Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa
File:                     8d7929ba-2a45-4958-9b22-a255c74bac45.roa (raw, json)
Hash identifier:          Q4rGzR5Q/JoMsG9MzNH0bvAFOpLMk2XHsbxKie5Xrc8=
Subject key identifier:   1B:34:0E:1A:12:02:D3:B6:5D:47:0C:EF:3B:40:1C:80:2C:C5:1E:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69747D1FBC340F91DEFF6F47AEA8EAE2803A57A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa
Signing time:             Thu 23 Jul 2026 10:11:21 +0000
ROA not before:           Thu 23 Jul 2026 10:11:21 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aac::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:7d:1f:bc:34:0f:91:de:ff:6f:47:ae:a8:ea:e2:80:3a:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:11:21 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=56ca5512f78e24a9562831e7a1f8abc1ac6563bc0d7daf648b827e5faa9ae493, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:2f:56:9b:a4:ab:15:2a:dc:33:73:82:1a:
                    29:10:48:7b:2e:35:77:27:97:68:91:bd:8c:cd:c4:
                    12:49:eb:92:17:f6:98:ed:5a:24:6d:e5:a6:6f:e5:
                    1e:6c:05:4c:e4:6f:fb:2f:b6:77:15:a4:52:63:33:
                    ef:e3:fb:41:d8:57:e4:29:67:5c:ce:a8:b1:b2:51:
                    c7:c2:a0:52:07:dd:7f:41:3b:e9:b7:c1:5b:25:a0:
                    6e:3d:96:cc:d0:17:bd:db:de:3c:ec:37:e5:0d:fc:
                    90:0a:9a:a5:7a:80:53:ae:48:56:cd:3d:93:64:95:
                    18:25:1c:0e:1a:d0:8c:d9:ab:e4:92:b8:32:b3:2c:
                    1e:e8:c0:53:b6:ab:4c:b9:bc:f3:fb:0c:1c:5c:8c:
                    ca:9d:80:57:cc:5d:cf:0b:a6:3f:14:a1:73:bd:30:
                    57:d5:73:db:d1:7f:c9:81:39:cc:61:75:33:c4:91:
                    8b:51:20:67:f9:0d:89:74:1f:87:31:cc:5e:40:55:
                    79:5a:d9:4a:9f:df:2c:e9:b2:00:12:e7:11:04:95:
                    87:3c:17:4e:87:d1:2e:85:97:9b:79:0e:16:e3:57:
                    a9:b3:3d:3c:28:9a:9e:03:ec:5b:f3:15:9c:62:94:
                    3d:b8:c5:fb:92:78:6c:8c:6f:0e:84:7d:6f:67:f0:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:0E:1A:12:02:D3:B6:5D:47:0C:EF:3B:40:1C:80:2C:C5:1E:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aac::/47

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:7f:87:a7:20:e8:78:fa:07:c7:73:3d:36:20:bd:81:1d:
         a6:59:6d:f2:d3:93:44:08:2a:28:28:49:fd:7d:ca:3b:e9:bc:
         dc:cb:aa:d5:3d:96:81:f4:0f:29:99:ea:d9:5c:e9:24:4c:ba:
         19:90:c1:7d:04:05:80:75:5a:ed:cd:b0:9e:dc:40:79:53:d3:
         ee:fc:e9:fa:b9:1e:04:9e:ca:38:83:2e:15:d6:26:52:e9:88:
         d2:0d:28:8d:af:bb:de:a7:cb:76:98:dd:5f:e6:2b:51:d1:da:
         bc:2e:49:6e:0a:cf:a8:1e:00:06:7e:26:2a:12:1b:25:8f:ee:
         7c:02:55:8d:10:7d:41:06:03:bf:a7:de:3e:cc:9c:c9:83:af:
         5b:02:59:b3:a9:2d:56:5d:82:cd:74:c5:4f:2a:e9:44:35:9d:
         5d:bd:e6:d0:03:6d:22:28:38:70:a9:04:03:f6:4d:27:bb:f3:
         16:2d:54:87:b0:09:e2:f6:d2:c8:61:bf:d8:1d:ad:5e:ec:dc:
         a9:69:77:35:f6:40:c9:ca:54:c4:71:9e:57:64:a0:d5:6f:88:
         af:dd:f4:af:94:27:d8:1a:70:a8:3f:36:22:7a:0a:f6:56:94:
         63:1d:c4:fd:48:2f:10:c6:4f:55:15:28:e0:e6:a5:5e:7a:e7:
         b8:74:5b:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:09 2026 by rpki-client