2c:9e:72:c6:60:e2:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:A7:F0:20:59:DD:C6:3F:02:1C:07:C5:A9:BD:8B:C1:3B:CA:10
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:ab:58:d1:af:e7:df:3f:9b:b1:6c:64:ec:6b:0e:9b:73:
         b6:86:d6:bf:ec:70:5f:5f:7b:0b:46:b8:71:9f:be:d8:22:f0:
         8e:23:5d:6e:72:a7:fc:16:98:57:af:30:19:11:7b:09:e6:dd:
         fd:c5:a9:dd:71:10:7e:30:8e:0b:03:01:d8:db:35:a7:82:46:
         a8:cc:7d:a3:c5:d1:29:25:5d:d7:1d:23:c6:a0:dc:a2:c7:24:
         56:ae:88:df:6f:93:d2:35:3e:7f:8b:9f:5f:2b:82:21:e3:1d:
         e0:22:42:36:61:6c:3d:3d:5b:1b:fb:64:90:df:51:b2:d9:02:
         44:00:60:ed:fb:5d:a4:dc:39:fa:de:a7:90:50:b3:e1:56:3c:
         fc:c0:42:51:7f:ec:7e:75:e6:83:6a:ad:2e:a3:c4:2e:44:cf:
         0a:39:5b:f5:06:3e:ab:7e:52:35:58:df:d9:f1:c2:88:af:ac:
         77:bf:f9:11:a3:aa:d3:08:f0:d2:14:2e:2d:e8:82:ff:3d:ea:
         0e:4f:08:52:4b:ed:38:39:44:da:26:90:55:b1:16:ad:d3:3b:
         88:2a:8f:c7:04:f3:78:73:08:86:82:ca:aa:11:ab:54:d9:a0:
         47:ec:f3:92:44:8b:07:49:6f:1f:42:0c:3c:8c:df:38:01:27:
         c4:7d:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:10:14 2026 by rpki-client