Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/500a6426-312c-4b6f-87b7-bbaab025c411.roa
File:                     500a6426-312c-4b6f-87b7-bbaab025c411.roa (raw, json)
Hash identifier:          elPtnLd92zDWEpPIK3jHhU87w4qN18Zhu1K5R3fKEpw=
Subject key identifier:   82:D3:F0:8F:D6:89:13:E8:11:D7:11:A2:BD:3B:11:54:ED:8F:F6:9F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C72BA12C33815F0429796B760828B4A0A2F4B3F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/500a6426-312c-4b6f-87b7-bbaab025c411.roa
Signing time:             Wed 22 Jul 2026 03:10:40 +0000
ROA not before:           Wed 22 Jul 2026 03:10:40 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2980::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:72:ba:12:c3:38:15:f0:42:97:96:b7:60:82:8b:4a:0a:2f:4b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:10:40 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=ea546da22568a6cdbb1c57f0bf6d84e04e5077a9c6205da80ca027ffb50f768e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:3a:a8:e9:e1:c5:b2:f8:7b:82:f0:28:eb:
                    46:5f:4e:f3:84:74:99:c8:3b:18:9e:dd:bd:d8:82:
                    95:92:1a:5a:8a:9f:07:05:2a:55:ed:e3:98:f2:5b:
                    66:7c:2a:f3:8d:cc:20:86:a9:6e:9a:9b:19:e7:03:
                    73:75:da:2d:59:3f:ca:c9:02:ac:38:cf:c1:11:c5:
                    59:a0:02:b9:78:c8:f5:2c:73:38:dc:ad:dc:45:6c:
                    ee:37:68:dd:1f:d7:28:53:a9:c1:64:3b:67:e9:c0:
                    3b:32:c0:5c:cc:f3:b9:87:ac:15:3a:ab:c5:90:10:
                    78:a0:93:87:e6:b5:a3:2d:c4:b5:b9:cb:8b:0e:7b:
                    b3:41:b3:ed:ca:a0:c5:a4:e6:76:56:56:e1:2f:88:
                    78:82:59:92:21:97:3e:43:41:83:a8:7d:b2:ee:d2:
                    78:3b:e7:6e:bf:f3:a1:ff:d3:ba:46:f1:22:84:46:
                    5e:4b:e8:db:50:4e:fd:08:72:86:c3:d1:af:0d:68:
                    e7:6d:46:91:9e:6b:41:ba:67:d7:47:c0:15:bf:77:
                    cf:03:91:5d:8e:50:20:e7:6c:6b:0d:e8:c9:a3:43:
                    e0:4b:0f:fa:e3:8d:01:7e:dd:cc:b2:04:42:d6:09:
                    32:8b:95:d6:cb:d8:00:89:05:a6:d6:9b:c5:bb:01:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:F0:8F:D6:89:13:E8:11:D7:11:A2:BD:3B:11:54:ED:8F:F6:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/500a6426-312c-4b6f-87b7-bbaab025c411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2980::/47

    Signature Algorithm: sha256WithRSAEncryption
         c1:17:da:2e:b2:30:47:6f:9a:81:42:6a:be:40:5d:b5:1c:32:
         01:cb:a0:49:ca:1d:05:08:64:d1:77:dc:a7:e1:74:90:8c:6e:
         b5:ff:81:e9:cf:e8:84:5f:97:60:f4:4f:c0:a8:ec:11:48:2e:
         07:3d:6a:db:0b:df:a6:c7:35:62:ce:4b:95:54:9e:3a:7c:52:
         ac:b6:e6:94:f8:39:2b:f9:08:27:96:c3:83:f8:ea:07:8b:c4:
         95:7f:ab:ff:fa:85:ed:7c:63:83:51:fd:22:72:e9:a0:80:03:
         a6:82:8f:f5:da:9d:64:bd:43:31:f2:73:5a:f7:b4:15:6f:cb:
         de:e9:88:29:4e:b9:e3:e7:85:46:53:0f:af:b3:02:2b:43:de:
         36:8b:b4:30:d0:39:50:5f:30:90:fb:14:34:b6:ea:2b:1b:04:
         d1:24:18:e1:a4:fd:0b:cc:64:9f:74:18:3e:64:1f:9a:9f:c8:
         e9:9a:2d:b4:ca:0d:94:e0:e3:28:3a:e1:a8:ef:5a:36:17:ed:
         06:03:25:0e:ac:5c:66:c6:6b:81:b9:7e:f9:17:54:95:11:23:
         0c:8b:37:bc:05:65:05:9d:cc:74:e4:65:22:66:fd:5e:a9:82:
         7b:de:98:78:a2:dc:3f:a8:e8:ba:3d:5c:6f:91:7c:fd:b6:72:
         e2:fd:9e:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:14 2026 by rpki-client