Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa
File:                     a15a3405-1775-400e-96e3-eddb42c4f58a.roa (raw, json)
Hash identifier:          9CclGKgbnAaizCDmEROJsp5O2Pz691nYt14HnJcL4Cc=
Subject key identifier:   EB:9F:99:38:8A:1E:D6:15:05:E4:26:08:E5:A7:61:19:F8:7B:9C:C3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73483A9A9FA07EF9C1A99CEB2829C7BB63CE11B5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa
Signing time:             Thu 23 Jul 2026 10:50:47 +0000
ROA not before:           Thu 23 Jul 2026 10:50:47 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:363c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:48:3a:9a:9f:a0:7e:f9:c1:a9:9c:eb:28:29:c7:bb:63:ce:11:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:50:47 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=3bda718946f1b07977351bf0785167a0c5ff3e39129239c4f68fa659db447031, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:7e:2f:ad:8f:87:0a:2a:b7:0d:ee:ac:32:
                    98:c9:66:91:75:17:02:6d:13:47:71:7b:2d:1a:ec:
                    9e:c8:7f:07:4a:86:20:67:4b:70:03:c6:61:a8:bc:
                    b4:f8:ba:90:a6:43:ee:4b:9f:c7:61:a5:99:bf:af:
                    fb:2a:fd:ee:13:7a:bf:dd:ca:9d:db:07:3b:4c:2d:
                    8e:37:31:ed:ac:89:0b:82:11:22:91:75:40:00:1d:
                    7c:93:6a:dd:a9:b0:9f:a4:f2:26:91:ba:a5:ee:c5:
                    eb:b6:8a:e1:73:66:54:62:29:f9:7b:53:1a:15:2b:
                    fb:f3:1e:fc:67:91:d3:96:a5:28:66:33:c7:7b:5a:
                    04:53:7b:b3:32:88:fe:d3:e2:ad:ad:d4:76:01:49:
                    c9:66:b3:d6:64:78:67:4a:8c:fe:32:81:88:8f:71:
                    0f:49:97:42:75:b1:8a:a3:83:d0:b8:a6:ca:df:5a:
                    58:04:e4:fe:ae:22:90:da:79:1e:d4:40:f9:61:74:
                    6c:b0:cc:a6:0e:d8:22:64:a0:28:fc:c6:8c:21:87:
                    34:0b:73:c5:71:8b:7d:18:73:fe:87:5c:a6:83:8f:
                    5d:42:87:e0:4f:f5:a9:4e:26:5e:62:81:96:e1:40:
                    16:f9:f6:ba:b2:0f:11:09:c6:c4:30:de:8e:2a:c1:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:99:38:8A:1E:D6:15:05:E4:26:08:E5:A7:61:19:F8:7B:9C:C3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:363c::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:94:48:4e:c7:58:49:25:46:07:58:7f:33:d9:ee:b5:a7:af:
         dd:68:65:27:a8:84:49:0c:93:c5:3f:0e:26:01:cf:9f:a3:35:
         cd:79:27:b3:24:92:e2:61:2c:dd:7d:2f:63:dd:39:26:46:3f:
         bf:cf:f9:84:5a:98:37:6d:34:ea:c5:da:f8:0a:fe:3d:4e:2c:
         70:03:15:f2:a2:4c:6f:72:58:d2:48:a3:74:ab:cb:49:5c:b0:
         ed:dd:52:37:42:ac:ea:5d:87:45:7e:63:13:6a:b8:8c:52:d6:
         f6:ff:00:cd:04:2e:18:dc:45:b4:00:01:26:83:64:05:26:23:
         a5:05:3c:08:b0:97:35:01:f6:20:28:3d:a5:4a:df:c7:18:95:
         d8:c0:56:51:50:c9:13:2f:f4:4f:4d:db:3e:65:70:00:ac:8e:
         d6:65:a0:4a:e6:34:06:1e:ba:f0:e0:dc:22:d7:20:89:eb:8b:
         6f:84:5c:60:88:07:3b:53:7f:24:4b:84:ce:fe:be:17:f8:da:
         aa:c9:6c:10:0b:7b:79:a9:d7:e3:e7:c6:b2:e7:2d:01:9c:34:
         c1:85:95:3d:3e:7e:b9:bc:51:a4:0d:f5:2b:d8:6e:03:52:ef:
         75:7a:16:c8:99:ef:09:5c:bb:5f:44:35:f1:ea:29:71:19:98:
         69:d0:e2:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:57 2026 by rpki-client