Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc863268-4db2-48c6-acc3-545284f9289f.roa
File:                     bc863268-4db2-48c6-acc3-545284f9289f.roa (raw, json)
Hash identifier:          9hzTSiH3xz+QVLveyf4PkN7Dbv6X8GBO471Ty5HRbjs=
Subject key identifier:   49:E2:74:21:9B:D9:5C:F3:A5:00:1A:53:70:1C:C9:EB:49:F1:CE:01
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0691D97163A959BE7173E4B6D9ADAAD350E60064
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc863268-4db2-48c6-acc3-545284f9289f.roa
Signing time:             Thu 23 Jul 2026 01:51:29 +0000
ROA not before:           Thu 23 Jul 2026 01:51:29 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c44::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:91:d9:71:63:a9:59:be:71:73:e4:b6:d9:ad:aa:d3:50:e6:00:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:51:29 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=736affe02efe1dd3f6fb80b4371c05e955687060e3e5c36ff7459a0aa412a72b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:a5:f7:e7:0e:51:06:53:6d:50:02:ed:42:
                    76:a7:73:08:59:f4:45:3e:ac:2e:d2:d3:89:d4:99:
                    6a:07:f2:f0:28:2f:c0:9b:dd:5b:0a:70:05:d4:d0:
                    2d:d2:ca:d4:90:af:f0:c5:a9:f6:44:31:de:96:3a:
                    5f:d1:71:4d:ca:56:38:77:57:9f:e0:1f:fe:3d:3c:
                    f8:b8:55:58:7c:c4:9f:fe:1e:59:1b:a3:99:50:55:
                    53:c8:37:3b:b7:62:5f:30:c1:88:26:fa:d8:2b:a0:
                    e4:60:b0:7b:25:2a:a7:ec:b7:f8:07:3e:60:0e:a0:
                    05:73:78:f5:16:f6:a4:dd:52:69:70:f7:5e:2c:3e:
                    26:9d:5c:d0:3a:64:7a:73:1c:9a:42:9c:61:18:d8:
                    1c:f1:de:e8:36:31:76:ac:7a:5e:ef:db:d4:14:d7:
                    77:c2:7c:4d:ce:9d:cb:f9:36:c1:a2:b5:af:98:af:
                    01:8d:b2:81:40:f1:ea:db:60:db:b7:8a:1f:73:5b:
                    3b:d9:13:18:c5:23:c2:41:fc:34:f6:25:fd:eb:45:
                    b2:c2:6b:6e:1e:63:17:80:2f:f1:a7:e5:8a:06:6d:
                    9f:97:19:97:5a:05:35:03:e4:43:2b:70:c5:46:bf:
                    95:21:3c:55:19:27:31:7b:8b:b7:64:0b:50:d5:1c:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E2:74:21:9B:D9:5C:F3:A5:00:1A:53:70:1C:C9:EB:49:F1:CE:01
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc863268-4db2-48c6-acc3-545284f9289f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c44::/47

    Signature Algorithm: sha256WithRSAEncryption
         aa:79:60:87:a6:41:5e:4c:d7:9d:38:cd:02:b6:a4:b5:b5:1c:
         c4:b4:92:ae:81:6e:eb:c2:6b:4d:ca:77:15:32:5d:f9:4b:df:
         47:a9:73:a7:8b:2e:97:de:c0:1a:ec:8c:b5:84:80:ea:f8:31:
         21:39:3a:92:49:5c:1e:bf:51:82:10:12:39:08:c2:e9:40:0c:
         3d:49:b5:9f:9a:09:5d:ff:81:84:dd:7d:af:8d:9a:d5:85:ef:
         ce:49:1a:8b:e4:f2:8a:5b:f2:cd:b1:54:6b:d3:9c:35:64:51:
         60:99:42:a9:98:ef:b0:ba:bb:fd:98:bc:f4:73:fc:d4:41:83:
         10:8b:78:7e:04:0e:16:19:2a:26:20:6d:60:4d:4b:1d:56:b9:
         6a:41:b1:71:6b:2b:5c:be:e6:bf:8a:a1:af:1a:62:4d:2b:e8:
         c4:44:cc:3e:62:47:16:2f:4e:58:32:c3:cd:3b:f7:a6:bb:0a:
         7c:a3:e4:0e:c0:fe:46:07:08:c3:16:ec:e8:1e:38:46:d9:a4:
         55:5e:bf:57:03:b8:e4:ef:29:32:33:6b:cf:7f:81:8c:d4:3d:
         22:4f:d2:1f:a0:22:79:d1:9f:4c:40:2e:7b:f8:62:a4:3b:03:
         31:fd:03:f1:b9:07:ad:d2:df:36:60:38:65:f1:c7:12:bf:26:
         5c:ac:30:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:15 2026 by rpki-client