Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935254fe-b211-45c6-874b-2d53615f83ed.roa
File:                     935254fe-b211-45c6-874b-2d53615f83ed.roa (raw, json)
Hash identifier:          fxZUeffM31xZTv4r3AEpAAq41+PJUfmikN657mNuI4g=
Subject key identifier:   EB:26:0A:58:26:40:5D:C9:00:B6:94:8F:69:88:77:0F:9B:5A:58:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       34A0552187280D7F8EE356BD5DF7371CF1459BD4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935254fe-b211-45c6-874b-2d53615f83ed.roa
Signing time:             Wed 22 Jul 2026 00:42:08 +0000
ROA not before:           Wed 22 Jul 2026 00:42:08 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c64::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:55:21:87:28:0d:7f:8e:e3:56:bd:5d:f7:37:1c:f1:45:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:42:08 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=2830c46d27856692b3a93922a05b1dfb7671ccef4510c3118871b194a646caa3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:c1:68:34:e0:e1:d0:4a:b9:75:80:12:1a:
                    27:91:a9:de:ef:a9:a9:48:9d:65:34:8b:c0:4f:b4:
                    a6:34:97:34:95:df:f2:7f:26:1f:0f:96:9e:06:09:
                    9a:e4:3a:e0:cb:42:0b:0c:ad:ea:ad:c7:c3:da:aa:
                    dc:b7:0a:93:32:53:1c:dc:78:5e:7a:5f:8c:03:25:
                    78:49:47:fb:65:eb:14:54:ec:9d:83:8d:72:15:3f:
                    07:ad:02:40:e0:4e:46:25:ac:73:10:5b:ac:9a:f5:
                    ff:83:b2:d2:c2:8f:7a:06:49:6a:38:cf:b8:86:a7:
                    89:a4:ed:04:8b:ae:7d:29:6a:b1:26:7e:3c:cf:fb:
                    78:59:3c:01:84:2d:3d:f4:d5:18:31:b2:85:26:9f:
                    dd:ff:b1:6e:75:c6:5f:a3:f0:0d:eb:34:32:7f:51:
                    70:fa:c8:ed:91:5d:f8:a6:98:df:73:19:82:aa:ed:
                    05:e8:2f:b2:cb:53:24:68:71:a9:55:fe:02:47:73:
                    0c:01:61:50:96:f3:f9:d4:63:45:03:c9:73:46:74:
                    19:cb:69:79:f8:13:49:96:27:6b:87:99:66:a8:ae:
                    17:91:c3:a3:58:45:63:5b:8d:4e:22:b9:39:cd:af:
                    a7:93:76:de:0b:ac:31:1a:37:8e:e6:7c:c3:26:51:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:0A:58:26:40:5D:C9:00:B6:94:8F:69:88:77:0F:9B:5A:58:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935254fe-b211-45c6-874b-2d53615f83ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c64::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:69:21:e0:86:49:ec:ef:e6:bf:66:f6:93:c7:c4:a5:a6:ba:
         4f:81:e6:92:12:17:83:d0:5e:1d:9c:5c:dd:3b:8d:e2:b6:73:
         df:bb:c3:3b:e0:22:7e:7b:95:5a:b8:05:3c:35:e3:3f:d5:28:
         37:fb:ad:26:6f:5d:2c:3a:ae:1f:c9:8b:20:7e:6a:87:92:7d:
         06:73:3c:8d:96:72:91:73:0e:8d:45:e3:30:2b:13:fa:a6:9b:
         cc:0d:fb:3e:c3:a7:7f:21:22:28:5a:57:a8:80:bf:19:9b:b8:
         3d:3c:0c:f1:97:17:40:ce:d1:e4:fd:70:8a:12:a2:4a:a4:3f:
         49:9f:ed:70:e6:d5:91:68:69:77:cd:8a:59:7b:a8:a1:ce:f1:
         de:6a:2c:7b:14:d5:bf:88:98:49:7f:ab:3d:ab:93:bd:88:51:
         91:1b:ca:3c:41:61:9c:5d:59:a5:a0:c8:81:21:6c:27:c4:56:
         3e:cd:a2:8c:9f:67:6e:64:07:72:7b:26:4c:78:a5:14:8d:a5:
         5d:3a:2a:23:13:8b:08:1e:5b:74:56:d3:50:f1:94:6d:fd:6a:
         45:7b:68:c5:90:44:64:d6:c1:eb:6b:19:19:43:9c:8d:09:b5:
         87:e5:ce:66:17:85:59:c1:98:cc:64:6c:5a:0f:79:cd:c5:c7:
         f8:a2:15:aa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNKBVIYcoDX+O41a9Xfc3HPFFm9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDA0MjA4WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODMwYzQ2ZDI3ODU2NjkyYjNhOTM5MjJhMDViMWRmYjc2
NzFjY2VmNDUxMGMzMTE4ODcxYjE5NGE2NDZjYWEzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSXcFoNODh0Eq5dYASGieRqd7vqalInWU0i8BPtKY0lzSV
3/J/Jh8Plp4GCZrkOuDLQgsMreqtx8Paqty3CpMyUxzceF56X4wDJXhJR/tl6xRU
7J2DjXIVPwetAkDgTkYlrHMQW6ya9f+DstLCj3oGSWo4z7iGp4mk7QSLrn0parEm
fjzP+3hZPAGELT301RgxsoUmn93/sW51xl+j8A3rNDJ/UXD6yO2RXfimmN9zGYKq
7QXoL7LLUyRocalV/gJHcwwBYVCW8/nUY0UDyXNGdBnLaXn4E0mWJ2uHmWaorheR
w6NYRWNbjU4iuTnNr6eTdt4LrDEaN47mfMMmUdwPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6yYKWCZAXckAtpSPaYh3D5taWDUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkzNTI1NGZlLWIyMTEtNDVjNi04NzRiLTJkNTM2MTVmODNlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALGQwDQYJKoZIhvcNAQELBQADggEBABFpIeCGSezv5r9m9pPHxKWm
uk+B5pISF4PQXh2cXN07jeK2c9+7wzvgIn57lVq4BTw14z/VKDf7rSZvXSw6rh/J
iyB+aoeSfQZzPI2WcpFzDo1F4zArE/qmm8wN+z7Dp38hIihaV6iAvxmbuD08DPGX
F0DO0eT9cIoSokqkP0mf7XDm1ZFoaXfNill7qKHO8d5qLHsU1b+ImEl/qz2rk72I
UZEbyjxBYZxdWaWgyIEhbCfEVj7NooyfZ25kB3J7Jkx4pRSNpV06KiMTiwgeW3RW
01DxlG39akV7aMWQRGTWwetrGRlDnI0JtYflzmYXhVnBmMxkbFoPec3Fx/iiFao=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:02 2026 by rpki-client