Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9dcbe53-588c-4d9b-ae8d-4076274ae396.roa
File:                     b9dcbe53-588c-4d9b-ae8d-4076274ae396.roa (raw, json)
Hash identifier:          iW6RaLkBv4kRNF0oR8uoXSGsueJj6pc6tMiA6gq+Fi0=
Subject key identifier:   16:35:A2:B5:A6:CA:21:8C:01:01:58:4D:BE:EE:C7:15:2E:A3:50:4D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       068CDBFB0AD3B59ECA9A66E4F36886ED507BB9DB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9dcbe53-588c-4d9b-ae8d-4076274ae396.roa
Signing time:             Wed 22 Jul 2026 02:51:30 +0000
ROA not before:           Wed 22 Jul 2026 02:51:30 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:323a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:db:fb:0a:d3:b5:9e:ca:9a:66:e4:f3:68:86:ed:50:7b:b9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:51:30 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=dae6bfd9eeaa8ee5be421adf9ee6840de9374651aac025cf13c1dabd67dfa82c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:e8:6e:64:42:5c:9b:fe:df:6e:4d:78:7d:
                    43:00:3d:c4:25:23:57:d0:cf:da:eb:a1:f1:3f:14:
                    c2:80:df:2c:4f:96:54:d6:8c:ea:7b:52:f1:2f:60:
                    6a:cf:b5:bf:48:bb:f3:bb:f8:45:e7:a6:61:4c:e9:
                    c6:f1:dd:cd:59:e9:64:a7:84:3a:03:db:8b:9d:11:
                    6d:34:50:e8:33:db:1a:7b:d0:a7:a5:07:ea:55:57:
                    0b:a0:1f:aa:5d:b0:3c:3e:24:ba:74:ef:30:82:d8:
                    6e:92:3c:9b:11:b0:d6:9b:47:9f:23:2d:09:61:a3:
                    45:a3:98:95:3e:e6:dd:bd:85:7c:b0:02:ff:e7:58:
                    b5:5b:d5:85:76:e3:83:7e:c3:65:68:6f:e9:2b:44:
                    97:8e:5f:b4:dc:5c:29:62:d0:9b:db:28:eb:7a:61:
                    a9:ef:25:a0:13:6f:f4:31:b9:77:b8:02:33:43:09:
                    87:a8:ec:ac:c2:eb:42:4b:08:07:4a:bb:04:49:7a:
                    0f:81:d6:38:5d:24:d6:7c:31:18:68:b4:71:7f:2a:
                    34:53:6f:27:a8:e5:37:fc:68:5f:c9:b0:46:98:24:
                    d2:89:90:f1:1e:6e:fe:fd:75:c7:e3:dc:fe:62:bc:
                    91:47:2c:5d:bf:c4:e5:00:de:9d:f4:5d:71:51:51:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:35:A2:B5:A6:CA:21:8C:01:01:58:4D:BE:EE:C7:15:2E:A3:50:4D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9dcbe53-588c-4d9b-ae8d-4076274ae396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:323a::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:d6:21:62:b4:0b:2e:68:c6:b9:08:b4:03:33:2b:eb:ad:
         96:0a:3b:93:8d:4e:46:19:9e:de:6c:0d:d4:2a:4f:30:04:4e:
         21:12:68:57:91:05:0e:47:d0:7b:4c:ec:ed:a9:01:0c:7e:e0:
         ec:fd:7c:f2:7f:3e:8a:08:ea:b9:4e:8c:f2:bc:7d:21:f6:af:
         cf:64:fe:4f:aa:ee:9d:c7:4d:99:f3:0e:14:18:9a:db:4e:19:
         b8:2a:bc:55:79:71:3d:17:64:cb:ca:c8:b6:8a:79:69:35:3e:
         2f:85:ac:44:44:d1:85:fe:23:26:c9:82:05:ac:14:98:c7:f5:
         c3:63:62:c8:e9:b3:92:0b:25:03:bb:3a:77:ad:14:96:d2:8a:
         49:6f:30:c1:38:fa:67:c7:1a:77:a1:2b:de:29:e9:b0:d3:2c:
         7c:b5:be:67:a9:26:54:0c:34:2f:f5:b5:2b:14:1c:ef:7f:5e:
         8c:0f:6e:1b:58:6a:5e:c5:a1:79:a9:9c:ad:7c:44:88:1c:81:
         38:1a:24:1a:a6:0a:25:03:92:98:5a:ee:fc:f8:bb:cf:e6:05:
         46:bc:68:d3:7e:55:4e:8e:a2:0f:f6:22:b6:73:22:da:03:23:
         0e:9e:64:10:50:a4:10:5c:e4:ab:c6:c3:4e:35:9e:a1:52:cc:
         79:88:a5:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:35 2026 by rpki-client