Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/450b64dd-a420-4cee-a7a0-fe2bcb9ed878.roa
File:                     450b64dd-a420-4cee-a7a0-fe2bcb9ed878.roa (raw, json)
Hash identifier:          rCt7ChZiJ6sidzDljam74kWc0cKcKBzrMKO3wBuH15g=
Subject key identifier:   6B:66:7F:5F:AE:F7:C3:6E:CE:39:FD:22:ED:92:42:6B:83:B9:44:67
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A321C04EEF1FED311E569F794D5BCAEFA92F65D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/450b64dd-a420-4cee-a7a0-fe2bcb9ed878.roa
Signing time:             Thu 23 Jul 2026 10:02:09 +0000
ROA not before:           Thu 23 Jul 2026 10:02:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ace::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:1c:04:ee:f1:fe:d3:11:e5:69:f7:94:d5:bc:ae:fa:92:f6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:02:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fd94c84ba8805495236d685537d57c55a4ec2a4de1deb53183ec8ed48aa26734, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:70:e8:c8:e8:4a:86:a1:d1:7a:6b:11:cf:
                    8b:2f:d2:72:38:83:52:26:17:7a:6b:9a:3d:6b:5e:
                    a4:63:a4:d2:5d:4d:be:40:c6:5a:61:a1:85:64:59:
                    8d:eb:a4:a4:6c:a3:d4:ff:b2:33:d4:e0:64:bf:0b:
                    fc:30:85:3a:bc:e3:82:6a:32:4f:70:ac:ed:24:84:
                    da:57:6c:b6:d3:b2:06:c5:df:fe:66:95:45:4e:9b:
                    17:e3:5c:18:e4:ee:16:ea:3c:68:e7:96:2d:b0:ed:
                    21:f0:54:2a:49:a2:8f:43:27:0f:a9:71:e8:6f:67:
                    56:95:4e:cc:95:d3:7b:be:77:27:2c:61:f3:d3:fc:
                    8a:6f:45:36:13:1f:25:c4:b7:91:bf:04:4e:0b:18:
                    52:ce:91:34:35:6e:d5:5f:76:59:70:3e:4d:30:7f:
                    59:eb:26:e9:ef:ea:98:63:1d:bb:69:36:c5:ba:f0:
                    f8:24:02:f2:7d:42:85:8e:47:88:9d:ca:05:24:15:
                    ff:42:c0:bb:e3:ad:18:2a:d4:26:2a:5e:87:66:5c:
                    9e:b9:cf:fc:6a:eb:3b:44:a7:7d:a2:23:ee:c0:b6:
                    c1:1f:b1:d8:1b:07:9c:10:60:6c:8f:10:e4:92:98:
                    be:74:c7:19:4b:9c:43:08:31:38:c9:9f:73:0d:29:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:66:7F:5F:AE:F7:C3:6E:CE:39:FD:22:ED:92:42:6B:83:B9:44:67
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/450b64dd-a420-4cee-a7a0-fe2bcb9ed878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ace::/47

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:76:3f:c9:5e:ac:28:cc:43:69:a5:4f:9e:ce:03:ee:30:
         8d:53:32:33:f5:a5:13:a9:63:b9:12:ca:a8:69:61:df:4b:91:
         49:6b:ed:0e:5c:7f:79:a9:b7:cc:ed:08:da:3a:f7:9c:46:31:
         7b:f4:51:b9:63:c1:ef:24:cd:48:88:14:a9:ea:a0:d9:b7:11:
         8b:13:76:f4:fe:88:4b:02:b2:0f:6c:51:39:12:42:0a:05:b8:
         3d:1e:27:83:06:72:cb:a4:d2:dc:8d:c7:bc:88:6c:af:6e:d2:
         98:dc:40:48:ac:d8:10:98:ba:e0:61:75:09:74:01:69:e7:55:
         88:74:a3:6a:5f:9d:18:8f:40:f8:e0:40:cd:49:be:91:be:99:
         13:c7:1e:57:c9:70:d6:f8:e5:be:83:f8:e8:9f:32:2d:f3:f6:
         06:05:3a:3d:e4:35:71:4a:02:25:c8:f0:f9:0d:b2:8c:2b:43:
         30:72:cb:47:ac:86:9b:75:96:8d:0d:ff:c3:85:1b:b2:dd:47:
         5a:83:9e:87:e4:55:61:0f:ad:5f:ab:00:d5:4a:75:25:57:30:
         12:a7:74:77:2d:bc:80:ae:d1:1d:5a:4a:31:e6:3f:04:75:80:
         e4:e0:f1:f4:38:3b:7a:80:2d:73:61:c0:86:f1:af:a5:99:7d:
         9c:8c:98:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:05 2026 by rpki-client