Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/375ebfbe-51df-4e1b-b328-b9599784bdef.roa
File:                     375ebfbe-51df-4e1b-b328-b9599784bdef.roa (raw, json)
Hash identifier:          n5L8DgUAIHssXZrMEsJ36XM8ssQZu8cqwMrxukX5yM4=
Subject key identifier:   F5:AE:F9:5E:92:31:52:C0:8C:92:81:CB:2D:E3:B9:CF:76:24:BE:A5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D2D1FE72EDE9949F751D2B17402FC84F7654906
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/375ebfbe-51df-4e1b-b328-b9599784bdef.roa
Signing time:             Thu 23 Jul 2026 06:41:29 +0000
ROA not before:           Thu 23 Jul 2026 06:41:29 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a1ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:1f:e7:2e:de:99:49:f7:51:d2:b1:74:02:fc:84:f7:65:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:41:29 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=6c73ea995065061ad3d9db243c6d830b6dd95070c1a601643143cb1686bf8091, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:fa:f2:f4:e4:a2:3c:dd:1b:4f:44:8e:20:
                    06:00:24:b0:e8:4e:36:d3:2b:0c:ac:9e:7b:60:9c:
                    1b:ad:f3:78:6f:9a:f5:a2:96:70:41:2b:d8:bc:72:
                    83:79:69:0d:18:1b:d2:5a:6a:94:ab:dc:5f:9b:46:
                    a6:73:3d:46:5d:cb:bd:e3:d9:d0:e4:d9:00:5a:0d:
                    af:7c:39:0b:9c:3c:28:3b:c4:34:ee:17:5d:14:cc:
                    f3:16:3c:94:9f:89:bc:85:90:ca:15:5f:68:93:be:
                    89:16:13:4e:48:85:13:3b:80:8f:5b:cd:02:b6:20:
                    21:fc:56:f4:cd:65:11:91:51:c5:8a:40:e3:b0:5f:
                    0f:c7:b7:ba:a2:8b:89:d5:45:d3:1b:e4:74:6e:70:
                    d2:40:4c:d1:51:86:ea:89:60:83:fb:64:70:e8:7d:
                    53:f5:f5:9d:51:08:32:69:22:a8:6e:03:87:f4:85:
                    bf:0b:30:48:c8:8e:64:d6:20:40:15:2e:b2:de:05:
                    db:37:35:59:0c:34:24:32:ac:d5:53:90:d1:80:fb:
                    8c:06:4e:61:38:44:24:95:d8:dd:5e:d7:b4:cb:93:
                    13:6e:e2:0a:a1:93:fd:f5:27:70:c9:e3:e0:d5:96:
                    e1:54:1e:e5:60:f9:f6:6d:7c:fa:27:eb:11:72:7f:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:F9:5E:92:31:52:C0:8C:92:81:CB:2D:E3:B9:CF:76:24:BE:A5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/375ebfbe-51df-4e1b-b328-b9599784bdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a1ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:36:42:7b:74:4d:27:91:af:85:0a:23:6e:4a:20:b4:19:39:
         84:46:1c:1d:f7:ac:d7:f5:a7:9d:c4:2c:33:4e:ae:69:33:b7:
         df:4f:37:aa:d3:48:b9:c9:ca:87:8f:c4:8c:e1:06:14:d6:06:
         40:db:ec:c4:58:44:5a:bb:4a:02:a6:7e:ba:d5:54:86:4e:b0:
         03:11:1d:f1:ca:20:d1:50:53:63:e5:9e:22:86:de:66:ff:aa:
         30:a3:5f:45:a1:57:31:c0:b0:78:78:6e:58:81:ae:8c:6d:0e:
         49:5d:f5:04:e4:ef:51:04:b6:0e:50:51:94:b5:45:1e:3e:c7:
         68:8e:37:4d:67:12:c3:8f:1e:f4:bd:db:7a:bf:d6:cc:a3:b2:
         8f:91:5e:a6:ee:03:b8:cd:64:44:65:92:98:e7:a7:54:4c:91:
         3a:1e:9a:b4:44:b2:91:c1:ce:2d:27:e1:74:f1:7b:06:74:19:
         52:be:63:ca:ee:54:dc:a1:12:95:e8:75:09:a5:8e:d8:4c:78:
         71:03:07:fd:e2:bc:c1:68:a7:0f:b1:4e:53:a7:da:2e:54:44:
         7b:d4:9e:90:6f:c4:7d:12:3d:77:21:ff:e2:53:4c:38:34:88:
         64:55:2b:7a:cd:cd:40:0d:cf:8d:17:ea:df:84:2f:9f:c0:00:
         fb:48:28:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:35 2026 by rpki-client