Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ce33b86-cfc1-4977-b0e4-7b7a0b0c3641.roa
File:                     1ce33b86-cfc1-4977-b0e4-7b7a0b0c3641.roa (raw, json)
Hash identifier:          N9T4+zJLgYm28A7KUGoKRxFwfNHYHrX3MaeOvioZIZ4=
Subject key identifier:   3C:86:62:97:4D:3B:3F:52:CA:CE:DA:2B:6A:2F:06:D8:64:81:7B:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3FF796382D5F613958E1EC51126238C2EDBDA7E1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ce33b86-cfc1-4977-b0e4-7b7a0b0c3641.roa
Signing time:             Thu 23 Jul 2026 07:51:14 +0000
ROA not before:           Thu 23 Jul 2026 07:51:14 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:373c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:96:38:2d:5f:61:39:58:e1:ec:51:12:62:38:c2:ed:bd:a7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:51:14 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=474c5717f0a2891bdc357ccb74062c0b870c3e7cba0f53bfcbfa008b694e8040, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:05:7f:f5:99:4e:da:7f:5f:f2:35:aa:18:
                    65:8c:80:4c:b3:c8:32:ac:4c:2f:4b:8a:de:4b:a3:
                    2f:71:5e:b1:37:4c:71:dc:c1:71:f1:5c:1f:a2:f9:
                    82:8f:27:e0:66:7c:4c:f8:55:a2:ab:4a:2c:79:3e:
                    dc:2b:b2:09:a9:02:90:60:86:73:88:30:14:a1:b3:
                    ec:4d:6c:03:fa:6e:c9:7e:c6:89:26:a7:05:7f:45:
                    0f:70:22:d0:a9:2d:69:a0:7f:4f:74:42:04:b1:90:
                    e7:0d:45:f1:ba:79:ce:c7:a1:7c:f4:74:d7:ee:0c:
                    10:de:87:67:55:d0:34:43:58:09:e8:50:b5:2d:4e:
                    3b:d0:33:37:84:d2:c3:90:5a:e6:cc:8d:d3:95:6d:
                    85:5d:21:29:af:a3:63:c5:8c:36:02:bb:b3:c3:75:
                    06:9b:51:5d:fc:f3:91:3a:1e:b1:3f:88:66:21:9b:
                    20:72:f1:bd:2a:db:8f:6e:dd:b9:dc:5a:62:d2:e5:
                    2e:84:5f:34:37:a7:60:35:43:72:c9:d4:9a:2c:ee:
                    e4:7e:71:9e:24:88:c4:cc:c3:b1:15:24:e2:9c:93:
                    e3:62:81:84:b6:ab:03:c5:34:b0:3f:06:27:13:07:
                    c9:3a:2d:37:48:bf:04:bd:d0:3c:1a:f8:de:de:04:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:86:62:97:4D:3B:3F:52:CA:CE:DA:2B:6A:2F:06:D8:64:81:7B:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ce33b86-cfc1-4977-b0e4-7b7a0b0c3641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:373c::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:74:89:3d:f6:3d:35:a4:37:b6:ef:7e:96:c5:ab:1d:9d:0a:
         07:67:37:fa:97:59:5b:8e:36:35:1b:7c:ae:44:6f:bd:37:82:
         4a:2c:64:d7:fd:22:70:44:db:3f:df:c8:69:e3:f3:44:75:f1:
         46:0e:bb:bc:97:cb:53:43:d1:8c:72:cc:2f:44:f4:ab:38:5f:
         f7:77:df:5d:1a:db:a5:3b:59:2e:21:8c:ed:ae:07:d4:44:f9:
         7b:55:a9:32:7b:db:3a:1f:72:f5:91:59:de:ef:96:97:40:e3:
         97:15:12:9e:6c:99:e0:bc:39:45:f6:83:28:a4:85:73:50:86:
         ff:83:58:e2:12:0e:1d:1b:12:8d:d4:2f:31:cc:b2:88:3b:03:
         cb:7c:fb:86:d2:ad:ff:b0:53:7d:63:c3:9a:b0:9a:14:9f:c9:
         2a:1a:b6:f9:fc:75:9a:4f:c4:57:63:08:60:10:9c:3c:bb:c1:
         6d:50:26:bc:5d:56:6f:17:e5:b9:7a:5a:cd:d7:cf:f5:7f:6b:
         db:dd:b0:83:36:26:4a:3e:5a:e5:d1:70:1e:0a:61:34:f1:27:
         be:30:18:a5:0c:95:a0:45:fc:ed:74:05:f8:76:af:a8:df:5c:
         91:63:32:c0:d8:64:4b:a1:be:7b:7f:5f:73:15:57:ac:77:d4:
         ab:8e:f8:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:57 2026 by rpki-client