Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
File:                     a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json)
Hash identifier:          h3l88mt9FfNd6lDFM1WkuBnDvDIp2a1cTp7aBIiOUiQ=
Subject key identifier:   DA:F1:FF:4B:92:2E:1E:5E:AD:CE:D9:76:F6:40:E4:52:F4:20:75:0C
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0A128FB07710CA682DD038F96AAE457DB411DF91
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
Signing time:             Tue 21 Jul 2026 00:30:49 +0000
ROA not before:           Tue 21 Jul 2026 00:30:49 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:8f:b0:77:10:ca:68:2d:d0:38:f9:6a:ae:45:7d:b4:11:df:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 21 00:30:49 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=7290f4e9989d38b5496d422ad6725f921dc511ece2af5d333ba6a035286cfea0, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:04:fc:50:0a:53:56:8b:08:81:74:f8:0a:
                    cd:4b:aa:84:e2:69:83:ed:64:c8:a7:99:43:d1:26:
                    76:9c:3c:4a:c4:f1:bc:ac:86:b7:3c:72:17:b1:fe:
                    ed:a1:f2:4f:15:80:69:f4:e9:78:ce:46:c7:f7:46:
                    46:23:3b:aa:55:bd:e8:11:0b:72:e9:78:45:4c:4a:
                    53:84:6c:bc:b0:a2:44:b1:46:18:57:65:db:28:13:
                    3c:82:80:64:b5:c0:41:0c:79:33:e3:88:b9:3f:bd:
                    31:fe:b7:17:66:ed:e2:db:5f:69:46:5a:41:6a:2b:
                    fc:e6:5b:52:77:ab:fc:46:08:a1:04:ea:4c:f9:97:
                    b4:fd:99:45:02:d5:66:50:37:61:f1:55:fe:c2:ea:
                    79:8a:e8:2d:c1:71:89:11:8a:c5:7f:7d:b6:ef:69:
                    98:e6:15:3a:77:7b:04:40:9b:86:f6:b2:81:70:8a:
                    2d:23:34:de:d6:5d:98:c8:8c:2d:5a:f4:db:e4:4c:
                    fe:aa:16:23:ae:a6:5d:25:61:78:8a:5a:2f:a9:01:
                    13:df:1e:61:29:2f:e2:8e:11:2f:16:3d:2a:a1:19:
                    43:2a:f2:db:15:9c:a0:61:d3:30:2c:23:b8:35:28:
                    17:53:5b:df:87:23:cd:e2:ac:cd:5e:be:fb:d7:ba:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:FF:4B:92:2E:1E:5E:AD:CE:D9:76:F6:40:E4:52:F4:20:75:0C
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ec:a3:f7:ac:6b:72:9d:32:ed:ab:15:56:12:e8:b6:28:06:
         c0:06:02:5b:df:52:a4:27:1b:aa:d4:a5:9d:4f:09:6f:a4:fc:
         3a:61:24:8c:23:72:77:59:05:d0:a2:6e:7e:12:57:31:e0:92:
         0d:fb:86:d7:da:ed:cb:84:2d:de:fb:29:93:59:fd:1f:4b:f6:
         60:d1:6f:05:55:a4:d3:04:bf:2e:bf:4f:20:db:a5:77:a8:5c:
         26:72:13:3e:6d:f4:12:18:54:47:c1:82:bc:e0:37:56:0e:d8:
         db:db:09:8f:fe:f0:58:47:80:c7:4e:14:57:d4:ce:60:db:7c:
         62:3f:8d:dc:2c:75:d5:b7:aa:8f:b1:c9:5d:96:70:e6:15:f9:
         4c:71:9f:ad:5a:34:58:58:9f:cd:be:3a:7c:bc:a1:25:38:8f:
         8f:30:d7:fb:90:f8:1e:b7:d2:72:f9:ac:6e:2e:56:75:da:20:
         13:39:aa:33:e5:b2:51:11:8f:0d:33:e6:9c:53:23:2d:b9:15:
         7e:2c:b3:e7:61:9e:7d:a3:28:a2:f6:b3:3f:b4:50:5e:5c:c1:
         86:46:5a:7b:b1:48:e4:f2:d7:eb:58:36:35:4e:12:6c:39:83:
         0f:17:f5:35:55:73:5b:b2:af:e3:70:cd:6f:3c:8d:51:48:a0:
         ef:f7:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:37:00 2026 by rpki-client