Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/660014e4-f10e-4432-9400-75e049719b6d.roa
File:                     660014e4-f10e-4432-9400-75e049719b6d.roa (raw, json)
Hash identifier:          BupRcShMVVxQZpvO03pJwjuQkWtrnU6xAIUHDzTB8TQ=
Subject key identifier:   43:69:18:BA:59:65:32:D4:6E:3B:25:2B:76:4E:00:39:08:77:EA:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D5707054051AA4FC034FD598ADF79EA57992562
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/660014e4-f10e-4432-9400-75e049719b6d.roa
Signing time:             Thu 23 Jul 2026 08:31:49 +0000
ROA not before:           Thu 23 Jul 2026 08:31:49 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d20::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:07:05:40:51:aa:4f:c0:34:fd:59:8a:df:79:ea:57:99:25:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:31:49 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=600d2e87d076eedd9138c76fa393db5b6084611cced0134de3a2a00d173cd41d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:95:0d:fb:4b:45:99:75:a6:f5:23:a4:29:
                    a5:34:f6:d9:79:eb:47:b3:b7:38:d5:dc:f4:70:1e:
                    62:fd:56:0d:0e:4c:4b:5a:5f:da:c6:7a:fd:d0:28:
                    1a:69:05:2b:30:1d:bf:1b:d9:d4:31:ea:5c:a8:ab:
                    2b:11:01:a6:fb:0d:ca:b4:97:6f:49:0e:f8:28:05:
                    25:fc:4c:59:c3:ea:c6:9e:c9:cf:5f:52:db:3c:51:
                    e6:9c:1d:d7:41:f3:a9:3b:26:02:5e:d9:70:e4:7c:
                    07:dd:67:69:25:a0:3a:0e:0d:56:e4:1b:02:a7:5b:
                    e7:4d:12:c7:c9:6d:25:77:6b:d1:b4:b6:4f:ce:aa:
                    cc:f8:95:9b:21:4b:31:61:03:7b:ec:8a:96:53:72:
                    ba:25:4d:f4:e1:3f:48:e0:49:90:4a:ee:ed:54:05:
                    49:43:a4:34:8c:c0:dc:c2:63:0d:81:2b:a3:5f:f6:
                    40:7d:12:47:47:3f:ff:58:59:0f:4a:a1:f4:cc:5d:
                    98:c6:fb:8d:32:55:bc:b3:f5:19:94:b9:aa:28:30:
                    b2:47:33:48:04:11:6e:bf:07:17:1f:68:66:c6:78:
                    04:7a:bf:db:bd:82:d5:16:42:65:9b:2e:b6:68:c7:
                    4e:6e:0f:a9:80:64:26:30:78:de:b5:d0:69:32:2a:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:18:BA:59:65:32:D4:6E:3B:25:2B:76:4E:00:39:08:77:EA:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/660014e4-f10e-4432-9400-75e049719b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d20::/46

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:fa:fd:9c:e3:78:84:73:8b:50:49:cd:12:b0:45:a5:a5:
         b8:de:71:e8:1e:ac:f9:d6:fd:c5:3e:f1:9d:19:14:27:99:3d:
         06:20:a4:df:22:9d:ce:3f:b0:9d:7d:9a:1c:66:00:1b:13:4a:
         3f:1f:80:47:8f:71:4f:a1:35:f9:1f:cb:dd:d3:1f:a2:8a:eb:
         46:5a:1f:e0:95:b8:32:5f:f2:1f:26:4e:3b:22:43:c3:8a:0c:
         75:0a:6d:da:14:c7:2b:07:16:41:10:73:4e:a6:a4:4f:5b:07:
         a4:64:a5:64:ac:08:ab:4d:43:bd:cb:b8:2c:40:3e:90:1d:28:
         42:d1:88:3e:3e:36:18:13:46:e2:9c:ed:3a:ed:9b:d5:cf:94:
         d2:90:ef:a7:d2:4c:12:82:d6:ec:3c:2f:59:df:b4:62:cd:32:
         ef:8a:8e:62:6c:45:84:63:02:b5:0d:ed:68:da:b6:f8:27:57:
         69:84:b2:b2:01:40:2b:72:ae:a6:a6:64:ad:3b:cc:58:a0:28:
         75:4d:a6:ae:ee:af:fc:32:98:42:4b:f0:65:12:47:ed:5b:39:
         b7:de:46:e1:68:d0:18:f2:75:03:92:81:da:df:72:1d:72:0f:
         d6:38:e4:b4:84:66:7c:1f:15:fb:68:f0:ac:92:9d:a0:fc:d5:
         af:9c:92:c8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDVcHBUBRqk/ANP1Zit956leZJWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgzMTQ5WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDBkMmU4N2QwNzZlZWRkOTEzOGM3NmZhMzkzZGI1YjYw
ODQ2MTFjY2VkMDEzNGRlM2EyYTAwZDE3M2NkNDFkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTCZUN+0tFmXWm9SOkKaU09tl560eztzjV3PRwHmL9Vg0O
TEtaX9rGev3QKBppBSswHb8b2dQx6lyoqysRAab7Dcq0l29JDvgoBSX8TFnD6sae
yc9fUts8UeacHddB86k7JgJe2XDkfAfdZ2kloDoODVbkGwKnW+dNEsfJbSV3a9G0
tk/Oqsz4lZshSzFhA3vsipZTcrolTfThP0jgSZBK7u1UBUlDpDSMwNzCYw2BK6Nf
9kB9EkdHP/9YWQ9KofTMXZjG+40yVbyz9RmUuaooMLJHM0gEEW6/BxcfaGbGeAR6
v9u9gtUWQmWbLrZox05uD6mAZCYweN610GkyKqeBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQ2kYulllMtRuOyUrdk4AOQh36iwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY2MDAxNGU0LWYxMGUtNDQzMi05NDAwLTc1ZTA0OTcxOWI2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPSAwDQYJKoZIhvcNAQELBQADggEBAHW3+v2c43iEc4tQSc0SsEWl
pbjecegerPnW/cU+8Z0ZFCeZPQYgpN8inc4/sJ19mhxmABsTSj8fgEePcU+hNfkf
y93TH6KK60ZaH+CVuDJf8h8mTjsiQ8OKDHUKbdoUxysHFkEQc06mpE9bB6RkpWSs
CKtNQ73LuCxAPpAdKELRiD4+NhgTRuKc7Trtm9XPlNKQ76fSTBKC1uw8L1nftGLN
Mu+KjmJsRYRjArUN7WjatvgnV2mEsrIBQCtyrqamZK07zFigKHVNpq7ur/wymEJL
8GUSR+1bObfeRuFo0BjydQOSgdrfch1yD9Y45LSEZnwfFfto8KySnaD81a+cksg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:23 2026 by rpki-client