Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b5638a3-c746-483e-9f83-94c8ad82c520.roa
File:                     0b5638a3-c746-483e-9f83-94c8ad82c520.roa (raw, json)
Hash identifier:          bdK0kDL859uYVtyuBhkLnBSJ5nt3RqE3GfVDHKiuaK4=
Subject key identifier:   AA:76:62:EE:1B:EE:1E:16:54:BD:47:F1:E8:55:2E:5A:69:FB:94:56
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03432689F455856B1762C70A42A9F7B4849DF8B5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b5638a3-c746-483e-9f83-94c8ad82c520.roa
Signing time:             Wed 22 Jul 2026 01:12:01 +0000
ROA not before:           Wed 22 Jul 2026 01:12:01 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cf2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:43:26:89:f4:55:85:6b:17:62:c7:0a:42:a9:f7:b4:84:9d:f8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:12:01 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=8d51ba84c4bf77321a6c91b61b195c5610bf3cc90e8558ac4b777e28c493e7ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:a2:11:64:b9:3e:4c:0f:6e:e5:45:d3:63:
                    97:4b:77:1f:31:21:11:07:15:f0:76:50:e6:48:2f:
                    46:46:0c:f8:f1:c3:de:c1:8d:57:90:e8:46:35:b7:
                    92:8c:93:92:ff:13:f1:db:d6:d4:69:c7:b1:ca:19:
                    ef:0e:46:8a:c3:3d:32:a1:25:c8:51:85:46:a4:a7:
                    c9:d6:af:09:63:1b:c8:ab:e5:17:a2:2a:63:de:dc:
                    e0:8c:4e:aa:d8:38:27:4b:d3:89:f5:4c:ba:d4:85:
                    c7:11:5f:c8:57:e4:1b:92:e9:6c:dc:05:48:1e:47:
                    5e:f5:ad:04:f8:fd:6b:84:d0:d5:e7:d8:a6:e8:0a:
                    d6:06:20:02:66:c9:12:a9:98:c2:15:54:7c:a0:63:
                    36:85:6d:f6:40:de:d8:ac:59:e3:74:79:9b:00:44:
                    62:d0:6d:64:33:59:78:8f:a6:4e:39:be:0b:ee:65:
                    d3:2a:37:50:0e:29:f6:cf:e1:04:44:77:e0:19:55:
                    e4:2b:a3:d3:38:7c:d7:6b:ae:c7:55:ae:e8:0b:e6:
                    00:59:2d:c9:ad:ed:9d:5b:ba:11:66:3c:3a:57:dc:
                    b0:6a:0f:43:08:ea:b4:1a:51:2c:ec:37:df:09:f5:
                    21:c0:0c:e2:2a:cb:e5:f9:07:5b:27:9e:f6:17:5b:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:76:62:EE:1B:EE:1E:16:54:BD:47:F1:E8:55:2E:5A:69:FB:94:56
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b5638a3-c746-483e-9f83-94c8ad82c520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cf2::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:ca:6a:06:54:26:e0:db:93:5b:b8:6e:40:7f:b2:c2:19:
         2b:2e:4a:c5:d2:81:f3:f9:71:36:9c:22:e6:e2:d0:08:e5:d9:
         73:c0:e4:0e:b3:2a:0c:82:ee:cf:7c:e6:7a:b3:77:7f:af:f5:
         7b:cb:f7:ca:b8:85:5b:87:1c:70:66:69:15:35:ec:82:1d:6c:
         5f:bc:f9:11:da:87:bf:09:c7:c5:a1:7a:5d:21:b8:37:25:c5:
         41:9c:4e:a1:ca:3d:11:12:b5:f4:e9:02:83:44:24:74:36:6b:
         02:9b:8c:ca:3e:e3:bf:a9:df:b3:96:e8:4d:36:ac:63:50:4e:
         68:54:2a:5b:54:48:ea:df:ec:87:5a:2b:6c:43:3c:7f:99:24:
         91:11:d3:f6:e0:4a:82:69:b3:b1:27:49:58:fd:00:ea:fb:13:
         6a:f3:c2:6b:05:a1:09:ff:3b:b5:50:6b:0f:de:05:3b:f5:b1:
         8f:44:c0:a6:bc:87:0a:d1:12:e0:2f:d5:f4:b5:57:c1:de:f8:
         31:60:8b:e8:f5:d2:e7:ca:c3:13:7d:0c:a9:39:48:38:60:2f:
         95:d5:ef:b4:ed:01:6a:e7:12:53:ea:a7:aa:e6:8f:e2:ab:4a:
         d6:0a:fe:c5:f7:62:87:45:e0:e5:aa:c2:cd:80:9e:96:ca:03:
         80:38:39:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:12 2026 by rpki-client