Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f794917-0783-4e75-ac96-21dc8c1fc764.roa
File:                     0f794917-0783-4e75-ac96-21dc8c1fc764.roa (raw, json)
Hash identifier:          q/K7kBpZf2+qWkBc3fIqoWyqocvL0v2CVGrYlUxpc9E=
Subject key identifier:   98:6C:BC:62:E2:C8:9A:3F:F8:50:8E:C2:23:AA:46:93:EA:2F:86:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1361FDC1D706D4BFBFBB5A26F0EC7A4B2A78A58C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f794917-0783-4e75-ac96-21dc8c1fc764.roa
Signing time:             Thu 23 Jul 2026 11:30:59 +0000
ROA not before:           Thu 23 Jul 2026 11:30:59 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d90::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:61:fd:c1:d7:06:d4:bf:bf:bb:5a:26:f0:ec:7a:4b:2a:78:a5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:30:59 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=bc2741074857724ab461a703b2b49086ffa5bd1c8266c8bfae272633932e1128, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:43:6e:65:2e:38:b0:4e:ee:24:1a:7e:b0:
                    c5:da:18:d5:af:90:80:72:0c:b1:42:00:5a:77:3b:
                    91:82:94:84:5d:a9:3c:e4:51:7f:3e:10:4d:75:51:
                    83:26:71:68:6e:ec:04:8c:6f:03:07:d8:8f:a7:62:
                    b9:91:e5:b5:60:61:39:88:35:fd:ce:8c:37:f9:b3:
                    95:a4:e1:12:27:fb:ec:c8:f0:e8:29:1d:a5:d2:53:
                    0d:3f:04:88:45:ad:53:99:88:0c:fd:1e:ed:6b:4d:
                    61:9a:78:f0:94:39:57:69:00:fa:a3:31:d4:7b:43:
                    93:61:87:79:b1:fc:9d:26:dd:8f:a0:06:24:e3:84:
                    e7:fe:a4:59:93:21:8b:5b:b6:ae:41:4c:ae:4f:80:
                    7e:1e:aa:1a:6a:02:a1:f7:8b:40:d9:68:77:dd:34:
                    0b:8c:18:e5:f9:f6:33:68:50:54:d3:8c:af:9d:1d:
                    64:65:36:e4:3b:4d:20:17:7e:99:7a:f8:9e:69:8c:
                    d2:b3:ae:8c:ce:6e:56:b3:91:f5:59:a6:5c:4b:97:
                    1e:35:ed:64:dd:56:ef:bb:90:92:19:e5:e9:82:06:
                    55:d8:4c:e7:06:c6:bc:9d:59:29:aa:45:bb:64:bd:
                    18:0b:15:06:c0:92:3d:29:6b:48:4b:74:bd:fc:af:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:BC:62:E2:C8:9A:3F:F8:50:8E:C2:23:AA:46:93:EA:2F:86:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f794917-0783-4e75-ac96-21dc8c1fc764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d90::/45

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:18:e4:62:b5:47:ac:93:0a:e8:82:21:62:14:6b:f7:12:
         2c:54:c3:d5:0f:b7:6c:f6:77:ae:5d:d8:0a:b2:c0:b4:40:38:
         14:1b:91:ab:e7:82:a6:ce:50:40:08:66:97:50:66:f9:a0:18:
         43:e1:d7:2f:f2:22:9c:32:64:c2:76:5b:24:b4:cb:87:23:bf:
         b3:c2:85:6e:a6:f7:9d:67:dc:0d:25:71:44:44:7d:ee:12:53:
         7b:5d:b3:be:58:dd:02:1d:e4:49:f9:ee:93:6d:1a:91:35:10:
         c5:6e:98:3e:1a:d1:70:ef:8c:7e:7b:16:05:16:ed:ce:d8:9b:
         8e:9b:dd:73:7e:9b:5a:2c:6a:f1:14:4b:4a:fd:9a:d7:22:6d:
         69:af:74:1f:28:17:1b:f7:43:70:a9:4d:99:97:77:3c:6b:ac:
         a0:a7:07:5f:78:67:d4:0d:a0:51:96:c7:2c:2b:6e:9c:8a:35:
         d4:75:7d:fb:53:eb:5b:f9:fe:9e:1d:c3:15:4b:ee:68:7d:eb:
         0f:6d:ae:15:de:76:b0:72:37:e8:6a:06:3e:8c:6d:26:0e:be:
         92:87:5a:da:44:21:5c:bc:e1:2a:f3:46:8b:87:85:71:a4:07:
         4d:73:c5:18:b5:b0:f0:b4:33:67:ff:b9:41:7b:87:00:38:65:
         f0:3c:ae:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:17 2026 by rpki-client