Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b738223-3e6f-4317-9be9-a8cd62ebff2e.roa
File:                     6b738223-3e6f-4317-9be9-a8cd62ebff2e.roa (raw, json)
Hash identifier:          sok3fU2580pfomOBD/d8AyTVKG1nh3tlhtbRzzVvUVg=
Subject key identifier:   0C:38:FF:31:E3:A3:59:21:6A:05:78:3A:3D:B1:65:D2:0B:D9:01:02
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01B16BA299DAF0CDE746129C5D9E4F7EC8BABA0A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b738223-3e6f-4317-9be9-a8cd62ebff2e.roa
Signing time:             Thu 23 Jul 2026 11:01:33 +0000
ROA not before:           Thu 23 Jul 2026 11:01:33 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bcc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:6b:a2:99:da:f0:cd:e7:46:12:9c:5d:9e:4f:7e:c8:ba:ba:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:01:33 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ff08feeed2895099865a55698e6514ac69f86bc0b8fe3d373730e3067c5a3d08, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:5d:4a:b1:62:ce:5e:16:ed:ab:e8:28:17:
                    96:0b:62:33:2b:a8:3c:d0:1e:2c:c9:a9:f9:cc:c0:
                    af:b4:f6:d3:4d:d6:52:70:c6:3d:d5:03:40:39:15:
                    93:60:ad:fb:e3:97:01:ef:f1:b4:3e:03:35:67:32:
                    10:73:cd:ec:aa:25:00:71:e1:5a:29:d8:61:29:07:
                    7a:73:f2:7a:10:39:fa:82:e3:58:89:60:0e:8b:59:
                    1d:2d:ee:df:58:ac:e9:69:e8:8c:dd:ad:14:23:da:
                    2d:29:73:39:55:0d:c0:27:c0:5d:bf:7b:0d:1b:34:
                    34:7a:83:8b:b6:81:86:33:21:f2:80:1d:0f:78:cb:
                    5e:74:f3:ca:1b:50:1e:41:61:40:cf:58:aa:72:96:
                    a4:fe:0e:23:5c:f9:ec:da:46:fe:21:d8:8b:d4:ec:
                    08:c4:3d:8e:3f:96:07:15:3c:94:87:0f:f3:6d:b9:
                    e6:db:df:10:ec:5e:c3:a9:fb:7b:6d:64:a5:56:76:
                    5e:e6:52:c5:5e:9c:5d:b8:b4:ed:76:4c:42:11:91:
                    00:92:5e:05:6a:d1:24:4b:9c:ea:65:ee:78:08:66:
                    bd:ee:50:1d:10:4b:32:e0:0e:e2:f5:1a:6b:05:de:
                    81:cd:1c:a3:a4:04:f8:23:29:03:6b:67:f1:b9:a3:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:FF:31:E3:A3:59:21:6A:05:78:3A:3D:B1:65:D2:0B:D9:01:02
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b738223-3e6f-4317-9be9-a8cd62ebff2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bcc::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:61:26:21:30:94:b0:49:d3:68:f8:24:fb:e3:ba:b8:5e:
         24:e0:c4:f7:4f:44:01:90:5b:50:5c:ee:3e:6f:34:7a:eb:20:
         2c:70:41:a6:6f:d3:7e:64:77:3f:6d:c1:54:0a:94:91:f5:fb:
         b1:f9:94:8a:52:53:1f:96:5d:fd:7f:80:43:b9:0e:48:54:7c:
         c5:72:5a:30:db:fb:ca:a2:93:a9:bb:88:ff:0c:fa:eb:9d:b4:
         d4:25:00:dd:38:99:28:46:fa:72:ab:12:65:cc:5d:fb:21:e1:
         16:91:f1:ea:4b:9c:3a:46:10:92:06:94:60:15:85:60:92:59:
         48:e4:66:b5:9f:26:1a:e7:5d:22:ca:f5:d2:d4:ad:7b:80:f8:
         1e:ea:4a:8e:15:ff:60:20:65:55:bc:53:18:3b:99:a5:42:8d:
         54:a5:b6:03:24:db:d4:d7:d0:0d:88:cd:f8:50:9a:f5:45:40:
         fd:17:73:03:5b:3c:7a:47:08:08:b1:d3:3f:a2:10:c7:8a:f4:
         37:08:e9:9b:cc:a5:fe:3b:c0:83:28:aa:c3:99:de:7c:2f:af:
         a4:a3:e2:bb:6e:39:77:3a:af:dc:42:36:7c:07:f6:d4:7e:c4:
         96:07:d9:11:0a:f0:a4:67:c0:2d:44:27:7c:e2:35:8f:0a:78:
         b8:38:6b:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:58 2026 by rpki-client