Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a1b076-f10f-48d6-9c91-275b53ae67e1.roa
File:                     08a1b076-f10f-48d6-9c91-275b53ae67e1.roa (raw, json)
Hash identifier:          oww+xR/ZNYXkhfMkEDy7j3AakzlKPIIltkmeGUv+Cws=
Subject key identifier:   A9:83:86:00:4D:0C:CB:DF:BB:4A:68:F0:08:D1:9E:BE:08:14:A1:D7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       666A70CED6A34B22BA933A5DC120C68FE75EEF2B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a1b076-f10f-48d6-9c91-275b53ae67e1.roa
Signing time:             Wed 22 Jul 2026 01:40:03 +0000
ROA not before:           Wed 22 Jul 2026 01:40:03 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e8a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6a:70:ce:d6:a3:4b:22:ba:93:3a:5d:c1:20:c6:8f:e7:5e:ef:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:40:03 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=7084246b599166b5e9d792e543d16a009ea199df91b5042813ffc063f7de5289, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:76:e7:c0:14:0b:03:81:a0:40:ba:f6:62:
                    bf:e4:7d:f4:8a:de:a4:0b:eb:1c:a5:9c:1b:89:65:
                    53:1a:1f:a9:f5:98:10:cd:96:f5:5a:58:5e:d5:0e:
                    47:1c:b1:1c:4e:b9:f7:08:e7:f3:d0:5d:1d:5e:26:
                    10:5a:14:ad:e0:d6:eb:c6:fd:3f:0b:e6:76:4f:d0:
                    0d:5e:78:e3:73:91:d3:5d:66:86:07:6c:fd:2c:d9:
                    81:61:f9:8e:6f:5f:4f:7c:b4:ab:34:c6:6d:06:eb:
                    71:a6:0a:12:75:81:f6:0a:e7:64:09:e6:62:3b:ee:
                    82:c2:73:85:d0:eb:ec:73:f0:fd:25:22:88:6b:d1:
                    c8:a5:75:b2:0f:6d:ff:e4:4e:2d:57:18:07:ce:38:
                    c3:d9:f9:93:66:72:89:ba:10:4c:24:f8:72:d8:e3:
                    27:b0:63:33:f3:1f:85:c1:a8:ea:c6:78:3d:37:43:
                    4d:b1:1b:27:aa:aa:35:42:04:6c:39:dd:ac:8b:b6:
                    b0:b8:4a:a6:07:d8:63:1c:3b:63:2e:a1:d6:29:8b:
                    45:e8:cf:78:9a:1e:85:ff:7c:73:6f:11:c8:f8:a1:
                    7f:d2:25:39:78:92:15:30:5b:36:28:4c:41:ff:21:
                    ea:ee:f3:77:30:53:d2:1b:96:9e:39:af:f8:42:1c:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:86:00:4D:0C:CB:DF:BB:4A:68:F0:08:D1:9E:BE:08:14:A1:D7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08a1b076-f10f-48d6-9c91-275b53ae67e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e8a::/47

    Signature Algorithm: sha256WithRSAEncryption
         a3:c3:e8:dc:0f:35:22:f6:99:ff:74:51:2e:14:d5:c2:ea:ad:
         60:db:27:8c:20:db:a6:3a:36:a0:bb:ce:3e:7b:83:96:92:0d:
         90:a6:54:bb:d2:99:75:0b:d9:92:81:d6:d0:ed:5b:28:b9:ca:
         43:07:1b:0f:d0:b8:b9:56:36:7e:54:b1:5d:62:18:c2:99:08:
         99:45:41:64:66:b8:66:61:3b:86:a0:99:98:db:91:07:06:40:
         63:03:ba:53:04:77:31:8e:85:d9:91:f7:5b:18:b4:cd:79:9d:
         b3:4b:7d:e7:c1:d6:3f:83:1a:d0:a3:6b:95:21:f5:94:b7:56:
         8f:b5:c8:4c:be:ae:1d:70:e0:2e:6a:31:82:a8:ec:41:7a:c4:
         c2:d2:7f:78:9e:76:c4:16:05:f8:a2:3c:72:ae:c8:8b:bf:9b:
         36:75:2a:db:65:05:49:59:e9:2c:98:d8:22:32:d1:cc:96:32:
         4f:61:94:66:8a:bf:8a:8c:b4:a9:23:4e:f9:4e:c3:85:ec:85:
         c3:a0:f7:91:14:67:1d:05:c1:7d:de:4a:45:19:0b:e5:90:00:
         ba:4d:b4:ff:32:71:e2:52:ce:48:ce:35:98:5c:82:23:0d:e3:
         aa:8b:18:94:eb:75:72:0c:ec:ef:d5:ec:7d:9e:15:d4:5e:e7:
         fd:c4:ac:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:21 2026 by rpki-client