Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa
File:                     3588765b-1a3b-4e69-87e8-4051140e1309.roa (raw, json)
Hash identifier:          6kzVfW7sfcBsGeYcW5qyXY/JJDWVPVIPSDfGKAo1ziM=
Subject key identifier:   CF:8D:42:F9:7B:78:B9:77:5E:0B:49:3C:B6:E0:AD:6E:01:8E:15:87
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       61C6DC02E0BBED9B096429DEBBADB780DC2C3C97
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa
Signing time:             Thu 23 Jul 2026 13:50:34 +0000
ROA not before:           Thu 23 Jul 2026 13:50:34 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3940::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c6:dc:02:e0:bb:ed:9b:09:64:29:de:bb:ad:b7:80:dc:2c:3c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:50:34 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=8ba332a8d26c838573c8da3c0ec499305cfcdaaea6bff8fb8ec852b38e10bd5a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:81:c3:14:62:13:e9:fb:42:3f:32:91:96:fd:
                    9e:fe:07:35:c3:94:e5:30:07:63:39:02:5c:76:fc:
                    ff:1b:98:23:ca:82:67:e9:d9:bf:1f:66:36:1b:59:
                    11:75:cc:6a:44:23:44:45:4e:52:e5:f9:a6:ae:cc:
                    78:7c:ac:16:3a:4c:49:32:2a:01:45:1e:0a:ef:55:
                    7b:41:81:ae:2c:d1:50:45:ed:ff:73:47:e0:33:5b:
                    27:31:ed:e5:c1:93:b9:a8:a9:a6:6d:3e:a9:66:7c:
                    b3:c0:ba:93:0b:45:27:7c:6b:fc:c4:f6:7b:38:93:
                    5e:d3:09:a8:89:79:25:48:70:be:e9:7e:d7:55:69:
                    fe:df:b4:c5:e2:50:d9:99:7c:d4:1f:8e:61:cb:dd:
                    13:98:17:bd:64:37:fc:b2:6b:f9:9b:bb:06:a1:9d:
                    9e:07:fc:e6:f8:19:2c:a1:46:40:39:66:ae:00:95:
                    ab:f7:70:b8:8d:bc:d2:7c:c2:c4:26:d2:bb:11:62:
                    05:0a:1e:93:6d:c9:30:2d:7c:11:85:07:c9:0e:ed:
                    f7:f6:46:a2:cc:55:21:5a:ed:bd:23:42:94:54:ab:
                    81:29:ce:c6:6a:7f:f3:7d:04:3e:c7:94:39:a0:1e:
                    3c:94:af:6f:c4:47:68:b5:26:47:c3:c5:5f:c6:ea:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:42:F9:7B:78:B9:77:5E:0B:49:3C:B6:E0:AD:6E:01:8E:15:87
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3940::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:c3:65:ec:c5:56:ed:05:7b:f1:6e:85:f0:ce:89:c1:ad:52:
         79:70:ee:c6:4e:31:d4:25:70:5d:34:d8:d1:83:5e:cb:1b:06:
         0f:5a:b6:3a:2f:ab:88:d1:d9:dd:71:ac:01:89:e8:4e:db:8f:
         32:aa:69:2b:b4:19:5f:9d:34:7d:65:a6:05:dd:95:17:d0:32:
         3b:4f:16:e2:32:50:5d:af:b6:11:68:dc:c4:96:37:5e:ea:1e:
         67:3d:90:8d:57:11:9f:14:40:a9:22:c5:db:a9:ce:2e:2e:dc:
         67:96:be:45:c5:7f:f7:e7:8a:a8:b7:6d:6a:06:11:14:e1:c8:
         e1:40:2d:c4:c6:ee:d3:8c:a1:55:f3:e8:57:f4:49:73:dc:ae:
         9a:2a:9f:91:cf:30:a8:f1:3f:67:f0:7a:0b:1e:55:c8:1d:35:
         c5:83:42:c7:5e:e1:15:88:c7:ac:34:8c:25:3f:6d:96:eb:3b:
         6e:ef:f8:bd:c2:5b:3f:0b:0f:e2:19:28:61:9b:df:10:dc:49:
         69:42:7f:a4:5d:da:67:77:b6:38:34:20:58:f2:9c:24:83:6e:
         74:c4:9c:24:87:28:83:f7:8c:dd:23:cc:0a:8b:c5:b0:31:39:
         12:b8:87:b3:8c:55:9f:02:ea:a5:db:81:55:a1:cc:48:ff:89:
         c8:38:ab:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:25 2026 by rpki-client