Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064d874f-7480-4f56-986e-d2324d6402a9.roa
File:                     064d874f-7480-4f56-986e-d2324d6402a9.roa (raw, json)
Hash identifier:          TKyatoxTUCVp2YvREHZI0zTBVIyet0EYiLN7dVmFQ9M=
Subject key identifier:   EA:B3:32:1D:23:45:D4:60:50:98:A8:1E:1C:31:2D:EA:0D:24:36:A9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32EDC2C8BCF5472326FDA10F1ED42E2B3D0004A3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064d874f-7480-4f56-986e-d2324d6402a9.roa
Signing time:             Thu 23 Jul 2026 03:01:18 +0000
ROA not before:           Thu 23 Jul 2026 03:01:18 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a58::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ed:c2:c8:bc:f5:47:23:26:fd:a1:0f:1e:d4:2e:2b:3d:00:04:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:01:18 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0780a0d01709e22b055282b9c1b6c9bbc515617572e0696026330a54f068919d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:0a:3c:cd:c7:f6:88:f3:83:a3:90:b3:70:
                    8a:f1:32:8d:09:3f:67:a4:86:b0:a4:b0:f9:8e:64:
                    60:d2:68:13:8f:b3:83:b1:2a:1d:15:8e:98:65:c6:
                    ed:fd:2b:d1:32:71:2b:e2:d0:62:65:62:e1:0c:c4:
                    8d:e6:1a:99:5b:38:5f:17:35:5d:04:07:b3:f4:95:
                    7e:04:0d:a0:19:be:09:51:d5:f2:e4:5e:9c:9f:55:
                    0c:2d:55:49:fe:33:53:ae:0d:de:90:5f:9e:b9:ee:
                    d0:c9:15:96:60:48:a8:58:4d:44:76:ac:d2:00:9d:
                    41:9d:ba:d3:05:0c:71:1f:e7:c3:b5:55:67:0a:09:
                    a8:12:ec:1b:85:0d:85:e4:ae:be:61:49:53:14:16:
                    f4:68:4f:87:8b:27:be:c6:50:80:2e:ea:60:83:a0:
                    09:1d:4e:20:ec:79:f7:3c:12:bd:39:d1:95:54:51:
                    7d:74:3c:36:23:45:51:af:b9:ed:6f:01:2c:71:f1:
                    66:4e:e9:83:c5:f1:b9:6e:7f:1c:78:df:5a:54:64:
                    47:4c:7a:62:82:33:a5:0b:76:ab:e9:ef:9b:d3:76:
                    1c:7e:bb:8b:9f:dd:18:be:04:e2:92:29:ad:0e:58:
                    f8:b3:ee:af:2b:c2:e7:a5:17:03:44:ed:40:59:76:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:32:1D:23:45:D4:60:50:98:A8:1E:1C:31:2D:EA:0D:24:36:A9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064d874f-7480-4f56-986e-d2324d6402a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a58::/45

    Signature Algorithm: sha256WithRSAEncryption
         91:57:a6:d8:d8:7e:89:c9:47:32:28:15:88:a3:86:0e:20:96:
         32:8b:07:c3:b7:ec:e3:96:e6:e6:ed:54:3d:66:ab:0f:96:34:
         41:dc:e7:52:8b:31:50:b6:5e:21:7b:b0:2f:b5:95:2a:90:f2:
         f0:d1:0b:c0:c1:e8:ea:50:85:b4:0c:f0:0a:e7:80:33:90:e0:
         f9:30:b7:e3:d3:79:71:57:09:53:ef:71:7d:ea:2a:02:10:38:
         1d:a3:e6:5a:a8:99:b4:bf:a5:c6:d7:72:53:c5:09:f6:ec:86:
         ef:10:1b:b4:97:2f:a3:a5:22:54:2a:a7:8c:0c:5d:a2:ad:91:
         fd:8b:1f:6e:fc:a7:e1:ae:d7:56:8f:1f:41:06:e3:78:3c:a0:
         78:6a:75:0b:23:c6:01:72:aa:59:75:4c:d2:63:3d:1b:27:52:
         a5:e2:48:06:4c:ee:b1:e1:00:b3:49:7b:55:9b:27:de:c6:f9:
         7a:b7:e9:0f:bb:77:5a:22:dd:23:cf:41:3b:e0:4a:6e:2d:93:
         c7:40:a9:55:99:04:1b:29:fa:c4:32:c9:ab:60:d8:c9:6d:8c:
         d0:e3:34:18:aa:8b:b3:3f:82:41:61:bb:cc:df:83:a3:2b:61:
         e6:ca:45:8c:c5:1e:69:40:d7:57:d2:88:c3:0b:14:91:35:22:
         f7:31:a9:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:40 2026 by rpki-client