Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4736d189-f1e1-47ae-a8ca-e49d50b68a36.roa
File:                     4736d189-f1e1-47ae-a8ca-e49d50b68a36.roa (raw, json)
Hash identifier:          2lvszEJ6ws8w5hlbznnFKBBHzdhXLHMnoSnuevia6uk=
Subject key identifier:   9D:F0:69:10:34:BE:36:B0:1F:EE:50:79:4D:06:F0:01:C0:4B:03:CA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C4C4565C24B12CD378A9BCC6BE262F2B650BD1E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4736d189-f1e1-47ae-a8ca-e49d50b68a36.roa
Signing time:             Wed 22 Jul 2026 02:02:02 +0000
ROA not before:           Wed 22 Jul 2026 02:02:02 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ae0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4c:45:65:c2:4b:12:cd:37:8a:9b:cc:6b:e2:62:f2:b6:50:bd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:02:02 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=1fbee53bb1211983c2d125795b5eea849e7b63c51a63e85b63882e30e56c0a14, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:55:27:a2:27:e9:8c:26:db:3d:06:97:2d:
                    5d:9b:18:3d:ad:76:58:2c:af:5f:9e:8e:87:d1:5d:
                    8f:6b:d3:28:c9:5c:3d:31:c3:cf:b9:8d:19:a5:ce:
                    00:ea:dc:3e:f2:26:92:c4:e9:be:06:4b:79:ee:53:
                    79:a8:9d:e0:c7:77:ff:65:7b:9a:f8:1b:b4:1e:ea:
                    49:00:a3:1b:82:00:92:a4:75:b7:28:a9:c7:e5:4b:
                    3f:61:ab:68:22:75:06:fe:38:f5:2a:d5:5c:b2:6d:
                    a4:d7:9b:fc:16:38:1e:4d:3e:35:b8:72:6e:c6:ba:
                    e3:29:0d:d7:ad:9b:4d:f4:75:fe:e4:13:d9:03:3e:
                    61:8e:19:6b:a8:75:78:35:52:3e:9a:5c:20:78:f8:
                    b4:22:49:f8:c6:dc:54:c0:76:5b:51:a6:02:47:fa:
                    0b:8e:8d:16:02:ef:b2:28:de:89:e7:20:a0:7d:20:
                    be:47:df:2d:d3:b8:02:a0:d3:50:5a:bb:9a:14:08:
                    a6:91:a0:83:d0:d5:c7:6e:15:84:6a:3d:5e:36:78:
                    8c:68:fb:f3:86:49:7b:96:af:d8:66:2b:7a:64:78:
                    0f:8f:f7:78:56:54:7c:89:95:2c:be:88:d4:40:29:
                    3d:80:e6:68:ad:98:f8:f5:4e:5d:61:01:17:c5:34:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:69:10:34:BE:36:B0:1F:EE:50:79:4D:06:F0:01:C0:4B:03:CA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4736d189-f1e1-47ae-a8ca-e49d50b68a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ae0::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:0b:0b:be:1b:cc:ce:f2:5a:69:c3:11:d9:ec:7c:12:7a:
         7b:59:dc:8b:2c:8a:9d:28:7d:5a:56:ba:c3:04:87:dc:86:d1:
         0c:ce:a8:e5:e5:86:ef:f6:25:24:8a:52:23:1b:dc:54:6d:72:
         a3:20:b3:dc:73:e1:67:60:b9:46:45:7d:4c:d1:3f:d1:54:c6:
         67:26:b4:1c:6e:3d:60:f4:b8:98:ad:f7:55:14:ed:41:64:74:
         09:e9:ec:25:f3:eb:f7:75:00:46:6b:55:00:a9:5b:a5:27:93:
         77:58:39:b9:ec:06:9c:68:b1:4a:ca:f4:f0:fe:5b:38:3e:e2:
         c2:89:2f:76:ff:0a:4a:20:1c:12:21:06:e7:83:7f:ff:c0:7d:
         59:14:16:50:fc:8e:c0:b2:16:dd:77:49:a5:e8:c8:f8:92:19:
         92:6e:11:57:c9:63:35:20:fa:23:ac:65:1a:60:10:c0:29:a5:
         35:9a:fa:ae:71:3c:c0:cb:9b:5f:e2:03:30:b1:d3:73:eb:0e:
         72:89:3e:55:1c:8b:25:00:9f:f7:54:ca:e0:e8:e5:a4:ce:1d:
         dc:57:14:94:9d:85:ec:3d:64:90:c5:25:8e:eb:ec:0c:26:75:
         c9:f5:40:93:cb:87:3e:d5:8f:87:40:ee:4b:d2:2e:49:bc:ff:
         39:d7:12:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:45 2026 by rpki-client