Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/682cade5-fae0-41c1-95a5-55ad1cf0c048.roa
File:                     682cade5-fae0-41c1-95a5-55ad1cf0c048.roa (raw, json)
Hash identifier:          3bF9V+VIZ8M/CEAb39osgsXEQu5j2hOixQnvWCqX2IQ=
Subject key identifier:   E1:60:E5:31:12:15:B6:64:83:8E:9C:D4:DC:94:D0:4C:ED:78:C0:7B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       337ADA25CC24CB5E17108B2FE7462E9589E5558D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/682cade5-fae0-41c1-95a5-55ad1cf0c048.roa
Signing time:             Thu 23 Jul 2026 12:00:53 +0000
ROA not before:           Thu 23 Jul 2026 12:00:53 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d70::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7a:da:25:cc:24:cb:5e:17:10:8b:2f:e7:46:2e:95:89:e5:55:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:00:53 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=9f3b1aa169b344989629590f31540c977c2ce4f75f41f44f97e4bdcd5d86b36f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:a4:d2:54:0e:e4:90:d8:14:69:34:a0:00:
                    0d:9d:38:17:2b:96:f5:6b:58:c8:23:24:64:09:42:
                    75:07:42:0b:2e:c6:c5:22:b1:98:ba:07:8b:15:c4:
                    f9:9f:4d:2a:86:d2:99:44:db:f9:74:da:ac:5f:d0:
                    d1:a7:96:62:87:0b:57:ac:c1:9b:7d:7f:38:ba:16:
                    6f:0b:d2:fa:ed:a0:da:43:12:92:ff:43:ca:41:10:
                    35:81:56:4f:b8:a3:eb:9e:d2:5c:97:2e:8e:94:b8:
                    26:8a:61:c1:2e:08:f3:5d:ae:3d:e5:17:7d:18:65:
                    d9:64:2e:6c:f5:d2:08:7d:68:3b:61:c5:b5:d0:9d:
                    43:b7:7b:8d:37:85:d5:ac:40:03:d3:86:07:ce:9f:
                    d9:a5:88:7f:00:a5:a1:c2:16:d1:25:ee:e8:bb:03:
                    6e:e2:6f:46:e4:cd:0b:ae:30:d5:91:8a:8c:77:04:
                    bd:7b:21:03:84:e9:65:f6:ab:a2:87:4d:88:de:48:
                    b2:76:e5:a7:3f:b1:91:ec:bc:70:c7:30:bc:7c:46:
                    7a:2c:81:b9:22:d6:46:a8:7a:88:69:08:3f:ae:f8:
                    9d:a7:db:f6:ed:d1:cd:91:e3:bf:f3:52:26:e5:fa:
                    06:37:d0:86:f9:ae:15:03:32:60:b2:25:b9:6e:7b:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:E5:31:12:15:B6:64:83:8E:9C:D4:DC:94:D0:4C:ED:78:C0:7B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/682cade5-fae0-41c1-95a5-55ad1cf0c048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d70::/46

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:7a:74:54:09:27:19:61:41:a6:a6:d1:42:dd:bb:61:1f:
         36:7f:f1:ef:6e:b7:dc:af:e0:a6:5e:56:42:c7:3c:71:35:71:
         ad:01:e0:64:be:ba:51:25:7d:71:26:bd:fb:ad:e5:c7:b5:66:
         cc:e9:e7:bc:85:92:db:13:3c:4a:ad:2c:a5:80:4d:e6:a5:c6:
         f7:5d:17:c5:17:03:3f:6b:df:12:f2:2f:d6:66:41:d0:66:4e:
         68:2c:57:bc:9d:e2:10:58:5e:d8:c3:7d:48:2f:a1:50:91:1e:
         0d:bf:b1:3a:43:5d:8f:5c:86:ab:ca:70:54:8e:82:9f:a7:a3:
         a2:e5:48:01:12:6d:22:0e:0d:c0:12:38:1a:d6:26:8a:85:4d:
         14:0a:7f:61:17:75:4e:c9:93:67:db:29:71:cd:0b:1d:fe:cd:
         bf:b7:cd:2b:e8:ba:99:b7:2d:23:56:05:3b:e0:60:77:e6:87:
         40:81:76:7c:19:24:44:2d:56:c4:92:3e:9f:3d:b6:42:f1:7c:
         66:20:4c:62:6e:ac:40:71:db:8a:d2:83:36:52:e1:3d:67:f7:
         44:aa:e4:3d:1b:fe:37:8d:9d:b2:b8:ae:c4:fe:46:14:d0:79:
         44:5d:00:e9:fc:80:dc:cb:89:82:58:d4:9e:38:30:90:7d:c5:
         75:a8:6c:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:10 2026 by rpki-client