Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a10733-d057-4589-b7eb-5eb2abdb8fe9.roa
File:                     26a10733-d057-4589-b7eb-5eb2abdb8fe9.roa (raw, json)
Hash identifier:          9goHkoSWdcctnBRhL5ZLixNhCneZatl2CsVmsdQYPYU=
Subject key identifier:   7B:42:4B:D6:1C:56:DF:B1:31:A7:C8:6C:A1:AD:04:7C:4F:91:9C:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5D254F89BBAF23C141D68645FB648D7D70B536C7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a10733-d057-4589-b7eb-5eb2abdb8fe9.roa
Signing time:             Thu 10 Sep 2026 02:20:54 +0000
ROA not before:           Thu 10 Sep 2026 02:20:54 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1eb4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:25:4f:89:bb:af:23:c1:41:d6:86:45:fb:64:8d:7d:70:b5:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 02:20:54 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=f76e5bbca63eef7e6418e26e65ef66ee7801f6a3ba6403c66c0daaa52eca3be1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:5f:d9:7b:39:e3:2b:1b:89:ab:e8:79:7b:
                    4b:4f:39:41:cf:0c:d4:c0:9c:d9:c6:32:af:ea:fd:
                    45:6c:b2:d4:88:fa:f5:58:9f:e8:37:10:74:c0:b4:
                    20:ec:c3:14:64:85:d3:64:8d:f3:11:94:11:21:50:
                    c7:83:41:61:6d:f7:00:81:2f:d7:20:8e:22:07:3f:
                    1e:36:61:7b:69:7f:34:26:b0:53:82:7a:c8:2e:d5:
                    9d:0b:2e:fc:32:56:9f:98:68:6f:72:ee:45:ec:68:
                    9b:9f:c3:f8:4e:93:c9:29:98:01:15:48:e0:62:d5:
                    c7:b5:d1:09:1d:76:47:9a:f9:d9:2c:38:c6:8d:0e:
                    d4:c7:99:95:d7:5c:4d:73:25:15:cb:18:ce:1e:73:
                    bc:1b:dc:3d:2d:e2:76:d4:46:69:e6:3c:29:e2:8a:
                    75:3c:13:19:ec:6a:d9:e0:3a:34:2a:fa:39:8a:db:
                    72:71:07:5e:5a:bc:b2:cb:83:cf:26:d7:a2:52:b3:
                    41:ef:d5:3b:5b:7b:e9:88:67:b7:50:ed:7f:c4:14:
                    5a:13:14:07:66:e6:22:d5:64:3a:e7:44:1f:09:7e:
                    62:a1:ff:77:93:fd:d9:05:2d:b3:c2:fe:f3:22:d3:
                    aa:4e:e3:e1:7d:e5:0d:fd:8c:6c:ce:a8:41:1f:0a:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:4B:D6:1C:56:DF:B1:31:A7:C8:6C:A1:AD:04:7C:4F:91:9C:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a10733-d057-4589-b7eb-5eb2abdb8fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1eb4::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:73:bd:2a:72:a5:d9:1e:32:92:4b:4a:28:e1:bf:34:fd:44:
         e1:d1:6e:77:01:7a:48:42:bd:00:89:83:eb:ed:61:59:33:32:
         96:e0:96:0f:47:ea:60:af:f5:d1:2c:55:f5:5f:9e:34:5c:db:
         70:3c:de:9e:ee:2c:61:28:d8:c6:f0:d2:94:79:29:69:3d:b5:
         2f:41:87:a6:e1:89:14:f5:05:2a:a8:18:ea:a0:56:fc:50:8b:
         1c:f9:13:37:88:73:ad:04:91:2f:80:88:a4:e4:7c:b6:52:07:
         8a:34:bd:dd:44:88:74:bc:17:e8:0d:47:6f:7f:97:e4:17:7f:
         9f:1b:50:ed:a6:33:77:75:cf:4b:89:17:28:91:a5:6b:f6:f7:
         e8:30:99:0e:d6:b0:ba:c3:7f:f2:6f:79:8f:9c:df:df:31:8d:
         99:37:b5:d2:82:31:8d:7c:ec:29:51:8a:81:a1:f4:81:60:b8:
         8d:11:92:03:91:85:24:cf:cf:32:90:5b:1f:39:47:95:96:6c:
         5c:d8:fc:61:9f:06:da:e3:10:23:85:d9:21:3c:9d:70:a7:d8:
         f5:07:69:42:6f:c3:cc:11:c1:1a:4d:0d:6e:ae:8e:fe:af:3b:
         69:5e:7a:af:dd:85:1a:91:35:e0:bb:03:15:e1:62:0b:8e:6b:
         c4:90:cf:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:00 2026 by rpki-client