Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa
File:                     29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa (raw, json)
Hash identifier:          8f0aLrMlrBZT9HNaMUIU1TYuK+rrxF2WVnvzNdPeK0c=
Subject key identifier:   6D:C4:38:54:14:D6:D1:8E:D7:28:CB:FE:C0:9B:0B:0D:72:F0:89:3E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       17FA2FF0A9A182E97C94DDA437A8925B8BFC306F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa
Signing time:             Mon 20 Jul 2026 01:00:11 +0000
ROA not before:           Mon 20 Jul 2026 01:00:11 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        3.2.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fa:2f:f0:a9:a1:82:e9:7c:94:dd:a4:37:a8:92:5b:8b:fc:30:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jul 20 01:00:11 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=57929a727ea34135ea648ac11e3fb65ccb92b47c65d140c6b301ecf46b416c72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:1d:b0:e3:79:ee:76:c8:5f:16:53:11:5e:
                    84:92:3a:c3:34:5d:02:9f:38:8e:be:39:ca:ef:51:
                    d2:2a:48:a3:c3:93:04:ac:d1:fb:33:23:c5:f1:55:
                    f0:3b:6d:40:c6:b5:cd:7a:e8:cf:58:09:e0:29:0b:
                    c8:66:15:42:0b:8e:e7:60:b6:6c:6e:bc:e0:d2:90:
                    02:c0:fb:1c:31:c6:2a:c7:b8:2a:51:69:a8:b0:a4:
                    17:cf:eb:de:db:49:9e:d2:38:92:58:7c:c1:36:80:
                    f4:45:0a:44:1b:e8:af:b3:e1:d1:6b:93:bc:3c:41:
                    85:ad:ec:61:f3:a2:5b:7a:fd:29:95:e5:ee:d9:1c:
                    74:13:ac:a8:42:d9:e7:f5:3d:36:e7:f6:e3:ac:c5:
                    62:30:69:20:1a:42:62:08:26:2c:c7:1c:fd:ac:78:
                    c5:8f:8c:5e:fa:10:8b:91:d5:1b:cd:28:25:90:c9:
                    5a:90:d4:47:15:b7:48:c2:34:c6:34:6a:62:20:e5:
                    5f:6e:c4:7b:50:88:7b:42:90:5b:f5:f5:e1:28:ed:
                    bc:e4:cd:49:81:02:64:0b:89:2b:08:47:9c:30:10:
                    6f:4b:a4:44:2f:92:14:1a:f2:6c:c9:66:43:15:f0:
                    be:10:15:b8:8d:bb:90:9a:d9:99:71:74:34:9f:34:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:38:54:14:D6:D1:8E:D7:28:CB:FE:C0:9B:0B:0D:72:F0:89:3E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e4b5f5-27d6-4c8a-a3c3-4040815ac9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:10:60:71:8a:fd:9e:47:76:8c:3c:dc:fa:4f:09:d9:98:4f:
         18:67:cf:17:d6:49:b9:f7:6d:92:81:5e:a2:33:ab:96:53:24:
         c9:80:dd:eb:88:3c:77:07:20:3a:50:da:85:4b:6f:1b:e7:c2:
         58:b3:07:7c:a0:10:ce:36:fc:c1:5e:4d:13:98:f8:ed:b0:0c:
         2a:dd:35:19:d4:59:3b:e9:76:9a:0a:31:8e:3b:31:5d:03:35:
         82:ce:51:83:f3:21:4a:55:fd:89:21:0c:ed:2d:e4:d6:0b:54:
         12:10:f0:f7:a3:82:e1:79:46:58:d7:37:88:7f:42:cc:56:81:
         9b:a0:05:97:d7:85:61:88:7c:f5:55:de:e9:21:a1:e7:34:9a:
         66:d7:79:94:f0:93:87:7c:c9:34:d6:e0:ee:6c:42:9b:6f:ce:
         7c:18:c3:b8:62:cd:30:f2:ec:44:54:0a:e5:8a:49:ce:a0:0e:
         e7:4b:67:24:ed:71:e3:8d:39:95:14:e3:d5:21:78:0e:b8:b3:
         e0:c3:02:db:31:77:d3:a0:87:d5:72:6c:f8:a6:08:24:93:f9:
         4a:2b:37:6a:58:85:83:9b:12:e3:26:19:c2:22:1f:6b:57:eb:
         dd:d9:a5:74:42:38:25:02:41:85:7f:0c:e0:94:fe:37:76:af:
         6e:98:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:22 2026 by rpki-client