Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50bb36db-c273-4d9a-964e-7bbfdd8f3c75.roa
File:                     50bb36db-c273-4d9a-964e-7bbfdd8f3c75.roa (raw, json)
Hash identifier:          HZXQIFiuccaeszNREymLo1E7y9r/BueO+aKg2SJps7A=
Subject key identifier:   F3:50:8F:D0:41:A0:1F:F7:39:A4:EA:E4:C7:C0:9C:1B:39:A0:C4:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3762E6EDB8D5324A7C601D5FAAC9680A20F34CA8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50bb36db-c273-4d9a-964e-7bbfdd8f3c75.roa
Signing time:             Thu 23 Jul 2026 12:20:43 +0000
ROA not before:           Thu 23 Jul 2026 12:20:43 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:e6:ed:b8:d5:32:4a:7c:60:1d:5f:aa:c9:68:0a:20:f3:4c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:20:43 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=d305d4551ce3f39ecc9f65959b44cedbe780f7fc301a6177d0932198ddee4608, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:e9:5f:b8:cc:1f:f8:ed:ed:8a:95:da:d6:
                    db:47:da:64:ae:3b:61:54:58:58:c2:9b:99:4b:59:
                    96:64:4b:a5:23:3a:99:61:0c:4b:49:64:10:e9:9a:
                    ab:b2:c0:be:f8:e7:f3:d3:37:28:68:18:fc:80:12:
                    74:25:ce:f1:29:33:68:ab:7d:d2:68:27:28:da:be:
                    63:5c:30:6d:fe:1d:6a:3a:77:c7:02:f1:8c:81:90:
                    1f:1c:e9:c3:d6:95:bf:66:15:b1:df:4d:7a:18:22:
                    d3:36:7d:18:18:3e:28:2d:d8:57:29:3d:5c:92:e5:
                    ec:6b:3b:fb:38:16:d2:47:0a:1e:26:a2:1a:59:36:
                    c0:c3:ce:c6:38:4b:e1:9f:c2:63:ea:95:7f:cd:14:
                    0f:4a:f5:57:69:a5:81:8b:fc:cb:f3:f7:ba:01:d0:
                    b2:55:6d:84:5c:e9:5e:d5:a9:09:59:f3:16:b6:cf:
                    79:ea:f7:96:16:6a:65:31:bf:9b:bb:ae:51:58:10:
                    53:39:e0:ab:fb:7a:8e:72:df:23:1b:ba:8f:26:5a:
                    94:62:e6:24:c3:ad:33:d2:c4:4c:fb:96:46:0e:81:
                    a9:7a:29:6d:8e:de:8f:fb:1b:c7:17:14:1d:c2:6c:
                    05:84:c9:3a:13:1b:14:31:be:3b:4d:6d:5f:bc:ae:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:8F:D0:41:A0:1F:F7:39:A4:EA:E4:C7:C0:9C:1B:39:A0:C4:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50bb36db-c273-4d9a-964e-7bbfdd8f3c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:1e:f0:5d:f4:82:64:4d:d4:40:f2:c0:ed:e9:c6:ff:89:
         94:dc:cf:92:35:2d:11:03:be:f5:85:07:5f:8e:0d:07:4b:9e:
         9e:e7:8c:05:5e:33:bd:c4:87:b2:4b:7e:21:62:f3:a4:c4:9c:
         b2:82:ab:3e:db:52:0a:14:1b:5c:d4:0d:ca:8d:5f:8b:59:83:
         5f:19:23:a7:f6:9c:7a:10:03:cc:4c:67:ff:c5:fd:ab:ee:d1:
         9c:44:8d:87:40:5f:c8:3f:b3:31:52:8a:ec:5b:c8:fc:08:c8:
         a8:c1:df:56:59:8c:eb:ed:5c:c1:b4:92:9a:8e:e3:5f:05:2d:
         c8:5c:da:ca:03:d4:f0:6a:aa:9d:b1:a7:6a:26:a7:40:af:b8:
         ec:fd:15:c5:4a:f0:a6:49:f9:2e:66:83:23:0b:f1:36:7c:b4:
         9c:a4:56:d4:71:54:ba:9e:de:91:08:95:52:74:e0:49:a4:46:
         9a:70:ee:72:f6:96:e7:77:8e:8c:69:66:83:5b:6b:30:57:bd:
         0a:0d:ee:04:53:fc:82:25:e2:b5:3d:47:6a:b6:47:3b:7c:f1:
         2c:83:6c:e6:8b:9b:9f:04:db:73:12:01:02:e7:17:c6:79:eb:
         b1:47:93:3f:88:92:5a:6f:93:10:22:84:c8:9b:eb:99:f6:58:
         3a:64:c6:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:00 2026 by rpki-client