Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef21b4f-e8d9-48b9-9ba2-8f623985f327.roa
File:                     8ef21b4f-e8d9-48b9-9ba2-8f623985f327.roa (raw, json)
Hash identifier:          DO2oCnv4+dkhZKVTjbigTQ+36ocvFPPS+HqO7aA3zq8=
Subject key identifier:   09:77:4F:32:30:DE:12:5A:69:FB:A1:25:8F:AE:D7:43:F6:1F:66:BB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       145B7E9A8FD2564B8496BEE410830C437D1DF345
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef21b4f-e8d9-48b9-9ba2-8f623985f327.roa
Signing time:             Thu 23 Jul 2026 06:31:27 +0000
ROA not before:           Thu 23 Jul 2026 06:31:27 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:7e:9a:8f:d2:56:4b:84:96:be:e4:10:83:0c:43:7d:1d:f3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:31:27 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1c724f69e054f9b4bba5a6ee0944b30b5e181a839cf75140bba62b310c7ee02c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:08:e1:0c:32:71:ac:9e:38:f3:d3:9a:7a:
                    81:19:69:1d:08:ee:0e:d1:21:0b:8e:3e:8b:55:9c:
                    1f:9a:74:b3:c9:10:95:04:67:ed:38:74:1d:dc:3e:
                    21:29:41:1f:28:31:00:d5:9a:64:c6:29:92:2b:8f:
                    a4:99:67:df:75:52:fe:50:de:12:7b:0e:6b:9d:c4:
                    c3:3f:43:bb:a8:28:57:c9:9a:be:c1:c9:04:64:fa:
                    f9:86:a3:67:73:e0:4f:35:85:93:01:17:8e:c6:10:
                    8a:d6:e0:23:85:2f:80:82:97:46:dc:55:12:85:26:
                    b0:cb:41:07:93:33:e2:db:ed:4e:ec:35:09:33:2c:
                    71:f3:f8:1b:37:ee:d9:a7:5f:2f:22:9b:ae:0f:25:
                    c5:e3:ae:66:ae:0d:8d:f8:3b:6b:f2:b9:6b:30:95:
                    46:4b:48:a4:28:7b:7f:61:e2:4b:8d:18:82:79:23:
                    aa:2a:89:42:0d:7c:ee:fc:bc:c6:02:ce:b7:d4:2d:
                    2c:85:22:c1:5c:bd:da:59:ed:70:79:d9:02:0d:68:
                    47:5a:86:ee:85:20:79:2d:c7:95:de:5a:6e:d7:40:
                    12:35:8f:fc:59:1d:5c:43:b7:3a:a8:2e:45:89:f0:
                    1f:cb:5e:e6:c9:d3:6b:a6:51:eb:ba:03:33:6d:ef:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:4F:32:30:DE:12:5A:69:FB:A1:25:8F:AE:D7:43:F6:1F:66:BB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef21b4f-e8d9-48b9-9ba2-8f623985f327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b80::/41

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:9e:fb:53:6b:e5:4b:24:a9:21:ce:3b:a5:bc:75:2b:43:
         02:fc:f1:86:5c:c3:ec:88:f7:d2:4b:48:d8:15:15:32:63:74:
         ff:2d:31:29:f6:d5:fe:90:5f:d6:1a:03:6e:db:a4:d1:47:3e:
         03:36:00:22:e3:d5:35:49:bd:2a:d9:97:ff:24:86:66:e4:43:
         42:37:ee:00:06:ab:df:6b:b9:b6:d5:b2:b6:dd:8c:f7:00:9a:
         dd:d5:7a:dc:16:e6:0a:3c:9b:0a:eb:1b:a5:cb:7d:73:62:dc:
         37:72:25:d3:37:8b:e7:f3:6f:8c:cd:d8:99:85:f0:7d:1b:1b:
         84:60:8d:c4:ad:e0:d5:04:7c:4b:7e:67:36:b2:46:e5:03:ad:
         72:e9:14:0c:92:a1:e9:9f:dd:5a:55:ea:be:4a:05:09:2c:06:
         f6:ae:f3:f3:65:d6:e7:12:2a:8c:93:12:db:fc:00:c2:ab:40:
         43:de:ad:16:4e:8d:0b:55:e1:a9:5e:84:7b:ef:76:aa:52:6d:
         f3:a5:79:a7:65:12:d2:bc:eb:43:01:a3:63:b7:1f:45:da:19:
         a3:a7:ff:b1:40:20:b7:8d:6a:75:35:96:ea:22:52:3f:0a:79:
         6f:2a:55:80:f9:60:f8:aa:32:63:67:48:da:55:d5:33:fe:cd:
         70:6f:2d:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:19 2026 by rpki-client