Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afd0195a-fcc5-4154-b40b-d8bcb96d1891.roa
File:                     afd0195a-fcc5-4154-b40b-d8bcb96d1891.roa (raw, json)
Hash identifier:          d3kq4AKSmKE79lNISYuFqKPjUDmZV+1M4vPSWpW1qLo=
Subject key identifier:   94:0F:A7:C3:C2:70:D5:04:A8:45:19:B8:BB:6A:21:0B:11:98:34:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E818744CA48A8D2A6F00A22C1B8B9D76F1B8D95
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afd0195a-fcc5-4154-b40b-d8bcb96d1891.roa
Signing time:             Thu 23 Jul 2026 07:31:24 +0000
ROA not before:           Thu 23 Jul 2026 07:31:24 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3728::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:87:44:ca:48:a8:d2:a6:f0:0a:22:c1:b8:b9:d7:6f:1b:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:31:24 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=963147ea88a13a6c7b822f3e73309a93464f03a14d8ff056f933b7ded710d875, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:b4:03:ae:77:94:b0:12:3a:a3:31:68:b9:
                    bd:0f:eb:a2:5e:e0:2a:b4:12:fa:f3:98:5b:51:51:
                    1b:4b:82:76:1a:91:08:df:c4:3f:eb:fd:fb:5c:74:
                    d3:c1:ca:2d:50:47:4c:41:f0:9b:e1:9a:b4:0b:b7:
                    43:a3:d0:0a:7e:f0:0e:1f:5b:b1:2a:d0:39:24:ea:
                    56:ce:48:82:67:1e:97:cf:c2:f1:b4:5f:73:89:e6:
                    46:0f:33:4c:35:b0:b1:2d:a6:b0:68:8e:a9:61:83:
                    f8:70:a1:92:fb:a5:8b:4f:81:85:f3:21:3d:1e:c7:
                    4b:c6:f5:05:85:06:ce:b8:ca:cf:2d:6f:4e:84:40:
                    df:7a:76:dd:eb:d5:fd:ec:60:9c:a5:e1:64:f4:d7:
                    c9:85:1e:44:0c:b6:fe:d1:28:a1:99:b6:b0:6f:c6:
                    f7:e7:ce:68:9d:0a:f5:eb:f4:0c:de:ec:ce:98:55:
                    94:12:b6:64:ab:d4:00:58:14:66:ef:8b:19:72:98:
                    3c:74:be:32:ab:f7:45:86:c0:2a:e5:c9:f4:14:95:
                    d2:4f:0e:63:98:27:45:73:e8:70:a2:74:a4:2c:26:
                    ed:d5:03:4d:a4:3f:83:17:6d:76:0c:53:1d:3e:7f:
                    2d:5c:eb:7b:a4:1d:97:14:c0:f8:c9:2d:45:ba:17:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:A7:C3:C2:70:D5:04:A8:45:19:B8:BB:6A:21:0B:11:98:34:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afd0195a-fcc5-4154-b40b-d8bcb96d1891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3728::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:12:dd:9d:51:a7:c5:79:3a:2d:36:81:db:28:ab:d0:5a:82:
         a3:5c:93:cf:60:0e:6a:37:e7:bd:3b:13:9a:14:43:bc:c5:4b:
         b2:47:d4:0e:e0:bc:a9:dd:5d:50:ad:c7:e7:73:68:e2:6c:9c:
         e9:e2:e0:01:2b:14:ed:d1:df:51:9d:88:92:b4:fc:7e:9d:f5:
         1b:89:15:52:1c:ea:49:b7:02:25:d9:ab:12:ed:fa:7c:63:61:
         23:f1:90:4e:35:39:ab:95:4e:c6:94:65:d9:1d:84:23:17:fe:
         0c:ad:00:f8:dd:ec:10:ed:d4:78:f1:39:00:96:f5:07:91:19:
         ab:88:af:b2:e0:f2:9d:f9:60:54:45:67:e2:c8:da:bb:a5:73:
         de:69:46:1e:dc:25:6d:d6:0c:d9:39:07:bc:4c:8a:bc:06:81:
         f1:e3:65:99:d4:1f:a9:1f:3c:24:9b:c9:ef:af:00:af:93:13:
         8f:bb:dc:98:a0:e6:e9:c7:b5:5d:3e:51:e2:7e:31:2d:e1:d9:
         2d:ab:68:a3:d1:f7:dd:b7:17:a9:7a:8a:98:1f:25:6b:a2:69:
         54:06:46:ce:dd:3b:9e:9d:f0:85:ed:49:41:31:65:89:33:98:
         da:e2:90:9d:e5:2c:d3:6b:3c:54:85:5c:2b:6a:d6:12:5f:cf:
         06:bf:25:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:36 2026 by rpki-client