Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53c970dc-38e7-4925-bdcc-78bb86161715.roa
File:                     53c970dc-38e7-4925-bdcc-78bb86161715.roa (raw, json)
Hash identifier:          ++sLAGVK1T0Sc2A/7hLxZg8gREqL72O+UPm2U75B7R0=
Subject key identifier:   A8:91:56:57:76:12:68:F8:A0:C0:DD:6D:ED:C9:00:88:75:B5:C9:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       65238FBBC0DDBF5C12401455588F17C9E2D3FC62
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53c970dc-38e7-4925-bdcc-78bb86161715.roa
Signing time:             Thu 23 Jul 2026 08:40:49 +0000
ROA not before:           Thu 23 Jul 2026 08:40:49 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3720::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:23:8f:bb:c0:dd:bf:5c:12:40:14:55:58:8f:17:c9:e2:d3:fc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:40:49 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0f12b141c8ce6f393f7e4b36f76a8c01f3bdc0eb007d5acc66418d3b84a89a7d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:4e:e6:77:64:07:5e:7b:e9:50:ac:24:da:
                    f6:ad:3b:b6:19:73:8e:3d:df:82:74:f4:9d:8b:ae:
                    18:c0:8e:10:f8:f8:7f:66:75:9a:a9:dc:9a:8e:01:
                    83:e5:fb:fb:a0:86:29:79:de:88:14:ca:79:c3:f4:
                    f4:f3:3a:b6:fb:39:dd:f3:50:7d:be:3f:55:8f:3f:
                    6a:e7:8b:cb:47:c3:58:d4:17:be:4d:5b:2f:86:a8:
                    a1:1b:54:45:ad:11:be:af:71:50:6e:ab:f6:05:2b:
                    9c:1b:6a:e1:a6:f1:30:9d:db:fa:19:bd:59:cf:6f:
                    3d:88:33:49:23:df:44:73:ee:52:23:78:18:39:1b:
                    bb:80:4a:95:27:36:8b:9f:7e:b7:ea:0a:ac:43:c7:
                    7b:60:8b:ae:06:69:48:86:54:5f:2e:15:2a:43:17:
                    6e:aa:01:27:07:c7:ee:64:10:f9:e6:c4:41:0f:ea:
                    ee:e4:6e:57:5f:97:85:45:a2:8c:d7:20:5b:fc:70:
                    6f:62:0b:fb:bc:71:de:d4:0a:1c:a2:60:90:a8:ee:
                    ea:02:6c:37:70:d9:af:48:90:93:e1:f6:35:30:0c:
                    d1:8a:7e:b1:99:80:5d:c6:10:57:12:67:5c:32:c1:
                    c2:5d:b4:7c:1f:b1:8e:60:4e:1a:c5:aa:d8:11:54:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:56:57:76:12:68:F8:A0:C0:DD:6D:ED:C9:00:88:75:B5:C9:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53c970dc-38e7-4925-bdcc-78bb86161715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3720::/45

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:59:31:a1:18:77:d0:a6:01:d5:02:05:d6:b7:a7:4e:4d:
         e1:bc:42:32:54:f9:2d:5b:88:fe:33:a7:34:9f:b9:b6:ce:11:
         b8:de:75:13:6c:e2:9e:e3:17:4a:23:08:04:fb:19:ec:b6:ed:
         be:5f:22:ab:bf:62:6c:85:98:c4:d1:3d:c4:bf:81:75:ea:f2:
         ba:51:b8:33:90:c4:54:66:ba:8d:80:87:fc:39:4e:4e:eb:f6:
         57:93:4e:58:94:f7:d6:b8:30:b4:0d:f7:66:68:e6:ab:38:07:
         01:74:6a:a3:88:94:30:80:05:16:04:ec:08:95:fa:da:fb:12:
         13:15:80:1f:bf:2a:79:fb:c2:44:1e:bd:f8:b5:b8:9b:29:b8:
         8e:38:89:51:ac:13:eb:9f:4e:8d:f0:89:e4:53:8e:0c:e9:f8:
         37:ac:7e:f8:83:6f:a5:dd:29:ec:ad:f8:27:47:be:9e:60:34:
         9c:fd:73:a9:e7:73:94:eb:00:dc:47:66:13:9a:96:7b:c7:bc:
         34:15:58:c9:1f:72:83:60:47:bd:91:69:89:90:80:c9:19:21:
         5f:74:71:01:34:c7:3a:7e:7f:59:c8:d5:ec:75:db:94:33:d1:
         2b:3a:ce:5a:26:4d:57:30:50:de:a2:66:c2:a5:56:a7:bc:25:
         70:5c:24:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:52 2026 by rpki-client