Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa
File:                     8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa (raw, json)
Hash identifier:          n7k7odvrJj7Mqcd+L5LVCnIO83S8QMGb/3SMy6cZddY=
Subject key identifier:   68:46:F7:1B:DE:04:8D:19:50:79:EF:49:E6:91:2B:55:B9:B1:F5:06
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E27E73DFA57A13A8BC39DC5A7F3939D88CC887C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa
Signing time:             Thu 23 Jul 2026 06:20:31 +0000
ROA not before:           Thu 23 Jul 2026 06:20:31 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:27:e7:3d:fa:57:a1:3a:8b:c3:9d:c5:a7:f3:93:9d:88:cc:88:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:20:31 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=a1440c73d71221d3515cefc20e5bb561566960999894e2f654ce964db2c9cd26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:cf:ae:a7:9f:23:1a:0d:65:11:03:ed:a0:
                    fa:ca:51:e7:91:37:41:96:1a:a7:b2:c9:29:b4:ac:
                    c9:10:f8:cd:f0:4c:ea:f6:67:5c:ae:7f:05:9c:9f:
                    e6:37:ff:0c:ed:0b:4f:56:fd:cf:34:14:fd:31:f2:
                    35:9e:8f:54:bd:db:14:13:77:06:88:94:59:59:60:
                    cc:fd:b8:cc:0b:e1:27:9b:f2:82:0c:3d:b9:a2:4a:
                    a4:1a:ad:1d:bd:c5:b6:31:9c:5f:6c:08:56:ba:6c:
                    f6:bd:90:e9:b1:4f:e9:5b:69:1a:f5:44:b4:1f:66:
                    b1:f4:c6:6d:98:0c:8e:35:3f:5d:34:4b:0f:43:1a:
                    7b:ba:37:e6:f0:f6:0d:d1:31:f9:2a:31:cd:6b:80:
                    8e:89:fd:18:80:9b:42:45:8e:43:1e:3a:4e:bb:11:
                    7b:73:6f:36:77:3e:45:cb:05:ec:78:a6:1a:27:3f:
                    87:02:59:ac:f2:5e:30:20:69:b0:07:3e:93:15:6f:
                    2b:fa:89:76:4e:8a:5f:90:fd:ce:f9:0d:39:8d:03:
                    1c:7a:63:e9:c2:a6:69:7a:37:b4:4f:9e:5d:82:de:
                    da:29:80:0c:ff:1c:3a:61:ec:0c:c4:d2:67:34:fd:
                    c2:21:1b:56:a3:00:52:0e:10:aa:86:e0:90:26:42:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:F7:1B:DE:04:8D:19:50:79:EF:49:E6:91:2B:55:B9:B1:F5:06
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c7022e9-28b5-4a1d-be72-35ca4aed5d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         47:37:e2:51:c3:bf:2d:0b:b2:f2:98:87:9a:85:d4:3e:ea:55:
         34:c4:fb:c5:2a:a7:23:ea:51:5e:b3:b9:5c:d0:82:b5:95:d7:
         41:d8:72:f5:b8:7c:1d:b6:53:83:f9:58:4a:d1:41:ed:4d:ad:
         a7:d6:ec:3b:7d:ca:ad:0b:2f:c0:99:34:0b:2e:95:89:81:bd:
         c2:95:5d:3f:b0:db:72:2f:fb:06:6f:47:7c:6d:28:8f:b0:c4:
         5f:f3:cf:f0:bd:50:20:3f:bb:89:cf:1b:3c:bb:2c:3f:d0:f5:
         fb:ca:9d:95:15:af:9e:0d:04:9f:94:de:c9:af:a4:b6:a4:6a:
         4b:dd:7f:39:82:3c:17:b3:b6:23:24:3e:a2:c5:3a:06:d1:5d:
         92:b8:6b:a2:59:95:e0:e8:d5:43:d8:b1:6b:a2:97:6d:9b:3a:
         4e:57:e0:ee:fe:5d:35:fd:f1:4e:c2:cf:9b:02:2f:85:55:28:
         18:4c:23:7a:ea:69:b7:9f:4a:85:2a:0a:4c:ad:a4:6e:9f:4d:
         e1:9b:84:44:50:26:0b:90:59:71:9e:4c:95:e9:7e:a1:9b:80:
         39:33:54:5f:48:7d:fa:7e:61:50:32:de:81:6c:7e:7a:13:a5:
         b9:74:80:e1:78:2d:67:60:da:c6:ff:56:81:64:ad:23:95:e6:
         cc:d9:ef:2f
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHifnPfpXoTqLw53Fp/OTnYjMiHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDYyMDMxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTQ0MGM3M2Q3MTIyMWQzNTE1Y2VmYzIwZTViYjU2MTU2
Njk2MDk5OTg5NGUyZjY1NGNlOTY0ZGIyYzljZDI2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCecc+up58jGg1lEQPtoPrKUeeRN0GWGqeyySm0rMkQ+M3w
TOr2Z1yufwWcn+Y3/wztC09W/c80FP0x8jWej1S92xQTdwaIlFlZYMz9uMwL4Seb
8oIMPbmiSqQarR29xbYxnF9sCFa6bPa9kOmxT+lbaRr1RLQfZrH0xm2YDI41P100
Sw9DGnu6N+bw9g3RMfkqMc1rgI6J/RiAm0JFjkMeOk67EXtzbzZ3PkXLBex4phon
P4cCWazyXjAgabAHPpMVbyv6iXZOil+Q/c75DTmNAxx6Y+nCpml6N7RPnl2C3top
gAz/HDph7AzE0mc0/cIhG1ajAFIOEKqG4JAmQmvJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUaEb3G94EjRlQee9J5pErVbmx9QYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhjNzAyMmU5LTI4YjUtNGExZC1iZTcyLTM1Y2E0YWVkNWQwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAJAANDANBgkqhkiG9w0BAQsFAAOCAQEARzfiUcO/LQuy8piHmoXUPupV
NMT7xSqnI+pRXrO5XNCCtZXXQdhy9bh8HbZTg/lYStFB7U2tp9bsO33KrQsvwJk0
Cy6ViYG9wpVdP7Dbci/7Bm9HfG0oj7DEX/PP8L1QID+7ic8bPLssP9D1+8qdlRWv
ng0En5Teya+ktqRqS91/OYI8F7O2IyQ+osU6BtFdkrhrolmV4OjVQ9ixa6KXbZs6
Tlfg7v5dNf3xTsLPmwIvhVUoGEwjeuppt59KhSoKTK2kbp9N4ZuERFAmC5BZcZ5M
lel+oZuAOTNUX0h9+n5hUDLegWx+ehOluXSA4XgtZ2Daxv9WgWStI5XmzNnvLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:48 2026 by rpki-client