Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa
File:                     9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa (raw, json)
Hash identifier:          TfzZXpFaZkF/b4maF7LF3MSqxz90yz+vne0+BRhNwss=
Subject key identifier:   AA:FD:10:B7:62:9D:B3:45:21:47:6C:A4:01:1C:E3:64:5D:0A:42:F8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       200E80158968600EEC23CF8B30F90EAC0009D9A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa
Signing time:             Thu 23 Jul 2026 12:10:40 +0000
ROA not before:           Thu 23 Jul 2026 12:10:40 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b64::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:80:15:89:68:60:0e:ec:23:cf:8b:30:f9:0e:ac:00:09:d9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:10:40 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=909952202488a1a46e7e9e35788a40f9166881ca7d13f1a2299c5364f1b82a7f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:be:ec:9a:30:0f:f8:3e:31:80:b7:3e:50:
                    5a:b8:94:00:50:e8:0b:50:43:e0:63:23:d8:c2:02:
                    cf:c9:ee:e1:9b:ad:92:0c:c4:ad:73:04:fd:20:33:
                    72:f3:ad:ff:9e:ff:06:5d:15:57:9d:ba:40:71:47:
                    a2:7b:15:b0:51:1d:28:f9:31:72:da:8f:6c:1a:a3:
                    ea:0d:28:9a:3d:d9:01:cb:c9:a8:5c:42:48:b2:98:
                    31:50:e8:08:eb:be:13:4a:33:b6:1f:37:e7:da:bd:
                    a4:ac:be:d4:37:ec:6a:30:20:31:67:c9:ed:b6:b7:
                    bd:cd:84:13:d3:f5:36:a2:73:b2:9f:77:af:86:86:
                    25:62:31:ce:a8:bd:2b:69:08:f5:bf:0c:a1:40:71:
                    9c:dc:46:6a:31:bf:57:50:5d:7a:4e:fe:b8:db:a8:
                    2a:5d:d9:dc:20:c9:b0:88:d5:c4:41:74:fb:15:75:
                    b6:8f:4c:15:ea:40:9b:98:0c:1b:a0:48:31:ef:23:
                    5a:fb:a9:43:9c:ef:14:78:61:fb:7f:ea:2f:d5:d5:
                    6c:c1:03:36:74:15:3c:60:7a:f7:a4:0f:2d:64:21:
                    17:ec:b8:af:97:f1:b4:a2:18:dc:36:10:0f:84:e6:
                    73:22:2f:98:7b:21:ff:fd:5d:0c:fb:cc:2c:ca:c1:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:10:B7:62:9D:B3:45:21:47:6C:A4:01:1C:E3:64:5D:0A:42:F8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b64::/46

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:0e:c0:51:5a:a8:b7:b1:76:64:04:2f:54:17:eb:41:22:
         de:15:f7:fe:4a:86:f1:37:47:96:95:7f:d7:57:36:aa:fb:dc:
         00:f0:2f:5c:6b:07:62:a6:95:aa:d2:bd:f3:9a:c1:93:60:6e:
         e3:77:76:e3:60:4c:f4:19:7c:54:ca:79:28:a6:f4:f2:86:aa:
         4a:19:ab:e3:c5:54:21:49:95:f4:50:1c:30:13:3a:61:75:b2:
         3c:3e:13:25:60:65:a8:cc:27:46:cd:ba:29:c5:5f:2e:49:1e:
         12:59:05:f2:51:25:10:22:9a:fd:c0:a3:48:c9:48:2f:5b:76:
         10:11:00:81:55:cc:f4:4e:1a:5b:83:bd:12:b6:10:1f:bf:0d:
         c1:2a:48:81:32:2d:88:4c:83:ee:94:4d:29:83:7e:e9:44:f7:
         6b:fd:36:9a:d4:a6:50:21:66:65:75:d4:6b:40:51:bc:e0:97:
         44:f7:bf:50:90:df:e0:8c:ff:d7:4c:9e:0e:d2:24:e5:17:66:
         f6:72:bc:f8:d0:99:f9:4d:a5:47:51:a9:0d:77:59:15:b3:77:
         03:de:b3:90:d9:23:0d:fc:52:3f:2c:55:ca:46:c0:13:2b:78:
         23:0f:67:bc:c1:9b:52:b0:00:50:2b:d2:3c:64:d2:f7:67:81:
         e8:3c:ff:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:48 2026 by rpki-client