Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa
File:                     551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa (raw, json)
Hash identifier:          K7PyJ2piTiXpyhCflhlEDsVvP/8TNS3H/3fcMPXBsDU=
Subject key identifier:   B9:54:0A:0E:BA:B6:CC:96:BD:DB:97:2D:13:11:9E:39:2C:EF:2E:78
Certificate issuer:       /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
Certificate serial:       51F6A270423C3DDF07AB82DA72FE52F57E094B94
Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa
Signing time:             Thu 23 Jul 2026 00:20:08 +0000
ROA not before:           Thu 23 Jul 2026 00:20:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        15.201.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:a2:70:42:3c:3d:df:07:ab:82:da:72:fe:52:f5:7e:09:4b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
        Validity
            Not Before: Jul 23 00:20:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=5503d0d9b5ff5dc9c3036c0251a2d48659beb1675f03be8757b7bb15b60c2bb7, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:1f:70:bf:74:89:a5:48:2c:62:f9:c6:3b:
                    7a:6a:09:c3:c3:16:3f:8b:5e:b8:c1:6d:c2:61:5a:
                    7a:f8:10:dd:b7:95:44:b2:d0:07:e8:e8:8b:c8:46:
                    3b:20:7c:ac:f3:9c:85:19:14:02:e2:96:0d:5a:3f:
                    42:93:38:43:ab:fb:e2:51:1e:c2:45:76:21:0d:0b:
                    2d:37:f3:79:49:a2:52:eb:0e:a3:62:e8:ef:36:6a:
                    1f:a7:86:1e:e4:96:75:ec:34:c5:f3:d1:2c:70:88:
                    64:0b:9c:64:35:8d:0b:ac:bc:f5:a7:fa:a9:88:46:
                    43:5b:b7:3f:76:84:22:10:c0:f4:51:db:85:99:76:
                    4c:cd:b9:c1:55:cc:17:9a:53:2f:1f:4d:6d:6d:89:
                    01:67:1a:40:bd:bb:2d:9c:e4:15:42:b3:2b:e1:3c:
                    68:bd:03:50:77:ca:0c:d2:c3:d4:98:2c:a7:c0:27:
                    3a:e7:bd:3d:92:ac:b0:f1:f9:28:b9:0f:00:9f:45:
                    3a:6d:d0:50:d5:c7:94:7f:38:7d:a2:f0:e4:4b:ad:
                    48:d5:e7:68:2c:36:3b:e1:5b:7c:3a:05:dd:56:2a:
                    9c:b4:41:eb:59:d5:99:a4:f5:e6:5b:64:c0:a4:98:
                    b1:5e:e4:a2:19:d8:c8:b1:6e:d7:b2:99:41:e4:1e:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:0A:0E:BA:B6:CC:96:BD:DB:97:2D:13:11:9E:39:2C:EF:2E:78
            X509v3 Authority Key Identifier:
                keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:25:4f:5e:d5:f3:c9:e0:84:9b:95:e2:26:fe:f4:a2:fb:
         1a:74:30:fe:cf:50:17:29:fc:ef:9d:0e:d1:b5:c7:c3:fc:ee:
         14:c5:8c:d6:1b:94:b0:4a:bb:c4:77:b8:7f:4b:d7:cb:2d:e1:
         20:f7:6b:84:d7:b8:c0:4f:bd:2c:be:0f:44:67:46:89:db:76:
         6e:16:f0:bd:83:52:6b:ad:ff:a3:1c:1c:41:41:10:57:c6:a1:
         2b:bb:c2:79:f1:84:b6:8a:8d:a1:be:e4:d3:08:a9:7b:0d:9f:
         ab:74:4f:f3:99:7e:c7:b3:e5:26:a9:d6:3e:63:b4:86:d0:f4:
         4f:5e:a6:c9:52:26:19:f5:a9:87:fd:38:b6:b8:ae:7c:2d:df:
         28:f6:fb:90:cf:d7:2c:c6:a2:e5:0c:ce:ed:42:fb:1b:57:9b:
         8b:f4:71:ab:7f:dd:ec:0f:23:14:66:9f:de:ed:95:0b:e2:a0:
         3b:8d:95:5b:71:e6:75:bb:82:bc:64:44:c0:36:5a:2e:07:33:
         f1:43:f3:aa:87:ee:a8:df:84:3a:01:7f:43:5c:2d:50:3c:0b:
         28:0b:bb:b0:0e:d7:8d:11:79:ab:6c:e2:b2:ee:33:c3:59:a0:
         3d:ac:7e:ed:0f:e6:1a:c6:2e:61:4d:9f:9a:91:9e:cf:68:0f:
         ef:34:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:50 2026 by rpki-client