Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d964c43-fdbf-4c33-95e7-c730b9bbb7d8.roa
File:                     6d964c43-fdbf-4c33-95e7-c730b9bbb7d8.roa (raw, json)
Hash identifier:          WmmKG4aZOeqwucoSF5eM1MIjcuKsKPJk+x7lj7i9hqY=
Subject key identifier:   89:32:EF:1A:D3:71:32:8E:9C:A0:54:E5:42:7B:83:0E:46:66:B0:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5FA25DD3A2C44681C0CD430F0033EE415BF0464F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d964c43-fdbf-4c33-95e7-c730b9bbb7d8.roa
Signing time:             Fri 04 Sep 2026 00:00:12 +0000
ROA not before:           Fri 04 Sep 2026 00:00:12 +0000
ROA not after:            Thu 03 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a2:5d:d3:a2:c4:46:81:c0:cd:43:0f:00:33:ee:41:5b:f0:46:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep  4 00:00:12 2026 GMT
            Not After : Dec  3 23:59:59 2026 GMT
        Subject: serialNumber=7d8c8feec39e17b40ca8f14f7d9d859cd567b059bf3ef3cf0e5f4394276363fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:88:fe:24:e0:91:64:f8:03:ec:58:c8:dc:
                    e0:bb:1f:89:a6:56:26:65:4c:c1:60:2e:02:9b:69:
                    66:09:5f:08:01:e9:1f:0f:80:e7:90:92:25:1a:a8:
                    ae:ad:72:e5:08:52:a4:dd:99:eb:45:10:95:d0:0c:
                    c5:ee:87:6a:f6:02:6f:5d:76:77:a4:eb:1b:8d:40:
                    fe:8a:75:fd:b2:46:12:83:62:53:9c:0e:6f:e1:56:
                    92:79:00:e8:37:c2:c6:c4:92:49:9d:10:65:9b:4d:
                    df:7e:e8:0d:5d:a9:0f:88:57:f6:a6:1f:7e:36:de:
                    f0:2d:5e:0b:78:2e:b8:76:c7:f3:0f:24:7a:06:f1:
                    11:fc:31:ca:fc:d9:58:41:01:ed:d2:18:43:c6:27:
                    6f:b9:9d:8e:85:c0:bd:8d:b8:25:95:5c:fc:5b:9b:
                    15:e9:b2:50:b9:41:02:16:07:de:7a:90:52:f8:c5:
                    bf:c4:83:59:5d:c7:7d:f1:89:40:10:ea:fd:84:b8:
                    78:00:db:94:cd:dd:1d:6b:10:b2:95:f9:f7:4e:9f:
                    14:0b:42:ff:61:2e:34:ac:d2:c7:5d:a7:39:5e:79:
                    53:60:eb:e6:88:d6:a3:75:91:f8:c6:14:d3:11:66:
                    bb:8f:c4:c2:83:ce:07:0b:21:7e:32:76:e2:27:da:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:EF:1A:D3:71:32:8E:9C:A0:54:E5:42:7B:83:0E:46:66:B0:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d964c43-fdbf-4c33-95e7-c730b9bbb7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1133::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:40:43:11:2f:9b:9f:b7:76:9a:72:84:0b:7e:cf:d6:ec:2b:
         0a:02:05:50:31:ac:7a:d0:8e:30:59:d9:de:d1:40:0e:06:0b:
         e3:dc:1b:a1:19:1d:9a:8e:49:1a:24:b7:26:c0:04:60:a9:6e:
         f2:ae:52:96:82:95:a3:04:c2:e3:d7:4e:63:e3:09:91:f3:7e:
         15:48:3c:68:4d:2a:12:14:a9:dc:8f:1b:85:1d:64:34:0c:b0:
         66:ed:2a:0d:fb:cf:9f:93:00:eb:30:d4:87:ed:c6:b0:04:6e:
         95:b9:1e:7b:07:d0:ed:6d:e8:03:62:86:d1:f0:e0:68:ba:f4:
         ed:42:90:d6:34:c6:06:26:bd:bc:62:52:33:0c:69:8a:c2:c6:
         ed:41:a6:03:22:a1:fa:73:d2:90:d4:96:e9:07:02:b1:38:25:
         ff:e0:7f:98:b1:91:63:c2:15:f8:00:79:07:9d:e9:01:94:51:
         7a:6c:21:6a:11:7d:64:76:07:ac:9f:70:20:fe:d4:66:e4:9e:
         e5:83:fc:6c:60:6a:fb:fd:29:10:38:4c:26:57:8c:59:5f:6f:
         54:b1:fb:5c:03:14:fc:87:55:8d:85:03:8b:5c:d1:c9:23:df:
         64:6d:44:3f:b2:98:0e:2b:a6:20:87:33:02:9c:c6:96:dc:c3:
         96:10:6a:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:01:49 2026 by rpki-client