Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/607f3b45-0a53-478f-9145-3e6d21f99cc4.roa
File:                     607f3b45-0a53-478f-9145-3e6d21f99cc4.roa (raw, json)
Hash identifier:          JC1tovgYpnQcQP4xn+wSlq++AMRdk3ZVS9r9D1aXBOM=
Subject key identifier:   B5:85:62:E1:BE:F2:20:34:F4:E3:DE:DE:E7:F4:15:94:8A:F5:1A:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2BF81E8B332F7ADA7A1D2F374CE82FC10A364716
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/607f3b45-0a53-478f-9145-3e6d21f99cc4.roa
Signing time:             Thu 10 Sep 2026 01:00:08 +0000
ROA not before:           Thu 10 Sep 2026 01:00:08 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10cd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f8:1e:8b:33:2f:7a:da:7a:1d:2f:37:4c:e8:2f:c1:0a:36:47:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:00:08 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=4c9e0032bbfeab5a603c7d87169e0febc7e9ae45de2f0e97bbd1b23587c264ee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:01:92:d1:c1:70:6c:67:88:bf:a3:62:7a:
                    5d:eb:c8:ca:68:f4:36:66:c2:36:a0:9e:fc:96:0c:
                    e2:ef:2b:40:25:21:9b:99:36:25:07:52:52:db:29:
                    15:53:0f:e5:e3:58:3b:fc:9c:ed:fe:1b:72:32:ac:
                    11:99:28:d0:39:1a:45:cb:bb:e0:09:06:5f:2f:05:
                    51:29:57:8a:2b:ef:26:c7:00:2e:42:52:63:dd:3f:
                    7c:07:79:93:f6:b3:ef:30:18:31:97:59:0e:7e:3b:
                    38:75:71:72:a7:8b:4d:56:5b:9e:ed:97:93:89:69:
                    7e:5b:80:d1:bf:4d:54:5f:33:a7:60:74:35:7f:51:
                    d9:79:17:bd:c1:de:bb:9b:6a:0e:93:88:1a:8e:58:
                    1f:13:64:76:e6:5e:51:bb:24:0d:36:8b:d9:39:4c:
                    c8:8b:a1:64:05:b5:1e:4b:96:c9:71:92:08:f5:8c:
                    98:94:4c:9b:2e:08:0f:63:6b:84:b7:36:ec:03:28:
                    70:11:3f:8d:78:e0:6e:cb:cf:41:1f:d9:74:3d:d7:
                    8b:d8:7b:69:5e:e4:c8:8a:ca:57:aa:53:a2:fd:0a:
                    70:4f:36:2e:b5:f1:2d:b0:11:a2:cf:48:ab:ad:46:
                    04:9e:bc:8d:cc:b3:e7:5a:9a:fd:5b:8a:f6:e0:82:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:62:E1:BE:F2:20:34:F4:E3:DE:DE:E7:F4:15:94:8A:F5:1A:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/607f3b45-0a53-478f-9145-3e6d21f99cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10cd::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:a8:cb:17:5b:54:ee:04:c4:33:3e:62:9c:5f:8f:ff:eb:
         98:0d:9f:b6:bb:68:6a:65:80:0d:ad:fb:b0:87:a2:d8:58:f3:
         c8:37:85:83:7c:6b:d9:b9:ca:40:2d:19:81:45:d5:c6:6e:7a:
         7e:49:47:3c:fd:fa:8e:6e:59:f7:dd:de:f0:5f:ef:db:80:eb:
         48:37:16:d9:11:08:c4:44:97:01:d9:86:bf:82:25:09:e6:b6:
         e3:88:26:04:54:ee:5f:1d:26:8d:b2:98:12:42:9b:3b:f0:6d:
         44:76:3c:5e:22:83:57:79:2d:79:1c:15:05:bf:34:05:96:17:
         01:c6:3b:d1:2b:79:27:57:1b:d0:fb:0d:77:10:3c:c5:4c:ac:
         59:79:dc:7e:84:11:62:72:e5:8e:f6:16:da:70:ee:ba:19:25:
         74:6c:d2:5c:19:dc:c2:fe:9d:93:de:f6:3e:bb:33:84:be:10:
         a3:53:7a:90:3e:22:f5:19:21:4d:b3:df:f4:0e:60:59:21:af:
         eb:b4:ef:66:5f:01:f5:0b:69:fe:a9:d8:65:bc:fd:59:15:72:
         08:a4:4d:41:dd:3e:31:a4:3f:0a:f6:4b:f2:3d:65:35:b9:79:
         52:6e:0b:b1:1c:cc:38:aa:03:fa:17:63:8c:b1:fc:42:57:20:
         43:50:6d:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:00 2026 by rpki-client