Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4556d55b-242d-4499-981d-f140412fbfb6.roa
File:                     4556d55b-242d-4499-981d-f140412fbfb6.roa (raw, json)
Hash identifier:          /ukTJWj4kcsduoG/ogo0xH84qG2hXfEH2V3fUvKcfGA=
Subject key identifier:   30:3C:CA:34:31:60:BE:1F:7A:A8:E8:6A:F5:E3:12:1C:D8:95:E4:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68B26C8DA223196BBD9F47213431F48762D85011
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4556d55b-242d-4499-981d-f140412fbfb6.roa
Signing time:             Thu 23 Jul 2026 11:40:03 +0000
ROA not before:           Thu 23 Jul 2026 11:40:03 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:6c:8d:a2:23:19:6b:bd:9f:47:21:34:31:f4:87:62:d8:50:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:40:03 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4d41c53e5ba6fb30b7b5503e82acbb278069dc61244723517a9bb88258a11b4b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:4f:1c:34:39:39:36:47:55:55:d3:5b:e3:
                    65:d5:d9:a7:2b:5d:66:60:f4:03:fe:fd:4d:22:5d:
                    cb:5b:3a:47:fe:ac:dc:8b:5b:b9:db:22:c8:f2:db:
                    24:48:88:9f:70:d1:a5:6c:27:82:7b:8a:34:5a:b8:
                    9b:33:d9:88:a4:5f:a3:1b:93:79:9d:75:8d:8b:69:
                    a9:c4:b8:ac:44:e7:48:83:7f:8b:4a:d2:64:29:a9:
                    87:2a:b2:eb:c7:f2:ff:f9:88:e4:b4:62:14:3f:0c:
                    0f:e0:ff:f4:63:1f:05:c1:47:6e:af:23:eb:80:24:
                    0b:e7:57:9b:43:ff:85:8b:79:ab:13:99:6f:fa:3d:
                    c3:b9:06:f9:95:fa:2b:45:b0:42:11:a1:e7:79:44:
                    eb:1d:2b:0f:6b:38:e9:41:0e:16:6b:57:8b:c3:c6:
                    7f:06:d8:29:68:f5:4e:09:8e:87:25:1b:43:42:21:
                    94:c0:1f:b0:72:0f:86:66:f1:0d:52:cc:f5:ca:65:
                    1b:40:f2:5a:3b:ed:b1:b0:75:cd:dc:e9:da:ed:5f:
                    c8:ed:db:4e:ff:11:ab:2f:88:cc:4c:1b:6c:54:27:
                    d3:0d:b1:09:5d:b0:d8:88:5a:12:3a:84:9f:9a:b9:
                    be:46:8c:ab:ae:6e:ad:0a:43:2f:ed:ce:de:03:08:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:CA:34:31:60:BE:1F:7A:A8:E8:6A:F5:E3:12:1C:D8:95:E4:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4556d55b-242d-4499-981d-f140412fbfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:62:a7:42:aa:6b:82:09:e9:6b:1b:9c:e3:61:e1:23:5e:6f:
         9a:01:d3:e3:3e:ae:45:82:03:e1:c0:37:f1:90:9d:c2:8d:a2:
         c7:c1:e4:25:af:7b:11:f0:c0:57:b8:bc:d4:f7:cb:6a:33:d5:
         7d:93:11:0b:c4:58:61:0c:5a:b3:c9:97:6e:45:87:7a:e8:15:
         6e:15:60:4e:85:4e:c7:e3:eb:6b:9e:19:74:4d:3f:8c:3c:fb:
         4e:cc:2a:46:ad:76:1f:ab:8b:a8:03:cc:cf:48:e6:8c:96:73:
         4a:6e:2e:46:c3:b4:70:f1:ae:8e:87:3c:03:6a:b3:99:a9:09:
         98:67:89:a0:b3:c7:0b:b9:bb:38:37:30:ac:63:ea:90:0e:8b:
         d5:05:36:df:95:2d:2b:83:fa:25:b7:b7:c5:c5:17:dd:bf:80:
         4f:ff:86:6d:f5:7c:6a:f8:41:e0:88:af:a8:ff:68:c8:34:69:
         96:55:95:6a:0e:7e:6e:48:4e:4f:a9:9b:74:85:40:06:75:fb:
         87:9f:90:9e:69:3a:e0:7d:a7:57:90:27:a3:85:5a:54:38:f1:
         71:90:92:93:89:79:4e:b0:74:ed:c7:d5:fd:49:02:b5:7c:8a:
         61:27:ee:d3:a2:c2:9e:e1:c0:ba:10:f8:61:2d:8a:ab:f3:32:
         94:f0:13:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:46 2026 by rpki-client