Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6e674ae-a128-474c-b6b8-a64c9a28eee8.roa
File:                     a6e674ae-a128-474c-b6b8-a64c9a28eee8.roa (raw, json)
Hash identifier:          tvuT1tiC+sZQ2dexaiBqeobI+7ONuAQx1xagnjpLLwM=
Subject key identifier:   71:80:7F:62:D9:96:25:8A:D3:D4:B4:9A:7D:A0:19:E7:16:64:F0:2B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       604E18303B947185C5D06DF4EB4748FC4C5086CF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6e674ae-a128-474c-b6b8-a64c9a28eee8.roa
Signing time:             Thu 23 Jul 2026 09:30:09 +0000
ROA not before:           Thu 23 Jul 2026 09:30:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e8c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:18:30:3b:94:71:85:c5:d0:6d:f4:eb:47:48:fc:4c:50:86:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:30:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=96d8d18943adc2842900a9489e09c97acce6adffa059006582740e15619cd63b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:54:5b:97:ef:bc:45:6c:bf:af:ae:13:9a:
                    9e:36:d3:26:23:2c:d1:20:13:36:99:0f:00:f7:9e:
                    b3:8b:dc:97:0b:74:1c:81:4b:df:bd:7a:e9:87:f5:
                    12:fa:02:5b:96:89:84:7a:88:f1:65:e1:a1:bf:66:
                    67:52:a4:93:6f:33:2a:74:fb:0f:9f:cc:17:66:54:
                    39:84:62:10:51:c8:24:53:b1:b8:33:f4:85:17:36:
                    34:94:3e:5c:a2:ed:73:8f:d5:f7:b6:86:73:ad:9d:
                    20:7d:64:1e:a6:ab:3a:3d:61:c6:dc:03:5d:67:a4:
                    23:16:3b:81:59:3b:d8:d3:c4:e4:3d:07:4e:72:40:
                    8b:09:f8:73:01:18:02:b8:22:a6:af:f3:94:d7:9a:
                    da:13:99:4f:a9:40:f2:91:38:5d:59:cc:89:5b:e0:
                    45:a3:31:75:2b:37:1b:20:ed:fd:89:0b:2d:a8:9c:
                    f8:d2:65:d0:57:c2:d9:8e:58:06:34:e6:7e:16:52:
                    b2:4f:b9:0a:2a:31:8e:61:a7:bc:5c:55:bf:31:21:
                    ea:3d:95:2d:42:5a:8e:f2:6a:51:77:28:2a:16:55:
                    88:7f:bf:8b:15:14:82:ac:ea:18:dd:84:a6:0f:27:
                    b1:99:9e:8c:2c:bc:15:72:75:81:87:b4:27:05:3b:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:80:7F:62:D9:96:25:8A:D3:D4:B4:9A:7D:A0:19:E7:16:64:F0:2B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6e674ae-a128-474c-b6b8-a64c9a28eee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e8c::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:43:f3:ff:db:84:41:4b:41:a1:0e:9d:73:d7:a7:7b:95:ae:
         4f:51:7a:1f:a3:af:df:a3:1c:0c:7e:ee:f8:6d:ee:95:3d:72:
         41:63:49:61:85:09:d7:84:70:94:83:c6:23:34:19:b5:e4:aa:
         39:11:ed:ee:c4:e0:54:3d:63:ee:59:53:8a:73:fa:7f:34:b6:
         48:f4:7f:3d:46:63:80:e2:c7:8a:34:30:9d:e2:63:39:83:fc:
         41:b4:b6:2e:07:65:94:4a:a8:a7:d2:0a:c2:d4:2e:50:ca:22:
         37:0d:96:4a:d0:b4:f0:43:de:10:0f:4d:7f:4d:55:18:d0:63:
         52:ea:ce:c5:37:91:de:a2:80:78:51:8f:fc:6f:f5:f8:cb:58:
         12:17:df:ae:2c:d8:2e:cb:b5:fe:d0:2f:db:c5:98:20:85:e8:
         f2:82:27:cc:57:3e:76:29:20:a6:1b:c3:2c:93:1d:20:1c:f4:
         af:ea:f0:c8:74:73:71:24:35:ad:2b:ba:8b:95:5d:cb:dc:e3:
         df:0c:09:d1:58:77:d4:d8:89:61:25:de:6a:60:a6:dc:7e:ae:
         d6:9f:a1:3b:74:15:15:e4:9b:cd:ac:d2:86:02:7d:a5:14:d7:
         61:66:de:f3:41:0a:16:ab:42:f0:77:d2:90:ea:bc:2b:9b:d7:
         cc:ce:49:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:34:58 2026 by rpki-client