Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad68450-f77f-4665-a5b1-39dfe4a0aef3.roa
File:                     4ad68450-f77f-4665-a5b1-39dfe4a0aef3.roa (raw, json)
Hash identifier:          WvibgbSreokF+Sx1B7NTn96+E9rFw88QoncaOd9B0rM=
Subject key identifier:   91:A2:0C:08:4A:13:BC:40:DC:99:E4:E3:28:9F:41:63:97:38:8D:FB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       558876F7E115BE5E12DD5E83D39A0D53B190D703
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad68450-f77f-4665-a5b1-39dfe4a0aef3.roa
Signing time:             Wed 22 Jul 2026 03:30:16 +0000
ROA not before:           Wed 22 Jul 2026 03:30:16 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2910::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:76:f7:e1:15:be:5e:12:dd:5e:83:d3:9a:0d:53:b1:90:d7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:30:16 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=ebb890dd19c76002709f5f998efeac862dae240d2cfc4f025212c0fbef628f76, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:65:2f:f6:c1:36:ca:c7:55:ae:e7:1c:09:
                    ce:ef:c4:b2:f5:e1:92:6b:fd:8e:7c:44:d5:92:25:
                    c7:d9:45:b8:d5:6d:b3:ff:8c:8e:bc:b4:d9:e7:cb:
                    8d:4a:73:f1:e7:0f:e1:b8:d8:9d:bd:d7:42:1c:81:
                    7a:0b:1f:52:be:27:42:66:88:17:1b:27:4f:a6:75:
                    bb:02:0e:76:18:d0:3f:ae:f1:83:1d:ea:2b:b2:d4:
                    cc:35:c4:b8:cd:05:89:8c:88:01:f2:d8:62:d1:dd:
                    73:41:98:47:22:b6:76:f6:2e:4d:b2:ed:8d:91:3e:
                    59:f0:bc:a9:b4:31:91:7e:f4:4c:42:e4:7b:21:7e:
                    73:a3:e9:6a:aa:aa:1e:1b:d2:0b:cd:f2:88:df:da:
                    8c:c7:d0:ad:56:c8:66:0d:12:10:f2:26:5c:71:a8:
                    cb:23:dd:31:d4:bf:4d:37:44:0f:b6:a1:88:17:25:
                    97:a2:f6:10:09:2c:72:72:dd:2d:ef:13:01:8d:b6:
                    c0:b7:ea:4e:f6:0c:83:7b:96:5a:e9:ae:d5:0b:19:
                    e7:c3:0c:3d:a7:5e:a5:6f:08:63:a7:0e:43:ab:63:
                    a8:82:b3:3c:b4:3c:4f:41:f8:3f:3d:95:97:de:51:
                    62:ca:5f:7d:63:b9:ee:ae:d3:3c:19:8a:92:10:a5:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:0C:08:4A:13:BC:40:DC:99:E4:E3:28:9F:41:63:97:38:8D:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad68450-f77f-4665-a5b1-39dfe4a0aef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2910::/45

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:f6:5a:84:79:30:ca:ce:26:b5:0d:35:1d:4a:5d:ad:20:
         c4:23:e7:aa:fb:17:ac:bf:5e:ae:74:3d:ec:df:1f:99:3c:88:
         17:36:fb:5f:d0:d8:9f:47:bb:fb:04:22:f7:6f:90:de:59:6b:
         68:f7:2d:bb:d7:24:77:1c:63:3b:22:b7:dd:cf:63:7a:48:63:
         56:91:0f:38:00:26:f1:83:8f:59:28:32:dd:e3:f3:b4:2c:aa:
         5f:41:26:07:cd:33:f2:89:e3:0a:00:07:09:15:e5:00:58:e0:
         08:1f:12:91:b5:98:b0:8f:88:70:c8:66:e1:6d:96:ab:a5:af:
         f9:52:5f:23:3e:fa:5e:00:49:78:ad:34:60:e1:06:8f:f7:48:
         48:fb:9c:7c:c0:1c:78:d1:bd:0a:aa:fc:d0:fa:2e:03:88:97:
         b1:30:cf:a1:38:79:f7:2b:6c:9c:66:8a:41:20:ba:3f:af:e4:
         91:a9:8f:9d:6c:60:9e:e3:66:e6:ff:7c:88:b8:55:6d:7d:f5:
         2d:0b:96:17:cd:0d:00:b4:68:f3:ec:f0:f9:f5:93:46:86:d0:
         7a:b4:9a:3c:27:bb:5f:8e:16:a2:08:91:a0:48:ae:ba:27:9d:
         6c:4a:29:81:37:ef:1b:43:71:d5:2e:b1:a0:83:8f:bd:56:86:
         ce:40:39:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:22 2026 by rpki-client