Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa
File:                     0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa (raw, json)
Hash identifier:          8AfLJpMgApHQx8zL5gk6FfWKpKojekO4ziHuCw0op5k=
Subject key identifier:   9D:BC:9F:69:58:6C:66:6D:5C:9F:4A:A5:31:3A:F1:53:39:9D:13:2D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E6306CA92FD6317C889E8D055B752ED84E04198
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa
Signing time:             Wed 22 Jul 2026 00:32:00 +0000
ROA not before:           Wed 22 Jul 2026 00:32:00 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2968::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:06:ca:92:fd:63:17:c8:89:e8:d0:55:b7:52:ed:84:e0:41:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:32:00 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=4312d75ac29888ddb027c20c9c7aa9151c9df1a70698f866aa843f420db0a111, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:08:10:77:cf:3f:4b:5e:04:54:eb:cb:84:
                    62:3c:b9:c8:53:5d:d4:6f:64:ac:58:1e:20:ed:b6:
                    6a:22:bb:0a:5e:64:b2:23:10:ef:04:a2:fc:ed:1d:
                    a7:a0:54:44:22:d7:1e:97:af:09:b2:65:61:81:52:
                    5d:18:44:7c:c7:88:de:f4:cd:dc:44:cd:58:c0:5a:
                    c6:7f:64:5d:7d:8a:f4:a3:eb:8b:1a:f9:ea:cd:30:
                    89:14:6f:01:f1:36:05:b5:61:1d:09:3a:be:03:77:
                    7f:61:c6:d8:bc:a3:32:d0:d1:0b:96:5c:6a:db:c9:
                    9e:ba:8d:16:32:2d:e7:52:99:91:e9:c6:07:3a:ba:
                    db:51:4a:aa:5b:85:6f:94:ff:3a:bb:4e:f4:e2:5d:
                    1a:f6:af:c0:2b:65:7c:59:fa:e5:54:1e:4e:2f:a7:
                    a5:b7:61:c4:39:97:44:d5:50:0b:b8:c9:08:76:61:
                    f4:72:9b:ca:aa:f7:c0:69:08:8d:60:3b:f2:94:18:
                    8a:fd:26:b5:0c:3f:3f:98:e6:36:e5:af:44:0f:57:
                    8a:49:66:08:db:aa:ca:68:97:89:be:48:7a:ff:5d:
                    0f:22:17:30:1a:6e:63:d7:6a:ac:7a:36:ca:2b:82:
                    61:99:cc:2d:19:07:44:c3:4a:88:47:0e:fb:e8:5a:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:9F:69:58:6C:66:6D:5C:9F:4A:A5:31:3A:F1:53:39:9D:13:2D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2968::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:c8:5a:4d:d5:de:af:18:35:38:a7:20:90:66:26:65:e9:
         2b:6b:b4:b1:39:82:cd:bd:b3:c2:51:24:c7:68:4f:b9:64:fe:
         91:45:bb:6b:79:d4:92:54:66:3a:5b:06:9b:88:1e:d3:af:18:
         5b:32:b1:0a:4c:99:76:05:c7:31:f3:c8:1c:85:6a:5a:7b:fb:
         4b:68:bf:47:d6:12:8b:5a:c2:04:e8:c4:6c:6c:a9:13:20:33:
         b9:23:26:e1:15:59:85:94:e1:94:ca:a7:fc:ab:e1:60:6a:93:
         9b:89:a9:1a:45:0d:96:1a:0b:c1:5b:2c:ea:50:5d:38:8d:43:
         a4:89:42:a1:df:1d:1a:85:7a:b4:4b:3a:4a:1f:63:b4:c9:8f:
         31:e7:8f:32:d8:94:58:31:62:2b:f3:ba:0f:d0:fa:48:e3:37:
         18:b5:b1:e8:8a:72:70:59:b3:d1:e7:81:64:45:44:04:a5:04:
         e7:c7:c1:9f:1b:bd:26:70:74:3c:fb:24:1e:10:1c:72:40:9e:
         10:87:de:2a:67:a6:12:2f:ee:62:79:f3:28:7b:96:7f:23:2d:
         55:e6:6c:ff:45:a0:88:33:75:42:4b:38:e6:06:4a:e9:d9:c7:
         84:d3:c3:6e:77:15:7f:6d:a8:a0:1b:15:3e:7f:fd:2a:d0:37:
         16:ba:b3:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:30 2026 by rpki-client