Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
File:                     108593c5-6d6d-4e44-b589-cbf5c661a884.roa (raw, json)
Hash identifier:          6x2h+GCz6ThxkKWiN5Uwi0FIKtJd9/nLhDRctr6nKok=
Subject key identifier:   B1:59:0E:A5:82:66:43:76:D6:64:CD:97:3F:42:67:C5:6E:49:76:4A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F954FD3E8B54F35D7630D4DB19A9768A15847B4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
Signing time:             Thu 23 Jul 2026 00:50:07 +0000
ROA not before:           Thu 23 Jul 2026 00:50:07 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:4f:d3:e8:b5:4f:35:d7:63:0d:4d:b1:9a:97:68:a1:58:47:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 00:50:07 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=6bd48ef5f94289d263ee0d350119fa1677d2af4f3b29885e9dac39c787214bce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:3a:93:ae:db:9a:77:26:e0:0c:9b:b7:0a:
                    39:76:a7:b6:03:82:f5:f4:1d:16:2a:d3:b5:1d:dc:
                    e9:63:6e:c2:90:17:05:17:b3:06:d1:35:56:b4:36:
                    44:3e:71:f2:da:4b:b0:ea:fb:f6:4c:39:55:b3:3e:
                    ae:80:3c:85:44:b2:71:cd:aa:85:6e:f8:fa:3f:ba:
                    cc:a9:13:56:0e:7f:2d:2b:94:50:34:32:17:50:78:
                    78:dd:3f:81:7f:e3:ef:5d:bb:c9:05:c3:ec:eb:db:
                    7d:58:83:8b:b0:06:97:3c:47:b9:89:6a:02:8b:43:
                    54:13:e1:55:50:07:40:3e:2f:45:5e:e0:27:08:f5:
                    91:cb:6a:b3:a4:be:8c:07:83:55:ca:17:05:f4:71:
                    a2:ac:8e:c3:17:16:f2:59:22:6d:90:64:02:22:d4:
                    25:e0:37:74:eb:70:ef:81:c6:e2:26:87:7e:83:38:
                    45:ec:c0:ed:6c:d7:a3:19:c8:32:0c:a0:a3:16:48:
                    f8:db:26:dc:e3:6d:32:65:91:bc:7c:fe:ef:8a:f3:
                    d7:45:ad:d9:3e:f7:b6:3e:ad:ad:5d:fc:11:df:16:
                    62:45:2c:a8:47:4a:e1:ca:72:69:05:6f:8f:a0:6e:
                    17:0f:e5:d3:5b:30:45:0f:cb:1b:fb:db:2e:97:db:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:0E:A5:82:66:43:76:D6:64:CD:97:3F:42:67:C5:6E:49:76:4A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d88::/45

    Signature Algorithm: sha256WithRSAEncryption
         06:f2:df:76:eb:13:5b:b7:9b:12:7e:e1:59:f7:e5:e1:51:4e:
         30:0d:90:5c:cf:da:57:76:99:5a:06:a8:26:1a:1a:31:e1:0f:
         0f:13:24:11:98:51:cd:c4:64:1d:2a:86:aa:63:4a:8d:8c:65:
         f7:84:93:5d:89:33:bb:39:4d:1e:36:2d:9c:af:1b:b6:56:d8:
         50:a2:e3:21:f1:e6:34:ed:30:f4:85:35:2a:32:68:36:dd:6d:
         7c:fc:04:83:20:a1:84:4e:9f:69:95:2e:47:85:a7:73:93:2e:
         eb:9d:b9:53:ed:bd:f1:66:52:07:c5:a8:b0:e6:55:be:59:38:
         96:54:51:aa:e6:d3:1f:a4:91:67:a3:59:61:e4:22:04:e4:b2:
         f3:7b:5e:39:a3:31:91:08:94:dc:a0:d5:6d:f6:68:60:81:9f:
         3c:38:41:b6:59:92:06:98:f2:95:d7:d5:9f:f6:a8:c7:1d:9e:
         b3:5d:61:61:ff:04:59:78:2f:39:92:a3:15:78:fb:f4:78:f4:
         a7:8a:67:48:b7:3b:2c:38:82:00:4d:a5:ec:16:3a:10:a2:1f:
         69:dc:ce:4b:22:95:74:3a:74:76:7f:fb:42:2b:06:a1:2c:33:
         df:e1:0f:37:01:12:c1:1d:55:97:16:1e:d1:e2:62:ad:f2:37:
         e4:79:32:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD5VP0+i1TzXXYw1NsZqXaKFYR7QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDA1MDA3WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YmQ0OGVmNWY5NDI4OWQyNjNlZTBkMzUwMTE5ZmExNjc3
ZDJhZjRmM2IyOTg4NWU5ZGFjMzljNzg3MjE0YmNlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwWjqTrtuadybgDJu3Cjl2p7YDgvX0HRYq07Ud3OljbsKQ
FwUXswbRNVa0NkQ+cfLaS7Dq+/ZMOVWzPq6APIVEsnHNqoVu+Po/usypE1YOfy0r
lFA0MhdQeHjdP4F/4+9du8kFw+zr231Yg4uwBpc8R7mJagKLQ1QT4VVQB0A+L0Ve
4CcI9ZHLarOkvowHg1XKFwX0caKsjsMXFvJZIm2QZAIi1CXgN3TrcO+BxuImh36D
OEXswO1s16MZyDIMoKMWSPjbJtzjbTJlkbx8/u+K89dFrdk+97Y+ra1d/BHfFmJF
LKhHSuHKcmkFb4+gbhcP5dNbMEUPyxv72y6X207lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsVkOpYJmQ3bWZM2XP0JnxW5JdkowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzEwODU5M2M1LTZkNmQtNGU0NC1iNTg5LWNiZjVjNjYxYTg4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPYgwDQYJKoZIhvcNAQELBQADggEBAAby33brE1u3mxJ+4Vn35eFR
TjANkFzP2ld2mVoGqCYaGjHhDw8TJBGYUc3EZB0qhqpjSo2MZfeEk12JM7s5TR42
LZyvG7ZW2FCi4yHx5jTtMPSFNSoyaDbdbXz8BIMgoYROn2mVLkeFp3OTLuuduVPt
vfFmUgfFqLDmVb5ZOJZUUarm0x+kkWejWWHkIgTksvN7XjmjMZEIlNyg1W32aGCB
nzw4QbZZkgaY8pXX1Z/2qMcdnrNdYWH/BFl4LzmSoxV4+/R49KeKZ0i3Oyw4ggBN
pewWOhCiH2nczksilXQ6dHZ/+0IrBqEsM9/hDzcBEsEdVZcWHtHiYq3yN+R5MiM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:33 2026 by rpki-client