Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa
File:                     9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa (raw, json)
Hash identifier:          s70k6wm9YKtDtsRYgPJqFc5A8xXiqxN5NZjKqdctB5M=
Subject key identifier:   B5:66:35:9D:79:A7:A5:81:DB:45:5B:DC:63:6B:85:E2:D8:96:D2:5D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       309DB832435A7FD44BE0E4A3397CA2B60D26D34A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa
Signing time:             Wed 22 Jul 2026 02:00:08 +0000
ROA not before:           Wed 22 Jul 2026 02:00:08 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b00::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:b8:32:43:5a:7f:d4:4b:e0:e4:a3:39:7c:a2:b6:0d:26:d3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:00:08 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=716dd481705b2736575387b6051efe6eb4977d80da079e22e92035d0d0ab04cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:c0:31:cf:a8:1c:fe:36:42:54:65:88:46:
                    49:b2:ae:52:22:30:fc:0f:ef:07:40:6e:33:1a:de:
                    be:2a:14:9c:a0:90:a3:f2:52:32:ce:b7:85:c0:48:
                    3d:9e:32:61:2a:50:0b:30:2b:a5:37:41:ee:c9:99:
                    a5:ee:76:b8:b3:1d:5c:d7:b7:ca:15:f7:de:36:21:
                    cf:f8:1f:62:7f:88:5f:10:5a:2c:53:1b:b8:4e:62:
                    6f:ae:86:6c:a5:2f:d0:4f:44:34:46:45:ec:b2:bf:
                    05:38:54:01:85:95:e9:c7:30:f5:4d:7e:24:4b:65:
                    ee:39:8c:64:c9:4a:98:1b:e8:56:6d:6f:c2:8a:38:
                    b8:4d:51:ed:b8:62:21:29:76:4d:71:e3:dd:c8:72:
                    e7:6c:8e:ea:4a:bf:4a:dc:76:f1:b1:48:47:5a:ef:
                    42:7c:ff:94:a6:a4:a8:05:1f:48:2c:74:ea:c8:9c:
                    66:2f:56:f5:71:9b:b8:86:e0:50:5b:ab:83:28:b9:
                    44:09:f5:98:dd:5a:fa:7a:d7:35:7d:72:f0:95:00:
                    e9:46:64:70:f8:fa:f8:18:46:a2:c9:2e:a1:4e:37:
                    bf:5d:63:f7:bc:f5:6d:75:2e:65:26:ab:47:db:34:
                    7b:3f:fa:66:0a:1b:ef:9e:53:70:80:06:d0:81:b5:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:35:9D:79:A7:A5:81:DB:45:5B:DC:63:6B:85:E2:D8:96:D2:5D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b00::/47

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:97:92:05:35:3b:95:30:fa:ee:10:a9:f5:54:5c:c4:c5:
         fa:8d:d2:0e:9e:09:9a:3e:e4:86:7b:78:1e:6a:72:f3:25:19:
         b9:ef:66:d5:a6:24:1e:1c:f5:8c:50:da:cb:26:62:99:7a:1a:
         59:52:fc:34:59:65:00:be:f8:ed:1c:b6:f1:8f:49:e7:b1:dc:
         f3:e7:82:05:56:fe:ef:ca:c8:76:14:9e:51:19:d0:45:5b:44:
         17:0c:ed:a5:b8:49:34:4b:c0:de:bb:61:ef:1d:33:d6:32:67:
         76:5f:a2:ad:68:77:12:ab:ae:90:f4:7f:ed:06:b3:83:2d:b2:
         42:7f:03:40:ab:7c:89:7a:31:15:dd:66:66:fb:08:fe:5b:5a:
         0d:75:eb:e7:7a:c8:9c:d9:4d:ea:e5:08:6b:0f:da:07:a1:bf:
         08:4e:1c:2f:3c:20:4b:40:76:dc:b3:cc:2d:ae:b3:8b:5a:8d:
         5e:50:93:6e:d5:d5:ad:b6:83:be:01:74:2d:89:0a:37:63:46:
         f3:71:14:e2:90:9f:1a:95:d9:cc:9f:b5:e9:c0:5b:8b:42:d2:
         18:36:8f:4d:a5:cd:ea:01:da:3b:d9:f1:5c:99:a7:e4:70:08:
         3a:c3:90:2b:f1:1e:70:50:8a:1a:81:9c:bd:62:38:ef:81:22:
         dc:97:d4:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:19 2026 by rpki-client