Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/410e7899-ca12-4fc5-8fff-9a8ca8ad08b7.roa
File:                     410e7899-ca12-4fc5-8fff-9a8ca8ad08b7.roa (raw, json)
Hash identifier:          Ro27IDz7KLcSev9wZ7rDGjaeIJMsLQiDfolHBdGkm3A=
Subject key identifier:   18:51:0F:C2:A3:D9:54:C0:4C:CD:D4:AD:16:7C:48:DB:A0:73:52:78
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E0F00503BF7DED904DB845BCF7B45B647A59DAF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/410e7899-ca12-4fc5-8fff-9a8ca8ad08b7.roa
Signing time:             Wed 22 Jul 2026 01:01:15 +0000
ROA not before:           Wed 22 Jul 2026 01:01:15 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:24bc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0f:00:50:3b:f7:de:d9:04:db:84:5b:cf:7b:45:b6:47:a5:9d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:01:15 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=e6877c10dfbead42cd44c18ee3994da7601d68d712ca419a62bb9feb77622b74, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:1a:ed:1e:a4:1d:3d:f8:33:e6:7e:af:b8:
                    d7:c6:fd:4d:de:20:02:f5:eb:c1:5f:c9:cc:f9:96:
                    da:b1:36:21:48:84:08:f3:68:46:dd:be:01:97:c1:
                    0a:1c:eb:19:66:c5:14:06:f4:17:c8:9d:24:8e:af:
                    8b:94:5f:f3:52:f0:55:8e:d1:5c:a3:39:db:58:8e:
                    09:8d:35:2b:ed:a0:ce:e8:65:95:45:ec:11:d5:92:
                    da:93:b2:23:6a:6b:86:79:e3:07:31:99:2e:a4:f5:
                    13:74:51:cf:6d:3f:41:aa:b8:90:73:64:c2:4d:10:
                    21:1c:8e:50:d1:62:db:a2:fb:0a:40:65:06:65:0a:
                    ce:b7:2c:e2:ab:b9:f8:ff:cd:24:48:50:82:df:62:
                    6c:35:46:6e:6a:a3:f0:75:5a:c3:f3:bb:76:b3:2c:
                    69:6c:7a:44:2b:8c:21:16:fc:2c:ce:38:e6:f9:25:
                    1a:71:a6:21:10:2b:34:bb:f2:d8:f4:aa:05:c6:b3:
                    fc:b6:d4:06:c0:46:1b:95:7a:dd:1c:fa:0f:2f:60:
                    25:d5:34:65:4f:d3:ff:fc:5a:b5:f9:c0:9d:99:5c:
                    2b:29:9c:a8:15:84:15:bb:16:28:9d:ed:97:93:5c:
                    00:1d:7c:38:ae:15:b1:b2:4c:18:74:2d:6a:84:ec:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:0F:C2:A3:D9:54:C0:4C:CD:D4:AD:16:7C:48:DB:A0:73:52:78
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/410e7899-ca12-4fc5-8fff-9a8ca8ad08b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:24bc::/46

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:7e:b9:d8:88:b4:bc:41:b9:31:ee:dc:d3:a7:e2:55:4c:
         fa:82:fa:b1:c2:68:62:db:e3:0b:20:66:24:fc:28:4a:35:71:
         02:b1:68:98:a1:5f:88:c4:55:c7:3d:4c:f8:2e:16:2a:94:53:
         ad:3f:82:48:b9:5e:b5:65:1a:40:d6:eb:3e:19:28:1c:ba:24:
         00:77:5c:9a:81:9e:b9:7d:c9:70:e7:de:e4:76:0d:5a:f9:3d:
         31:b2:7d:87:09:38:fc:25:20:01:28:71:b6:13:40:cd:6b:d6:
         28:9b:2c:23:cc:12:ba:ba:a1:e1:0d:0a:1b:b6:ec:6e:63:58:
         da:6c:dd:ba:29:36:35:92:b1:29:b7:29:ce:6a:e1:28:c5:5b:
         d1:81:52:27:95:e0:f9:92:a3:85:52:5f:66:00:1f:41:5a:eb:
         af:3a:c7:0b:70:bc:a0:12:06:3c:9c:21:42:44:cd:ff:c4:9b:
         0b:64:2e:6b:06:a0:ea:eb:d7:e2:6a:b7:14:94:22:2c:a7:2a:
         0c:e7:5b:1c:66:58:8e:4d:9a:a3:9e:cb:7c:7e:6c:bd:3f:77:
         1f:1c:1f:f9:98:36:b6:36:50:6a:e5:99:e1:32:9c:74:c9:23:
         b6:85:95:3e:0a:e9:af:c4:46:41:9a:b8:46:f8:9c:9d:c6:3a:
         56:09:23:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:48 2026 by rpki-client