Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/612e7950-1929-476c-a038-f2621b3e75d5.roa
File:                     612e7950-1929-476c-a038-f2621b3e75d5.roa (raw, json)
Hash identifier:          H8ycIPAaYo724U3ufgGX7bvslGmmi6cKCn+pxW2jhh4=
Subject key identifier:   BE:1D:D6:88:D4:55:0B:A2:D0:1A:B0:A6:5B:EA:7A:27:BE:C6:EA:9B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       060570B6FA6AC7F6464145041AB65A5E0E7676DA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/612e7950-1929-476c-a038-f2621b3e75d5.roa
Signing time:             Fri 08 May 2026 01:30:58 +0000
ROA not before:           Fri 08 May 2026 01:30:58 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        52.60.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:70:b6:fa:6a:c7:f6:46:41:45:04:1a:b6:5a:5e:0e:76:76:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: May  8 01:30:58 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=b1fdded785df6ba180274142b93fb2b28761b1a9a0d8ba791a2639afced5d1ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:56:fc:40:80:ec:5d:65:32:00:b8:4b:e4:
                    ee:8f:0d:1e:12:22:a5:6f:2c:99:5f:cd:30:34:41:
                    83:3c:d9:9d:4d:08:db:45:21:8e:dd:d0:12:ae:a0:
                    20:b3:3c:13:e8:62:f0:35:2c:b6:73:a9:e3:c5:05:
                    f4:8e:79:30:2a:0b:4a:c6:16:7c:1a:73:ef:cf:2e:
                    52:6a:dd:1a:99:60:4c:ec:af:d6:7e:9b:55:0b:e4:
                    39:3d:b0:54:ec:7e:ea:3e:b7:8d:0c:f4:e7:57:d7:
                    da:52:60:b2:b8:0f:7d:da:e4:df:09:d9:ee:6c:91:
                    3a:7f:b0:0e:fb:59:00:89:a2:19:10:4e:af:7f:ef:
                    c7:3a:ec:d2:b5:47:da:e4:24:cb:45:e8:8e:16:ee:
                    38:cc:9a:75:40:02:3a:9a:4a:a4:31:04:f1:e1:4c:
                    4b:ec:25:dc:09:c0:f8:81:0d:f0:51:6b:12:b3:58:
                    11:6b:b7:e0:6c:e2:f2:39:d9:80:f6:cf:60:26:ac:
                    07:79:de:5f:0c:9f:42:52:d7:15:bd:e1:11:62:10:
                    cb:e4:6b:5e:f2:80:5d:a9:01:cc:1d:53:42:a4:ce:
                    51:bb:af:d4:0b:be:16:95:f8:c5:a6:7e:e2:3d:56:
                    15:64:45:8a:ef:e5:ee:8d:39:44:eb:9b:a2:26:28:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:D6:88:D4:55:0B:A2:D0:1A:B0:A6:5B:EA:7A:27:BE:C6:EA:9B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/612e7950-1929-476c-a038-f2621b3e75d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.60.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:13:56:7f:3e:b8:d6:6f:62:38:15:53:55:25:b8:4d:29:
         69:ef:e7:75:e6:c6:c2:1c:3e:4e:a1:f5:69:6a:b3:e0:b1:f1:
         0b:4e:61:9f:d6:b5:67:ec:bd:09:cc:ec:f3:4d:d5:ce:e2:d5:
         3f:36:b2:d8:62:fa:ae:d0:bf:19:72:ca:c1:46:05:64:79:67:
         14:76:80:e3:ae:82:8f:58:54:f5:25:a5:ea:c7:5c:27:09:87:
         4b:4d:ef:86:6a:e7:ff:6d:0f:d3:95:d9:8d:51:36:0f:3f:fd:
         ba:c6:e7:65:98:c7:81:4e:3f:ff:13:ab:06:a4:60:ec:cf:31:
         a8:7f:a9:0f:4b:8a:6c:30:83:d4:ff:23:91:00:b8:e2:ab:84:
         d9:38:1a:b3:80:e4:6f:a9:cd:7e:e0:f5:a1:31:1d:84:b3:7f:
         4e:84:59:c8:23:27:d6:72:d6:19:2e:dd:ef:ed:21:2b:f4:fc:
         9b:29:8d:fd:27:6a:b7:92:ec:7c:ac:fd:53:ff:4e:9d:a1:ef:
         00:5d:7e:f7:e3:75:3c:2e:10:f0:33:5a:11:ac:a0:3b:10:88:
         c0:c8:db:3c:b0:1b:36:1f:bc:44:81:af:09:39:88:5d:62:19:
         a7:c6:71:33:57:86:c9:55:fe:3a:00:7d:64:47:2b:01:6d:d7:
         8b:32:e7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:40 2026 by rpki-client