Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/218ad406-9b41-4e3e-876d-4bd4f43f70de.roa
File:                     218ad406-9b41-4e3e-876d-4bd4f43f70de.roa (raw, json)
Hash identifier:          99aZWwsPxLJ3RhILF1gi/M/zbtz4d9wKUkf01uR5uZM=
Subject key identifier:   4C:5B:94:4B:97:83:2C:71:BD:E9:FE:2D:B6:D3:03:DC:B5:A2:F7:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       617533EC50C94E372A1BF88150460EE6159A444F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/218ad406-9b41-4e3e-876d-4bd4f43f70de.roa
Signing time:             Thu 23 Jul 2026 02:11:52 +0000
ROA not before:           Thu 23 Jul 2026 02:11:52 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:390c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:75:33:ec:50:c9:4e:37:2a:1b:f8:81:50:46:0e:e6:15:9a:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:11:52 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=3d726e89bbc5577c7d9e71a303f6c3adc43fa09c428a05fa374bae1df182fd3d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:a0:af:2b:e9:de:7a:92:b8:cc:36:60:c7:
                    9e:93:a9:09:ac:84:02:af:d5:63:6c:c5:2d:70:c0:
                    70:11:6c:4c:ab:ae:6a:22:00:db:ff:6b:14:5c:41:
                    63:ea:28:07:ad:b2:f1:69:02:f8:e9:b7:19:55:ac:
                    77:2e:ea:f6:63:9c:91:86:26:ef:c4:1b:2a:a6:12:
                    ba:17:36:88:2d:81:df:dd:4c:4c:42:85:76:0b:f0:
                    9e:7a:d7:68:a9:a1:fb:64:70:88:34:7c:40:03:3c:
                    52:0b:f7:95:33:a2:19:99:c2:ab:99:b8:57:ae:8a:
                    08:ed:69:1b:0e:2a:37:49:ff:18:22:7d:26:a0:38:
                    9f:62:14:b8:04:3d:b0:68:da:b2:4f:bd:94:4e:bb:
                    75:b7:d5:28:31:e4:89:33:2d:11:f1:e0:88:a6:d0:
                    56:1d:fe:1a:48:78:d2:55:32:d6:af:38:6a:78:e8:
                    63:3d:39:04:a8:9d:11:7d:07:60:8d:42:38:da:0a:
                    27:59:47:99:87:2d:3c:8c:7d:88:9a:84:d9:eb:60:
                    bd:54:bd:f8:e3:2d:ab:5d:b8:fe:6a:1a:20:b6:9e:
                    43:ca:39:06:29:4d:17:1a:ad:bb:be:35:96:a1:25:
                    e3:9a:26:be:3b:13:af:e6:bf:8a:4e:a4:ac:2e:31:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:94:4B:97:83:2C:71:BD:E9:FE:2D:B6:D3:03:DC:B5:A2:F7:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/218ad406-9b41-4e3e-876d-4bd4f43f70de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:390c::/47

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:30:35:dc:81:46:fd:72:93:d9:4e:5f:9d:80:38:67:9a:
         5b:84:f1:f9:34:ed:d5:94:40:b5:fc:a6:4f:90:ed:ef:23:13:
         77:3b:1a:7c:6b:0e:4d:1a:98:76:b3:cb:6f:e4:11:a9:b0:0e:
         84:25:ff:96:6d:68:9c:f5:54:47:4d:a4:60:77:f3:aa:3f:08:
         98:43:4b:20:0b:91:f2:7b:5c:6e:47:3d:68:a6:ae:51:5b:9e:
         8a:b7:a9:30:51:ce:a3:59:20:dd:17:65:a8:1d:ac:a9:6e:8b:
         7d:47:10:a2:05:0b:af:39:f5:17:4f:ff:94:0f:91:40:23:38:
         45:d8:52:d5:a8:e4:fe:29:6a:ed:bf:ed:34:05:eb:84:6a:d8:
         24:3a:7c:02:1b:7a:86:f9:80:3a:e2:6f:7b:b5:71:14:6c:e5:
         22:3c:b5:06:b1:72:4b:fe:b6:27:0d:8b:06:d3:b7:16:ba:9c:
         f9:90:dc:22:66:0b:b8:a8:e3:d5:4e:3a:6d:61:11:e1:37:97:
         c3:3f:c9:d4:b9:2a:c8:69:4f:d0:28:30:ee:c7:1b:43:8b:4d:
         f5:3f:cf:e7:21:c7:ad:f1:8d:42:ae:86:7f:fc:b5:67:15:1d:
         10:db:a3:cb:9a:60:ad:f0:36:4b:4b:02:8d:7d:02:99:a6:45:
         99:b1:4e:80
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYXUz7FDJTjcqG/iBUEYO5hWaRE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIxMTUyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDcyNmU4OWJiYzU1NzdjN2Q5ZTcxYTMwM2Y2YzNhZGM0
M2ZhMDljNDI4YTA1ZmEzNzRiYWUxZGYxODJmZDNkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8kqCvK+neepK4zDZgx56TqQmshAKv1WNsxS1wwHARbEyr
rmoiANv/axRcQWPqKAetsvFpAvjptxlVrHcu6vZjnJGGJu/EGyqmEroXNogtgd/d
TExChXYL8J5612ipoftkcIg0fEADPFIL95UzohmZwquZuFeuigjtaRsOKjdJ/xgi
fSagOJ9iFLgEPbBo2rJPvZROu3W31Sgx5IkzLRHx4Iim0FYd/hpIeNJVMtavOGp4
6GM9OQSonRF9B2CNQjjaCidZR5mHLTyMfYiahNnrYL1UvfjjLatduP5qGiC2nkPK
OQYpTRcarbu+NZahJeOaJr47E6/mv4pOpKwuMdddAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTFuUS5eDLHG96f4tttMD3LWi97gwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzIxOGFkNDA2LTliNDEtNGUzZS04NzZkLTRiZDRmNDNmNzBkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOQwwDQYJKoZIhvcNAQELBQADggEBAG7yMDXcgUb9cpPZTl+dgDhn
mluE8fk07dWUQLX8pk+Q7e8jE3c7GnxrDk0amHazy2/kEamwDoQl/5ZtaJz1VEdN
pGB386o/CJhDSyALkfJ7XG5HPWimrlFbnoq3qTBRzqNZIN0XZagdrKlui31HEKIF
C6859RdP/5QPkUAjOEXYUtWo5P4pau2/7TQF64Rq2CQ6fAIbeob5gDrib3u1cRRs
5SI8tQaxckv+ticNiwbTtxa6nPmQ3CJmC7io49VOOm1hEeE3l8M/ydS5KshpT9Ao
MO7HG0OLTfU/z+chx63xjUKuhn/8tWcVHRDbo8uaYK3wNktLAo19ApmmRZmxToA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:34 2026 by rpki-client