Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a449889-1163-457a-be23-e2a4e0ffa56b.roa
File:                     2a449889-1163-457a-be23-e2a4e0ffa56b.roa (raw, json)
Hash identifier:          mk15yNn1KIhs7JKppa9sk+EozenxtbrXm3HdvK6Aqvc=
Subject key identifier:   3B:C4:0A:3A:36:12:AC:F5:AE:AE:76:D3:EF:E4:52:9C:CE:90:82:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       307CC8EE28BCD6CC8327D3BDB6F5D30DE95A1A2B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a449889-1163-457a-be23-e2a4e0ffa56b.roa
Signing time:             Thu 10 Sep 2026 01:50:57 +0000
ROA not before:           Thu 10 Sep 2026 01:50:57 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7c:c8:ee:28:bc:d6:cc:83:27:d3:bd:b6:f5:d3:0d:e9:5a:1a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:50:57 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=33b1c3461216268a4a61e70ee205f793d7b6327fa3f49e0a159ee553fd0e8308, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:ca:6b:af:82:4b:46:77:5d:aa:e5:7a:fb:
                    49:03:c7:8d:26:4e:fa:d3:da:c6:f0:a6:a1:36:db:
                    35:a4:2c:04:d5:77:e7:29:df:3f:72:ff:27:f9:c8:
                    79:eb:ec:05:3a:94:25:9f:93:be:c9:24:04:46:25:
                    4a:56:84:55:ce:14:2e:06:10:7d:94:a6:c1:da:69:
                    e6:7c:3c:57:8f:2e:0c:24:6e:8a:4e:3e:54:9d:3c:
                    f7:f3:08:1a:7f:50:13:df:fd:a0:66:2f:ea:c9:95:
                    54:c2:f2:b7:7e:7e:61:b7:f8:ad:65:de:ea:ad:d3:
                    38:b9:8a:21:32:81:29:27:af:bf:be:7b:13:cf:7a:
                    5e:4e:29:6c:c7:ec:73:34:b6:a5:59:36:23:60:f7:
                    75:b9:43:ac:cb:e1:39:b7:b4:fe:f1:44:05:7d:22:
                    1d:2b:b5:cf:00:9e:5e:c3:53:0d:73:53:bb:f5:85:
                    15:58:7b:0d:e9:62:3c:89:6c:d8:84:e5:4c:12:59:
                    26:e8:ab:ba:23:8c:49:31:7a:f3:ae:f3:6d:6a:d0:
                    19:59:b0:52:d4:fa:a6:f2:20:75:71:50:74:9e:7a:
                    19:38:50:3e:c0:74:20:7d:24:1f:67:1f:23:ba:4d:
                    38:c2:2b:55:f6:6e:09:ad:e4:f9:e5:22:de:16:e8:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:0A:3A:36:12:AC:F5:AE:AE:76:D3:EF:E4:52:9C:CE:90:82:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a449889-1163-457a-be23-e2a4e0ffa56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e02::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:23:a4:da:23:71:a9:b7:3f:03:9e:15:46:e8:8a:58:1f:
         80:f9:31:18:d7:f8:ed:a6:db:a4:b9:2e:8d:19:b5:17:83:0b:
         71:86:db:30:15:99:d0:97:ae:a4:37:32:91:3a:67:38:94:ab:
         25:85:13:37:d9:51:78:27:f2:40:fb:73:9c:a2:ce:23:5c:28:
         0d:e0:c0:84:0b:af:bf:e9:71:8d:01:1f:0f:d6:0c:34:d2:2a:
         ac:27:e8:fe:38:8f:b6:e6:69:43:49:93:49:4f:3c:23:d9:6d:
         8f:9b:e4:01:ae:e8:e7:50:68:5e:21:d5:26:2f:5e:17:57:1b:
         83:e5:eb:60:40:1d:8a:83:36:a1:34:99:42:65:90:c4:22:ff:
         5a:89:04:ae:f6:56:d1:5f:0d:b2:4f:a2:7e:ef:37:62:f3:97:
         c5:fd:d4:2d:ff:3e:fb:68:11:53:b1:6e:4f:32:2d:79:ec:ae:
         8d:97:41:be:12:ef:76:3b:f9:e4:0b:6e:73:fc:3f:14:67:1e:
         25:00:82:8c:80:62:ec:e6:fc:82:2b:66:85:1a:37:d8:ae:87:
         bb:69:c6:11:ca:bb:04:91:81:00:35:29:27:76:e9:45:10:9a:
         a6:4d:b6:dd:bd:a8:bc:5e:fc:b1:d8:f9:e4:96:cd:05:bb:40:
         cb:fa:5b:89
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMHzI7ii81syDJ9O9tvXTDelaGiswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDE1MDU3WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzM2IxYzM0NjEyMTYyNjhhNGE2MWU3MGVlMjA1Zjc5M2Q3
YjYzMjdmYTNmNDllMGExNTllZTU1M2ZkMGU4MzA4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3Fcprr4JLRnddquV6+0kDx40mTvrT2sbwpqE22zWkLATV
d+cp3z9y/yf5yHnr7AU6lCWfk77JJARGJUpWhFXOFC4GEH2UpsHaaeZ8PFePLgwk
bopOPlSdPPfzCBp/UBPf/aBmL+rJlVTC8rd+fmG3+K1l3uqt0zi5iiEygSknr7++
exPPel5OKWzH7HM0tqVZNiNg93W5Q6zL4Tm3tP7xRAV9Ih0rtc8Anl7DUw1zU7v1
hRVYew3pYjyJbNiE5UwSWSboq7ojjEkxevOu821q0BlZsFLU+qbyIHVxUHSeehk4
UD7AdCB9JB9nHyO6TTjCK1X2bgmt5PnlIt4W6BalAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUO8QKOjYSrPWurnbT7+RSnM6QgkwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzJhNDQ5ODg5LTExNjMtNDU3YS1iZTIzLWUyYTRlMGZmYTU2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHgIwDQYJKoZIhvcNAQELBQADggEBAG4nI6TaI3Gptz8DnhVG6IpY
H4D5MRjX+O2m26S5Lo0ZtReDC3GG2zAVmdCXrqQ3MpE6ZziUqyWFEzfZUXgn8kD7
c5yiziNcKA3gwIQLr7/pcY0BHw/WDDTSKqwn6P44j7bmaUNJk0lPPCPZbY+b5AGu
6OdQaF4h1SYvXhdXG4Pl62BAHYqDNqE0mUJlkMQi/1qJBK72VtFfDbJPon7vN2Lz
l8X91C3/PvtoEVOxbk8yLXnsro2XQb4S73Y7+eQLbnP8PxRnHiUAgoyAYuzm/IIr
ZoUaN9iuh7tpxhHKuwSRgQA1KSd26UUQmqZNtt29qLxe/LHY+eSWzQW7QMv6W4k=
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:45:35 2026 by rpki-client