Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d1926d4-63d6-4dc4-bfd5-f410c5284c4c.roa
File:                     2d1926d4-63d6-4dc4-bfd5-f410c5284c4c.roa (raw, json)
Hash identifier:          qUy8ATYGtNLLcFtoHf2J54Z8ZMsgIfJ9Iy5CsNGUFDA=
Subject key identifier:   74:32:47:B1:DA:32:16:86:D1:76:0C:E6:23:8E:D4:AC:95:69:55:C3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1AB55F74FA3D78E8EF6E86C3D805CAF9B3F18155
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d1926d4-63d6-4dc4-bfd5-f410c5284c4c.roa
Signing time:             Thu 23 Jul 2026 01:30:54 +0000
ROA not before:           Thu 23 Jul 2026 01:30:54 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ad8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b5:5f:74:fa:3d:78:e8:ef:6e:86:c3:d8:05:ca:f9:b3:f1:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:30:54 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=19d6725d1a57ba75061b7abbb5a18a16642f2abf8a9d04afa8c108579844f64e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:4f:e6:d8:df:46:65:fa:65:e2:a7:73:eb:
                    13:85:a7:e6:8a:10:0b:12:e8:84:8f:28:8f:3d:64:
                    08:db:74:f5:6f:e0:4a:54:e5:92:60:f8:25:07:68:
                    a4:6c:13:16:7d:e7:51:bf:78:35:57:26:ea:ea:f7:
                    30:58:74:fc:10:65:dd:71:0c:fc:76:05:d2:7c:3a:
                    6a:fa:3c:c0:b8:53:b8:08:3c:7e:bb:01:99:3d:d9:
                    f5:0b:6e:77:5f:17:fb:a5:b4:93:b3:c4:a1:db:38:
                    11:fb:fd:01:ec:34:d1:96:36:d2:60:d2:18:86:33:
                    6c:83:cf:09:d7:11:2d:3b:dd:7f:de:40:cd:24:9e:
                    f8:6e:1d:38:f4:0b:63:cb:1e:6c:24:f4:c8:4a:b1:
                    6c:ef:fa:09:fb:e6:59:16:3b:28:a7:ab:d3:01:1b:
                    5e:97:3d:63:8a:d9:fa:1d:3b:44:56:77:47:9e:d2:
                    9a:0c:89:c4:2b:5c:a5:49:13:2c:c5:e4:82:c0:35:
                    33:88:20:45:95:12:54:cf:f9:85:57:ab:91:e9:ed:
                    ea:43:90:84:39:6d:7b:5e:99:ae:00:cf:da:9b:cf:
                    bb:f4:7f:ac:b7:d5:33:b1:98:8a:df:ac:9d:79:6e:
                    f8:4c:04:9d:e3:16:40:f6:b8:65:70:7b:e5:04:99:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:47:B1:DA:32:16:86:D1:76:0C:E6:23:8E:D4:AC:95:69:55:C3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d1926d4-63d6-4dc4-bfd5-f410c5284c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ad8::/45

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:39:b5:f6:e1:34:82:11:1d:d2:21:bf:cd:c7:14:56:ea:
         ba:c4:66:05:ef:39:c9:69:4c:2b:5e:e7:1e:56:af:d1:a5:fb:
         2d:73:cf:df:0b:25:5d:88:30:bb:1c:eb:dc:01:05:bb:b2:06:
         3c:81:ef:f2:62:85:6b:21:10:52:b1:07:a7:3a:54:7b:20:d8:
         ec:fe:2c:9f:6d:ba:9f:51:c1:2b:07:d1:15:9e:32:af:d5:0c:
         d8:a5:04:e7:5a:68:3a:f0:a2:93:fe:1a:9e:bd:05:0e:1a:81:
         2c:82:70:16:f1:93:80:08:35:7f:cb:52:52:3d:50:0d:c7:9e:
         23:b8:8d:b6:84:80:61:b7:78:1e:a0:ac:a3:cc:42:e2:72:e2:
         57:8f:3a:9f:9f:90:f5:9e:a9:60:48:e8:6e:57:b7:65:9b:a9:
         62:ba:c7:fc:8c:76:fc:62:72:8f:a5:53:c4:03:51:82:90:4d:
         48:e6:65:70:4f:5e:84:11:98:b0:37:2f:9d:09:71:5e:84:79:
         15:7c:34:03:4d:4c:28:10:78:a8:c4:35:81:39:06:b8:a8:97:
         de:0b:ae:d0:90:0d:58:91:5a:55:94:28:38:36:c0:66:8b:8b:
         c6:c2:63:a1:54:f5:73:b4:26:8c:60:92:80:82:0a:f8:de:03:
         67:23:78:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:12 2026 by rpki-client