Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa
File:                     4469963a-53ff-432f-9286-21e483aa5476.roa (raw, json)
Hash identifier:          T0VCVZo6tQwkLbSgar3a36ixYihZE/WYuVY52G9rKaM=
Subject key identifier:   2E:B3:26:61:11:45:8E:E4:F6:07:2F:0E:21:C4:8D:7C:5D:E0:2E:FD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3D7A0EA25E4FBAB41F9603AF142AB6BD342FFAEA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa
Signing time:             Thu 23 Jul 2026 13:00:54 +0000
ROA not before:           Thu 23 Jul 2026 13:00:54 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3388::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7a:0e:a2:5e:4f:ba:b4:1f:96:03:af:14:2a:b6:bd:34:2f:fa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:00:54 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=b49834a31a83dee597665aec8c297fc21471c3914b569976a984e5a3876ef007, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:58:9a:8f:1d:08:6e:78:51:20:a0:90:a3:72:
                    91:d4:70:6f:eb:b9:e7:7f:d2:8b:8a:f2:de:32:63:
                    c8:50:92:b3:5c:1d:38:a0:21:03:96:da:b7:f6:27:
                    36:05:60:0e:aa:51:14:29:a5:6c:24:df:e1:ff:a0:
                    92:ca:9c:19:d6:f1:ad:2a:2c:d6:7b:6e:f1:74:f9:
                    34:30:32:11:55:57:87:b0:92:4d:a8:df:5f:c0:61:
                    ce:f9:d2:c6:57:5f:7c:f6:98:ef:71:f2:da:18:4b:
                    b4:b5:5e:f1:d7:e1:15:60:0a:00:2c:2f:fd:ab:d6:
                    d1:79:9c:07:77:9b:9a:d7:df:6f:63:6b:a0:92:95:
                    d8:14:59:c0:d7:d9:52:67:61:7a:97:8c:92:b9:85:
                    d4:ec:a1:83:b5:b0:b2:d6:56:be:03:09:35:d4:1e:
                    c5:f2:6f:bc:43:da:9f:66:db:f1:48:ba:cc:88:fc:
                    ad:c4:76:03:2d:d5:36:27:20:d4:6a:df:50:2c:57:
                    d8:28:b1:5a:ce:2c:aa:9f:46:f3:db:88:6e:0c:07:
                    7f:74:c7:1b:cc:b4:6f:59:4e:85:d9:c4:99:e6:bc:
                    c3:b1:7c:ee:17:b8:b5:f7:c9:24:bf:43:12:bd:b5:
                    08:ce:69:b4:65:66:ac:5a:5d:71:4f:59:36:9e:1e:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B3:26:61:11:45:8E:E4:F6:07:2F:0E:21:C4:8D:7C:5D:E0:2E:FD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3388::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:17:1a:13:87:14:b5:29:3f:4a:52:41:c2:89:b4:60:45:6f:
         6c:69:6c:ef:d3:ef:11:f7:cd:95:df:fe:c3:eb:b2:33:b3:e7:
         8f:ce:db:49:ef:6c:8b:0d:5f:e5:1e:d7:f8:94:e8:9e:0e:25:
         35:5a:71:be:5a:18:5f:18:8c:e9:5d:94:18:37:f4:28:b3:f7:
         e1:4e:4a:33:84:62:c2:3d:42:a9:18:cb:7a:90:22:d8:50:d6:
         cd:b4:9c:5a:51:1a:64:41:d7:97:67:40:cf:79:5c:e8:7d:56:
         66:10:81:3f:c1:60:0d:83:46:8f:1c:01:a2:bd:f0:51:e2:84:
         58:79:e0:6d:ef:31:ea:cb:6e:47:ae:92:23:11:9f:8f:97:35:
         33:f1:bd:ae:24:5b:b9:81:92:f6:df:7c:e5:16:ef:1e:b4:6f:
         99:92:46:66:28:a1:57:b4:f2:d7:c5:e4:89:08:03:3b:a2:c1:
         5e:43:13:8f:07:78:14:84:fa:8f:17:47:eb:62:13:d2:2e:a0:
         35:67:63:57:43:50:58:c4:cb:51:72:7a:a4:c7:50:71:53:fc:
         2d:03:87:38:68:dc:d7:f9:0e:8b:b1:03:dc:44:f6:ea:03:73:
         64:10:03:09:1e:b2:53:62:e1:0e:a7:2d:78:1c:0d:d2:11:9a:
         73:e6:e3:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:25 2026 by rpki-client