Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b775e0b2-879d-4259-b7b4-94ce48e74c87.roa
File:                     b775e0b2-879d-4259-b7b4-94ce48e74c87.roa (raw, json)
Hash identifier:          Pax6hjuEXNeZNsW5jZVWifth8dQVUYf8aQqDU6ZuBT8=
Subject key identifier:   76:FA:7F:A5:C3:72:C9:54:CE:10:4F:82:18:C4:71:D3:84:6B:8E:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68AD4987786F7F6EBE4CEC5D9FD6402808E3FB92
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b775e0b2-879d-4259-b7b4-94ce48e74c87.roa
Signing time:             Thu 23 Jul 2026 01:30:12 +0000
ROA not before:           Thu 23 Jul 2026 01:30:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d20::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ad:49:87:78:6f:7f:6e:be:4c:ec:5d:9f:d6:40:28:08:e3:fb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:30:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=69f21dc0e1249ce35e081a2051d260c40bdb1d01e713a0d18540d72493fb3bc3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:7e:25:7d:89:b5:a5:06:c8:ee:5f:50:27:
                    91:ce:69:cd:2f:b4:9c:d3:ef:06:68:35:09:7d:7d:
                    14:8d:7e:8d:28:fc:62:e3:24:d0:ab:32:ad:b3:cc:
                    36:2d:f3:ab:5c:24:3a:8a:82:59:3c:df:65:b7:2c:
                    4b:d1:75:78:7e:54:01:67:91:ae:f8:2e:71:af:ab:
                    f3:38:2d:fc:ba:c5:26:15:2d:da:13:66:4a:2b:33:
                    c8:c3:ee:c3:09:0b:e3:64:4b:04:80:10:2a:42:7d:
                    6e:c8:87:46:3a:de:12:41:f8:d1:8c:65:bb:f4:47:
                    32:e6:93:cc:bb:12:79:fa:99:c9:71:4a:5b:24:05:
                    3f:db:98:32:6b:5e:31:a3:23:46:bf:fa:a5:76:3b:
                    f4:c3:a0:a4:04:af:9e:8a:a3:7a:b8:71:3b:99:f0:
                    80:63:ec:07:cb:cd:6c:fd:f0:ee:a7:11:60:2b:81:
                    aa:3d:58:94:4d:91:f2:62:0d:70:72:0c:d8:16:df:
                    f6:f6:4a:e2:1c:e1:7e:57:58:b7:ac:fc:0d:cc:13:
                    12:d2:f6:4c:86:26:f9:05:bd:8f:0e:d4:57:55:c2:
                    8f:c1:76:0c:6c:3a:16:b6:14:f5:ab:66:b7:b5:e5:
                    8c:b9:eb:b5:23:29:df:1e:69:cf:fe:ba:a2:06:47:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:7F:A5:C3:72:C9:54:CE:10:4F:82:18:C4:71:D3:84:6B:8E:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b775e0b2-879d-4259-b7b4-94ce48e74c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d20::/46

    Signature Algorithm: sha256WithRSAEncryption
         75:34:f6:fb:44:1f:13:e7:f2:b6:3e:10:33:91:b9:a1:ce:0f:
         7f:86:1d:84:e3:c6:76:ae:6e:a0:bf:11:e6:c2:59:0b:89:4a:
         bf:c1:a6:33:c9:62:77:2f:c6:16:ba:a5:4c:88:e3:6e:02:32:
         2a:c9:3c:10:f1:f2:88:7f:cd:96:d6:55:3c:71:5c:0a:b5:34:
         79:ab:84:c9:41:84:a1:14:7c:2c:f8:03:cc:8f:1a:fe:0d:72:
         ef:69:bb:a6:59:6d:6f:47:0d:6f:e6:d8:97:6e:b7:26:4f:a1:
         89:89:ae:bc:4e:32:3b:e8:fc:4f:dd:a9:a5:29:a2:51:b0:b4:
         6f:ae:a5:f4:3d:dd:4a:8d:8d:07:29:75:5c:eb:72:27:7d:8c:
         79:53:57:c4:ff:55:c7:2d:f8:fe:f7:e0:5a:95:3c:43:89:31:
         2c:e6:65:a3:78:74:28:86:75:39:85:53:fd:48:37:1b:8a:2c:
         1b:f6:31:3c:32:04:af:0b:f2:65:0b:a8:42:16:be:a9:71:15:
         a4:f9:c6:4f:67:75:12:50:82:a6:2b:47:cf:5d:27:38:f4:2d:
         e1:ea:37:4d:b7:60:45:16:fa:6a:a0:ca:19:05:85:bd:8a:26:
         f9:09:65:af:cc:8e:43:21:8b:ba:0c:ce:a5:29:5b:f5:ea:69:
         d8:17:e1:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:38 2026 by rpki-client