Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d2f4644-5ca8-4afc-a301-135646eef9d8.roa
File:                     1d2f4644-5ca8-4afc-a301-135646eef9d8.roa (raw, json)
Hash identifier:          5rv/ebTJEICk89xXeNzxFwXjjEaUJQsJWNVPOekJHmc=
Subject key identifier:   17:08:75:F2:A7:32:93:C0:95:8A:9C:2C:60:53:59:E1:F2:B8:FA:86
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0495129513929CD9FB4DD65BDBA488B2AB192223
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d2f4644-5ca8-4afc-a301-135646eef9d8.roa
Signing time:             Thu 23 Jul 2026 07:11:55 +0000
ROA not before:           Thu 23 Jul 2026 07:11:55 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:95:12:95:13:92:9c:d9:fb:4d:d6:5b:db:a4:88:b2:ab:19:22:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:11:55 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=b3a6754791c323fa6f386858cb44fac44eb8b4308124a776aec8f5738adbac5c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:d0:14:21:9f:40:22:89:27:e5:ec:3c:0f:
                    92:7d:ac:e0:eb:9d:5d:99:83:7d:b2:04:19:d9:eb:
                    60:05:28:2a:32:8c:b7:6e:dc:57:c1:49:f9:07:a4:
                    cf:19:15:72:e1:14:74:80:f9:9b:2a:7e:e0:17:9e:
                    e6:fb:6c:b0:31:b9:ec:70:1f:dd:6e:26:b9:21:4e:
                    d0:32:88:aa:bd:7b:f9:01:0a:0d:70:af:1e:3e:d4:
                    f9:cc:d9:64:fc:be:ec:bb:17:bb:2a:88:ba:b2:79:
                    16:e8:73:da:36:39:e5:ea:3b:bb:4e:52:70:0f:a5:
                    96:fb:2b:60:b2:8c:8c:8c:60:69:d6:e6:7c:0e:f8:
                    48:30:32:ba:d5:68:ea:ac:dc:3f:63:ae:ab:63:5b:
                    b9:6d:99:6d:cc:f5:a2:b1:31:88:5a:28:19:2d:c6:
                    b4:4e:b4:25:35:49:a1:05:92:8f:11:6e:03:62:10:
                    bc:22:34:2c:59:43:32:dc:c9:d6:0d:e6:3b:7c:37:
                    f1:b4:5d:44:47:93:5c:a8:db:08:26:ac:04:56:6c:
                    55:16:5c:22:d8:ed:08:da:45:7d:aa:f7:ea:92:1b:
                    98:59:71:25:06:a1:d4:cf:43:d8:52:17:a3:3a:6b:
                    79:82:c4:8f:68:dc:3c:b5:18:14:18:e3:08:47:7f:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:75:F2:A7:32:93:C0:95:8A:9C:2C:60:53:59:E1:F2:B8:FA:86
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d2f4644-5ca8-4afc-a301-135646eef9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:18:cc:09:d9:9b:41:8f:45:34:68:78:01:c0:12:ca:06:
         b3:4b:37:5c:36:a1:d2:cd:82:7f:08:4a:5b:cd:5c:b4:60:e2:
         b4:e3:e5:1b:13:21:29:73:8a:af:1f:a1:63:a3:02:95:5b:bb:
         87:4f:9b:fb:3f:df:85:16:c2:d0:49:0b:9d:99:6d:2c:62:6c:
         02:aa:59:95:e9:ba:49:cd:ad:07:e9:ac:d1:46:dc:d8:33:00:
         7e:ef:36:a4:1c:8c:09:b8:e8:5d:da:66:06:52:3d:e2:69:5f:
         f0:04:61:41:15:fe:9e:0d:a5:11:c8:9f:5f:19:ca:14:07:04:
         9f:38:49:ef:0b:32:dd:b5:c6:1a:b0:51:1c:4c:fc:17:d4:9c:
         cf:57:b9:e9:86:e2:fb:cd:39:53:59:b2:30:53:da:1d:25:4e:
         92:d7:2b:f8:d0:3c:e2:f0:4b:9b:7e:bb:60:7e:9a:26:61:ff:
         f8:77:cd:04:60:4e:b7:f4:1e:da:27:e1:38:1a:e3:fb:f3:8c:
         41:78:b9:4e:92:e5:f5:3d:6c:a0:8e:77:a8:c7:c8:5e:49:36:
         63:fd:2f:28:0f:7b:d7:a2:7e:c8:8b:88:9e:a7:0a:e2:49:b6:
         5f:51:1c:05:3c:63:f4:99:d6:9a:1c:04:00:7f:be:ff:c8:dc:
         11:aa:03:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:39 2026 by rpki-client