Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa
File:                     24313a45-d412-407b-8e1b-bcf1600ef9cf.roa (raw, json)
Hash identifier:          tVTLBP5y0lkG7NsVo10Y5OjQmH0m+GnKKj2UawTMcy4=
Subject key identifier:   A6:E5:48:5C:AE:39:A1:5C:9C:F8:31:C6:BC:41:A6:9B:3F:C9:C4:BB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       713AB039E407B9087A739DBBDDB5DD58C5EF7AC2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa
Signing time:             Wed 22 Jul 2026 02:30:13 +0000
ROA not before:           Wed 22 Jul 2026 02:30:13 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2aea::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3a:b0:39:e4:07:b9:08:7a:73:9d:bb:dd:b5:dd:58:c5:ef:7a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:30:13 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=27f585a4c4998db72ec9a0facc01f961db0ffda5895a01771e937165ce1a780c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:12:28:31:7a:99:30:4e:e5:94:50:9a:8a:
                    a9:11:91:5e:8e:fb:91:80:25:0b:16:c8:94:cc:af:
                    4a:0f:20:1c:63:91:be:23:66:f9:94:2b:65:dd:0f:
                    6e:1a:d6:23:14:dd:15:46:cd:82:5e:be:7d:a3:24:
                    9d:ec:f3:49:cd:e7:ac:b1:00:f8:ae:e5:ae:b4:ce:
                    55:76:6f:c9:3a:c5:f4:a0:b7:41:99:d4:37:75:91:
                    ec:79:f0:cd:33:b5:bc:57:63:ec:c6:b1:8c:18:92:
                    8c:f7:2a:08:f8:51:8a:29:66:7d:98:a9:5a:20:f7:
                    c7:74:51:cd:28:f7:43:43:26:d2:67:57:9c:54:ef:
                    2b:e3:64:ad:c0:9e:c5:c2:42:ca:7c:6b:9f:10:f9:
                    b9:a2:aa:db:06:09:2e:55:d8:89:c9:8c:ab:0b:05:
                    61:d9:d3:99:27:66:c8:73:36:2b:ce:bd:a0:d9:2e:
                    71:2f:c3:b6:fb:c9:17:f4:9a:26:9f:41:80:2f:9c:
                    20:e9:f8:f4:1e:47:00:90:f6:dd:f9:1b:3e:a9:a9:
                    23:bc:5e:5e:2c:67:90:5d:1d:5a:3b:b8:8d:98:28:
                    af:c4:47:9e:69:c0:f5:8a:56:eb:28:9f:5c:16:ca:
                    b4:8c:f3:58:d4:49:e3:03:07:05:f5:eb:68:6e:14:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E5:48:5C:AE:39:A1:5C:9C:F8:31:C6:BC:41:A6:9B:3F:C9:C4:BB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2aea::/47

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:b1:1b:2d:73:49:8e:87:a4:e5:47:eb:c7:21:65:d2:ba:
         77:e3:b4:7f:3d:bb:59:1b:e8:24:b7:ac:4d:80:e5:12:13:1b:
         d6:59:90:c9:80:e3:df:32:4c:84:57:d7:40:0f:9a:1b:32:48:
         44:71:7e:60:7e:78:d3:02:a9:c4:ae:c4:44:88:12:50:3e:6f:
         24:e5:00:95:26:8a:67:28:03:f4:4c:a5:cd:96:33:3e:64:24:
         c6:fe:d9:39:7b:97:ef:dd:6c:9c:47:24:f6:60:95:bc:10:df:
         55:88:d9:b7:9d:35:7c:9b:93:d2:7f:d4:53:6a:2a:bf:82:69:
         67:02:b7:db:c0:f8:01:67:87:20:82:bd:89:fe:b5:01:af:56:
         4e:66:00:a9:78:ef:32:8e:49:71:51:47:ea:8f:78:e0:e3:e3:
         f1:e2:ff:ff:4f:22:d5:15:0c:15:f9:3d:ac:ca:63:c5:ba:ed:
         42:a9:1e:3d:df:99:b8:a3:08:15:55:fb:d5:d2:2a:db:cc:8c:
         77:db:1d:07:29:e0:d1:e9:89:24:6e:9b:87:d6:4a:02:af:cd:
         6c:ad:db:a4:e5:0f:dc:23:6b:41:d5:eb:df:fc:25:00:88:1b:
         33:04:c2:26:f9:07:e3:91:e4:56:8a:78:55:de:da:93:ce:20:
         70:a6:ca:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:50 2026 by rpki-client