Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bb0a057-ccab-4748-a525-ff4e1cc7a673.roa
File:                     7bb0a057-ccab-4748-a525-ff4e1cc7a673.roa (raw, json)
Hash identifier:          oQFXypE7zDOJTdpxXolCqKNLAlScuPpwZC5hEkpZ24Y=
Subject key identifier:   EC:31:42:0F:36:DD:53:F3:8F:4C:E0:EC:DE:9F:D7:D3:B4:86:F1:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       284D4152C54F205B7C31B5F16860A1DE4E943158
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bb0a057-ccab-4748-a525-ff4e1cc7a673.roa
Signing time:             Wed 22 Jul 2026 01:40:43 +0000
ROA not before:           Wed 22 Jul 2026 01:40:43 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c36::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4d:41:52:c5:4f:20:5b:7c:31:b5:f1:68:60:a1:de:4e:94:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:40:43 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=65d801b7c39a9319a4025fd64510683107cc900b5283428f28fa6194cd917ee6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:60:f0:66:7e:0c:7c:10:62:85:37:eb:eb:
                    6f:60:05:82:f3:f6:12:f2:0a:91:7e:a3:99:89:d5:
                    a7:d4:35:96:5a:67:0d:07:ce:97:31:b9:30:81:c0:
                    2a:9b:31:ee:26:5d:3c:13:31:b0:39:70:c1:e6:1b:
                    c0:dc:aa:7c:0d:9d:8c:12:d6:a3:96:24:b0:98:ee:
                    9b:85:52:9d:cc:6a:11:5f:79:e5:d8:e9:5a:ed:2d:
                    78:83:cd:a8:e8:12:78:84:15:d2:c9:d1:cd:38:ea:
                    8d:3a:84:0a:01:2f:6e:39:3d:b9:23:4b:e8:0f:2c:
                    1d:cd:39:86:bc:d7:a6:99:ae:28:bd:b9:15:eb:ba:
                    06:ac:d9:67:74:ec:ed:04:47:2f:59:44:45:59:57:
                    7d:f4:dd:49:7f:2b:99:db:30:81:59:14:35:25:29:
                    25:cb:f7:cb:68:b4:46:9a:79:03:43:da:a4:b7:50:
                    f6:5f:57:c5:df:c6:70:2f:5b:be:99:9e:c2:66:00:
                    cb:d8:e3:f8:16:85:00:4c:0c:53:48:5d:96:6f:ea:
                    1e:30:e1:2a:7c:af:8c:fb:36:07:ec:be:d7:88:8e:
                    74:b0:75:05:ab:df:5e:23:ef:21:05:69:c8:4a:2b:
                    af:d5:17:7c:8c:b1:82:9f:a9:4b:44:7d:17:df:5d:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:42:0F:36:DD:53:F3:8F:4C:E0:EC:DE:9F:D7:D3:B4:86:F1:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bb0a057-ccab-4748-a525-ff4e1cc7a673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c36::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:51:58:b4:fa:bd:4b:af:1d:6c:a7:ed:de:38:9a:8c:f7:27:
         65:31:6a:22:5d:74:7b:7f:d3:57:fe:b5:4a:d4:de:5c:96:59:
         33:3f:42:b0:14:1e:f0:6c:a0:de:c0:99:6d:70:9b:77:1c:78:
         52:29:d9:31:ed:fc:37:31:06:27:a3:4c:04:7e:b2:8f:16:0c:
         0b:76:36:5f:8a:3e:c5:f4:5b:ea:f6:30:6c:52:a5:11:e6:af:
         42:99:dc:18:23:70:ce:c2:02:86:fa:7e:fa:0f:40:e5:48:66:
         e0:e8:ab:25:8d:92:6b:3a:32:80:5a:f8:e1:c0:27:e0:f0:0a:
         9e:6e:0a:b6:ce:b1:ac:8f:dd:ec:50:0f:b8:59:f2:fe:65:23:
         65:8b:7e:cd:fe:41:b5:f0:f1:8b:de:c9:e9:93:5c:bf:57:84:
         32:3e:a4:41:dd:29:e1:47:61:a9:c6:f4:47:fa:a4:5c:24:7e:
         f4:6e:3e:58:31:63:9b:df:e4:cc:d3:a3:11:2d:04:95:bb:b3:
         45:7f:86:9d:cf:73:b7:62:e1:68:15:63:23:62:8f:07:9e:6e:
         54:33:1f:19:7b:05:24:02:13:83:d8:84:1e:bb:c1:c6:7a:c6:
         ac:ec:64:e7:da:73:f3:43:00:ad:3b:08:39:09:c9:69:8a:40:
         e5:0c:65:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:15 2026 by rpki-client