Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa
File:                     0aa6e0cc-885a-496c-872a-1580d346d3ce.roa (raw, json)
Hash identifier:          JCbpynsByb7MsQkSErgKW+kug7d+2LgG/6p0jV6Dpeo=
Subject key identifier:   D6:59:06:5D:C6:E4:52:C0:5B:95:74:5D:65:4B:49:47:69:D7:58:FA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       62B4B142CC7950E6918FCAF7133FBDAED88AC5C4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa
Signing time:             Thu 23 Jul 2026 06:01:25 +0000
ROA not before:           Thu 23 Jul 2026 06:01:25 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a56::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b4:b1:42:cc:79:50:e6:91:8f:ca:f7:13:3f:bd:ae:d8:8a:c5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:01:25 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=08a0242894b1702ae9c7161b3b5bf8b61db47c087b79afad5cf0023c9dc092be, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4a:be:15:03:ad:1f:b0:bc:c4:b4:db:48:14:
                    1b:b1:82:49:3f:3a:61:64:02:7a:ad:59:ab:12:62:
                    9b:1b:4c:07:d2:51:ba:a5:25:3b:ff:43:c8:8f:5a:
                    af:8b:ed:2b:ef:12:09:4f:69:15:eb:b3:7b:f2:eb:
                    93:81:97:00:2a:76:b6:41:05:7c:18:2b:e9:7a:4d:
                    8e:ff:a4:af:2b:51:21:07:c2:4c:82:84:7b:6b:8b:
                    95:70:68:1d:59:8c:44:59:2c:65:a1:c3:8b:c7:95:
                    e5:fe:0a:cf:11:2f:ad:55:85:42:42:0f:22:ec:1a:
                    f7:a6:fa:0a:aa:e6:9b:24:55:72:d4:37:fe:e4:b3:
                    22:77:f2:06:27:98:b5:8c:38:0b:d8:33:19:ad:35:
                    09:5b:f6:47:34:26:cd:65:9b:fa:a0:79:4d:73:cb:
                    50:a8:3d:d2:45:49:97:f1:15:62:c5:84:a7:b9:1e:
                    2f:6d:2d:62:29:35:df:01:56:57:88:72:8a:89:e7:
                    6c:83:34:6c:c2:43:83:3e:67:04:91:5c:eb:4c:40:
                    33:3e:80:46:30:0c:1e:e9:a5:8e:78:e1:28:89:34:
                    a9:db:6a:4d:d8:46:30:06:07:6a:db:a1:07:ca:cc:
                    ad:d3:5d:0f:19:50:50:08:bc:a8:e1:70:46:31:2b:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:06:5D:C6:E4:52:C0:5B:95:74:5D:65:4B:49:47:69:D7:58:FA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a56::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:17:45:62:51:cb:c8:9f:14:f6:41:19:94:af:26:cb:2f:51:
         4e:8f:bd:cf:3b:7f:03:31:8e:24:30:cf:08:c9:80:a6:d0:79:
         8e:bd:78:b1:2e:a7:b4:a4:c4:b8:8b:fa:47:d9:60:e1:fd:e3:
         92:09:f6:ac:9c:6b:ba:c9:69:41:0e:29:d9:19:50:f4:51:aa:
         7a:38:41:ed:d2:15:7c:fa:21:12:11:8d:95:c8:0d:cc:92:2b:
         b0:c1:b7:6f:b8:d2:42:a7:1e:a5:a7:27:91:4a:cc:76:e3:09:
         b0:7f:9a:37:bd:af:ae:f5:21:fe:d7:0c:35:a5:20:83:8c:f9:
         f4:1e:de:80:4c:77:a4:fa:6b:19:c3:a8:03:d0:51:c2:74:48:
         ce:8d:56:68:5c:64:8c:6c:ad:7d:50:d2:9d:e0:1c:2e:aa:ec:
         e8:bd:a0:ad:ad:fd:0b:31:28:c4:0f:0e:2d:64:23:d6:9e:3d:
         7a:ca:1f:b0:f7:78:d9:8f:e9:e0:9d:14:eb:e3:35:57:c3:6a:
         1d:f1:a9:29:bd:10:0a:a6:e5:05:2d:db:52:71:94:45:dc:bf:
         2f:1b:b9:3d:cc:52:a7:69:76:6f:d7:31:82:92:1d:2e:cc:4e:
         39:17:23:08:cd:92:29:23:e0:99:19:26:61:35:11:ae:6d:dc:
         53:bd:65:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:25 2026 by rpki-client