Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa
File:                     3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa (raw, json)
Hash identifier:          EQJsD8oPod0u4fkXxDkGAxHwuqpMxMyZ+9WJMyz6GmU=
Subject key identifier:   81:C1:D0:85:D2:2B:90:4B:C6:2B:F6:71:AA:3F:F1:E6:54:87:B5:0C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E4E19FED8691BF8DCCA7AAB6F5EACB163BD0035
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa
Signing time:             Thu 23 Jul 2026 03:50:55 +0000
ROA not before:           Thu 23 Jul 2026 03:50:55 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:19:fe:d8:69:1b:f8:dc:ca:7a:ab:6f:5e:ac:b1:63:bd:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:50:55 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fd80794fe3d7de9473b2018b24be9f3cfd0120fa799fd4c9087a19180dd5c5c5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:d5:5f:31:a9:96:3f:ed:18:65:00:f8:c8:
                    10:62:21:2e:30:f3:8a:40:67:52:27:20:a9:10:a9:
                    c9:7b:e1:75:1b:74:d0:74:c7:08:7c:a1:14:30:44:
                    72:7a:40:7f:8d:55:e7:45:6e:5b:29:5c:fe:65:4e:
                    0f:f9:dc:41:57:e6:b9:5e:a3:61:3f:d4:5b:9d:ac:
                    61:b2:91:1f:36:3d:47:2c:0d:bf:1d:79:02:70:99:
                    86:6e:bb:89:48:58:b4:c1:04:6f:f7:aa:61:d7:7d:
                    fc:98:ad:a0:90:b1:85:b3:f5:c3:2e:d3:46:e6:27:
                    ac:6b:49:84:a4:5b:11:09:2c:f5:c4:22:3c:55:5f:
                    9e:02:5b:3a:8e:b1:8c:ae:1b:9a:56:d5:95:08:f0:
                    61:ef:8f:6c:f2:29:c3:6a:19:29:98:a1:c0:99:9a:
                    af:48:7d:b1:9c:75:80:7d:c5:ec:c0:c3:ef:92:e5:
                    ef:71:16:80:5d:0a:81:3d:90:af:b1:10:bd:e1:30:
                    20:0d:c5:05:0f:ea:ff:a6:cf:f8:c8:cf:62:da:40:
                    73:5f:9e:16:67:09:d0:30:5b:8f:1d:76:2e:5a:ce:
                    b1:35:3a:7d:70:03:50:2e:5c:91:2a:0c:bb:61:b3:
                    ca:48:1b:da:9b:0e:78:dc:d4:60:f3:65:aa:7f:5b:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C1:D0:85:D2:2B:90:4B:C6:2B:F6:71:AA:3F:F1:E6:54:87:B5:0C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2100::/41

    Signature Algorithm: sha256WithRSAEncryption
         43:82:02:43:32:de:41:4d:46:d1:11:e2:6d:28:cd:e0:a9:a3:
         85:d2:34:d0:ab:2e:8e:78:f1:3b:ee:83:21:9f:d4:45:7f:af:
         39:4f:ef:3f:bb:2a:80:60:b9:91:18:20:65:47:a3:ce:75:8e:
         e0:26:5f:61:5e:a2:3f:ad:74:df:1a:82:7f:ae:64:32:92:28:
         b8:7b:18:9d:c6:a4:32:0f:52:cf:a3:5b:8c:e6:d9:27:87:84:
         25:67:80:e8:85:04:54:0e:72:8c:e0:e6:cc:d8:25:f3:ac:e6:
         e8:67:95:3d:51:6d:5d:eb:1d:76:a8:e7:84:13:bd:a8:75:28:
         82:f5:0e:bf:82:26:be:b5:06:82:84:34:37:3a:51:53:0e:bb:
         16:06:8b:3b:88:df:4b:bc:a1:8a:52:45:31:fb:eb:73:1c:63:
         4d:16:80:55:0b:ab:8b:a7:ed:3d:72:97:b4:bd:a7:45:a0:81:
         36:5a:6c:1b:30:e8:fe:bb:ab:ed:50:70:a8:5a:a2:5b:01:98:
         c6:99:78:b2:cc:c5:3a:f6:3f:07:18:d5:f0:7f:ab:31:6b:bd:
         16:44:a9:7d:3d:e7:b9:41:71:1f:16:47:a1:e4:6f:b4:9b:f3:
         da:83:85:7c:f3:c6:28:61:65:ba:76:25:71:61:26:d6:fa:53:
         e6:ef:95:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:56 2026 by rpki-client