Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3e0dace3-0e2a-4252-8c92-4c7eec4c3588.roa
File:                     3e0dace3-0e2a-4252-8c92-4c7eec4c3588.roa (raw, json)
Hash identifier:          5QDju7bSUSvLfYhEkiHbaoguiRnXX/PcfGblb0U2wXc=
Subject key identifier:   62:CA:B2:C7:2D:22:9E:D4:36:7B:9F:A9:1F:9A:38:08:C7:A5:7E:09
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       4738583AE5F52D345200E0D9E79F9997DC96576B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3e0dace3-0e2a-4252-8c92-4c7eec4c3588.roa
Signing time:             Mon 20 Jul 2026 00:00:07 +0000
ROA not before:           Mon 20 Jul 2026 00:00:07 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:38:58:3a:e5:f5:2d:34:52:00:e0:d9:e7:9f:99:97:dc:96:57:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 20 00:00:07 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=1e7db75d7b5723c4beb2d9e0b7cdf495251c0c9aec2572d548197f5a07b7c3d4, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:20:7f:8d:8a:fd:fd:c7:3f:4d:fb:0f:97:
                    f3:3e:4d:c4:39:59:76:bf:6f:b7:c4:45:b5:90:5c:
                    da:8c:81:45:06:96:2e:f6:2a:99:f8:41:20:6d:b1:
                    0c:83:41:47:43:80:ad:66:c4:80:fa:cc:c8:68:1b:
                    f8:94:5b:51:fd:d4:8c:56:ba:9d:5b:73:df:b4:c7:
                    4e:36:f7:65:ae:d7:86:35:b3:1e:36:70:8f:55:a1:
                    df:72:4e:15:89:e8:ea:61:c9:b5:4a:a4:a2:ff:ee:
                    54:81:39:94:81:b3:79:15:60:24:97:2d:45:79:fb:
                    78:54:38:9d:c9:ae:25:c5:0a:da:f0:0e:13:1b:95:
                    19:ed:7b:c3:60:fe:7c:8a:a7:b4:cb:58:e4:3d:a8:
                    13:61:81:9d:26:77:3f:c4:f3:12:fd:cc:8a:c7:02:
                    04:97:28:c1:12:9c:7b:3e:33:21:92:0c:64:52:b2:
                    32:e5:44:11:0d:75:ba:36:8f:09:82:52:d8:11:4a:
                    0e:cd:c3:b2:af:75:4e:ad:95:fe:37:3c:16:40:11:
                    e8:7b:be:00:2f:d4:60:43:09:75:b2:be:3a:4a:81:
                    b5:74:29:d6:b4:19:d6:5f:c2:09:fb:22:2d:e4:f2:
                    1c:59:28:0f:9c:a9:cc:97:9d:15:29:51:34:26:f4:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:B2:C7:2D:22:9E:D4:36:7B:9F:A9:1F:9A:38:08:C7:A5:7E:09
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3e0dace3-0e2a-4252-8c92-4c7eec4c3588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:64:4b:9b:2c:8c:4f:4e:5d:af:d0:3c:18:5c:21:08:ff:1a:
         68:7a:62:00:3d:3f:25:6f:27:a8:10:70:69:62:82:6f:15:23:
         49:50:ac:90:eb:8b:a9:c3:fa:04:69:00:a1:95:9b:b6:7d:0a:
         a7:da:e1:5f:30:ae:20:7d:72:60:1d:69:e3:54:08:c0:fe:0c:
         8a:bd:b6:77:ee:3b:75:32:3b:4c:69:d9:39:ab:ee:1f:6b:87:
         3a:79:dc:c1:4a:52:88:da:09:95:9a:1b:4d:46:1e:43:47:b3:
         b6:0b:10:40:a8:fc:a6:e6:7a:eb:20:5b:74:a5:b7:c3:b5:56:
         bc:a8:d9:51:60:5b:16:49:9e:44:35:2a:5c:ee:34:3e:02:3e:
         f3:a8:18:f6:03:78:fc:e3:8f:4b:f7:0d:60:7d:92:33:b7:61:
         79:59:cb:ea:a1:01:34:b6:4e:b0:c4:1c:bf:a7:b6:4d:b9:6a:
         b4:90:dd:de:ec:6d:f4:52:31:51:9f:a8:11:c4:d2:6b:02:b9:
         78:ac:4b:b2:6c:77:8a:8e:4f:41:c0:d3:c8:af:8b:b2:c1:13:
         8a:3f:89:95:d2:8c:c5:ba:c5:b1:8c:15:36:38:33:36:48:68:
         3e:1f:05:2b:e1:6e:4c:b9:8e:91:3d:af:c9:a0:5d:80:30:3c:
         2a:3c:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:26:13 2026 by rpki-client