Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0376b51-047a-4da0-86c0-5ae11b9a3a96.roa
File:                     a0376b51-047a-4da0-86c0-5ae11b9a3a96.roa (raw, json)
Hash identifier:          NGfJ/iXAdXn5H+rnk5qw4OPHaaj6p+SCZK6PpqbUz8Q=
Subject key identifier:   83:F7:09:86:15:E6:25:2F:C5:A9:99:AC:27:A7:21:79:8B:2C:F1:3A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1C919D00594B06AA19E3101C5F561E5C5CCF9102
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0376b51-047a-4da0-86c0-5ae11b9a3a96.roa
Signing time:             Thu 23 Jul 2026 07:00:10 +0000
ROA not before:           Thu 23 Jul 2026 07:00:10 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a700::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:91:9d:00:59:4b:06:aa:19:e3:10:1c:5f:56:1e:5c:5c:cf:91:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:00:10 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=5fb9e412b30c8ceccdefc6935ee484e7683e6ce745d7cbb008124e8fe54664e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:53:85:6e:56:74:d4:ff:a7:63:b2:b5:c6:
                    65:a4:82:61:61:9f:f1:d3:b7:5f:54:f1:5e:ce:78:
                    02:df:58:52:bc:73:87:ee:c4:4f:51:fb:c1:1f:de:
                    95:27:20:48:d1:ee:1d:b6:66:f6:db:3b:f6:a7:52:
                    72:a9:98:50:2d:01:f8:6c:ef:32:35:d2:9d:b6:bb:
                    28:a3:a7:d8:3c:69:78:f3:35:87:80:5d:c1:bf:99:
                    2e:e0:60:e6:a9:b7:e5:79:a9:64:3d:2f:19:9e:59:
                    28:7c:95:fa:27:48:6a:51:fe:eb:e7:f5:9f:6e:00:
                    64:22:57:ef:07:d7:19:27:26:b1:16:9c:5e:2e:7d:
                    53:fd:8f:d6:57:8c:8a:37:a3:8a:1b:68:ec:09:6b:
                    5c:64:ec:be:48:6c:21:c7:a4:00:52:45:65:30:b5:
                    10:cf:d7:b3:43:09:66:41:1d:dc:eb:54:84:10:6e:
                    36:62:a6:aa:9b:2a:50:d9:a9:f3:26:02:6a:ec:46:
                    6b:05:9b:dc:84:ce:52:0b:f4:10:64:50:d4:17:21:
                    29:d5:85:a6:6c:5b:e0:f9:bb:10:9f:d8:c7:c8:73:
                    ee:02:79:e8:16:a0:32:98:cd:32:ac:05:db:e8:61:
                    fe:d2:bf:c9:ba:ea:45:d9:4a:2e:a9:f6:5b:dd:1e:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:09:86:15:E6:25:2F:C5:A9:99:AC:27:A7:21:79:8B:2C:F1:3A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0376b51-047a-4da0-86c0-5ae11b9a3a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a700::/43

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:97:79:07:b8:97:dd:7c:6e:c4:f3:f2:0c:9c:67:db:1c:
         ac:8b:73:cc:fe:62:14:0b:e1:4b:22:f3:39:c3:2c:fc:8d:7b:
         b6:da:ec:73:52:f4:25:c1:64:4e:6c:87:b8:85:65:b8:5d:ce:
         0e:a5:0c:ed:26:8e:6d:cf:5a:b9:a4:66:2d:d2:7c:a6:2c:d5:
         b4:a9:3b:88:ae:bb:b1:6d:56:1e:03:41:cf:98:22:72:48:4c:
         f6:74:eb:28:57:49:3d:c5:d3:08:85:10:37:56:8e:da:7c:ce:
         d6:b0:ef:24:aa:d8:bb:da:f9:5a:2c:30:c0:da:62:d1:dc:6b:
         d2:0a:dd:35:1d:a3:dd:3a:f7:46:72:d2:c3:f2:3d:50:49:8a:
         11:06:14:8f:7a:0a:e7:8a:7b:02:a2:63:88:aa:65:37:ac:99:
         ca:26:aa:21:c2:1d:7a:18:d6:29:c6:46:24:33:ca:ba:4e:85:
         14:38:2f:36:64:cb:14:28:e0:71:32:e7:1e:83:bf:04:52:7e:
         97:d1:6e:5d:d6:5e:9d:3e:cc:7a:61:3e:82:45:42:c8:6a:f5:
         fb:bc:81:99:d2:12:5f:85:65:63:ca:4e:2b:26:93:d3:8b:a3:
         79:5b:44:38:95:77:7a:f1:29:9a:02:46:e1:25:7d:80:a2:ae:
         aa:ca:05:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:11 2026 by rpki-client