Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/768b5783-9a5f-4dd7-8d16-7f5e0ad6fbfb.roa
File:                     768b5783-9a5f-4dd7-8d16-7f5e0ad6fbfb.roa (raw, json)
Hash identifier:          ZByKfk6AsDzF3d935I5eMOE2ReSbe16l/dfiUo/KlZg=
Subject key identifier:   B4:17:41:E8:56:FE:9E:5F:E2:F3:D8:79:3C:03:18:CA:A9:B8:49:A6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       345150FBC1ABDE65A7A0D4F34A28587C90D424C1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/768b5783-9a5f-4dd7-8d16-7f5e0ad6fbfb.roa
Signing time:             Thu 23 Jul 2026 12:40:56 +0000
ROA not before:           Thu 23 Jul 2026 12:40:56 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cb8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:51:50:fb:c1:ab:de:65:a7:a0:d4:f3:4a:28:58:7c:90:d4:24:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:40:56 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1cb380b13e2ccd4cf758610bf4ed8438d6367430d121320bc794274bcbe4aa00, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:1d:c4:a1:05:e0:45:77:06:4c:6d:b6:42:
                    54:0a:e7:93:43:62:44:d7:ea:b8:ac:0c:f7:bf:9f:
                    08:8b:c4:fd:9d:f4:02:24:13:22:d9:71:ad:81:41:
                    ba:22:ff:7b:06:7c:92:cb:99:92:97:a9:e9:06:14:
                    55:08:b9:a7:76:51:12:6f:50:5e:38:f1:0e:e8:91:
                    ef:6b:6b:e1:b5:40:ec:86:cb:82:0a:29:10:88:ca:
                    ce:86:71:3d:af:7d:19:6c:71:8d:8c:17:f1:70:c9:
                    43:b4:6c:8c:b6:a8:0f:9e:4c:d3:c2:93:88:30:0c:
                    97:e1:e1:f7:f2:08:ab:cd:1d:3b:7d:1d:1d:1a:ff:
                    32:20:ca:71:db:1a:79:e1:3d:ae:8c:08:ea:96:82:
                    fd:90:13:fd:6a:c5:fd:33:cc:5a:10:57:69:3f:10:
                    f8:e9:9c:2f:d5:f8:ce:62:0c:76:46:f1:16:c4:3c:
                    c1:a5:a7:c0:26:20:3d:11:6a:dc:88:c8:8c:1c:d7:
                    58:0f:d1:7e:32:72:66:92:e7:e4:27:e6:d8:b2:6b:
                    58:e2:d6:01:b8:89:41:4e:35:47:d0:e1:bb:56:cf:
                    10:93:38:f3:25:a6:b4:40:b7:3e:52:3b:81:f8:ab:
                    64:d4:ad:2f:8d:c8:b3:be:20:4d:34:39:b8:8e:2e:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:41:E8:56:FE:9E:5F:E2:F3:D8:79:3C:03:18:CA:A9:B8:49:A6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/768b5783-9a5f-4dd7-8d16-7f5e0ad6fbfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cb8::/45

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:de:96:58:57:21:bd:74:fa:35:ad:d6:a6:b6:c3:41:63:
         de:45:52:f4:54:b3:9d:c2:8a:e8:bd:57:f4:b6:1d:7b:4b:44:
         55:08:70:61:21:4a:d7:24:96:a0:6c:7c:b5:93:35:2b:bb:d2:
         fc:20:cf:a9:df:29:b5:b6:af:4c:74:bd:b6:a6:53:85:f9:ce:
         26:b7:30:0b:01:a0:0c:0a:53:5a:b6:57:d5:5b:3a:80:87:76:
         f0:89:25:4f:82:01:cc:83:96:8e:2b:dc:c9:c1:a4:b7:3c:74:
         05:c2:db:a2:12:f1:18:61:9d:69:b5:dd:9d:1a:14:ae:64:c7:
         82:39:8a:72:74:8b:e3:fa:4d:1a:a7:71:ee:83:02:90:1a:d9:
         17:70:73:4f:cb:9c:b9:f4:86:18:64:ec:59:01:42:59:c3:8d:
         fc:a1:6e:9c:f1:00:43:fd:eb:0f:d2:6c:ae:56:13:e3:01:bf:
         b8:7d:d3:8a:8e:19:81:8b:66:1e:f6:b1:10:90:c3:57:e4:d9:
         e1:d5:7c:f0:b8:82:a1:a6:0c:10:4e:b0:9d:03:a4:1d:2d:84:
         95:e2:22:84:45:4a:2e:9b:d9:54:a4:59:3f:ab:ef:ff:34:42:
         62:4a:5c:fa:10:95:a8:dc:0e:21:21:a6:c6:aa:b0:bd:3e:b0:
         cd:27:8f:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:46 2026 by rpki-client