Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b04172c2-5f5b-4997-a7fc-07e951ee53e2.roa
File:                     b04172c2-5f5b-4997-a7fc-07e951ee53e2.roa (raw, json)
Hash identifier:          yyTe02Vqdjej0JdZhbIqDwz77+jsYM3rus/1H7VwHDU=
Subject key identifier:   8C:CD:8A:05:3E:FB:A3:EB:3A:AB:50:E7:E4:AF:04:E0:E8:C4:44:EE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5385B1E103C81A13DCE7D3FF8DFD8CF4658F1252
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b04172c2-5f5b-4997-a7fc-07e951ee53e2.roa
Signing time:             Thu 10 Sep 2026 02:30:33 +0000
ROA not before:           Thu 10 Sep 2026 02:30:33 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:85:b1:e1:03:c8:1a:13:dc:e7:d3:ff:8d:fd:8c:f4:65:8f:12:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 02:30:33 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=3781935b211837df70457867271d43f43049ef49fc6bd694cf92f7d694e8cbf6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:59:89:e8:93:93:54:a4:d9:d6:60:81:a9:
                    8d:2b:68:d9:af:39:a3:c6:88:bb:0d:0b:09:c6:90:
                    dc:6a:ee:23:79:d0:8f:22:ec:61:29:79:5d:4e:b3:
                    2c:31:d0:ab:da:ef:0d:1a:e4:99:49:6d:a5:1a:97:
                    78:aa:ba:36:c9:d6:8b:4f:92:53:28:f2:b6:5d:1a:
                    ae:bf:ed:0d:c5:00:6c:e5:27:f4:03:32:3f:3e:27:
                    a0:12:c3:82:99:6d:57:21:89:a2:fc:53:23:fe:ee:
                    9a:0c:8b:e0:28:d9:29:1f:0c:5b:31:9d:35:86:18:
                    98:6b:50:c2:86:6b:85:75:99:37:41:ef:29:1b:19:
                    e6:f6:47:e8:be:64:f3:8d:65:72:7a:0f:89:2f:2d:
                    99:f0:61:55:62:bd:13:99:ea:da:fe:78:44:6d:b9:
                    49:9e:7a:2d:93:c9:e9:cd:01:a8:0c:76:e3:b5:32:
                    94:f3:e5:c4:7e:9b:1b:a7:04:26:32:20:19:e5:0f:
                    04:22:f9:db:31:e7:21:8f:b1:3b:0b:71:c8:09:79:
                    43:d3:6e:e0:d6:88:c6:ed:9a:85:1d:b6:71:f9:2f:
                    73:36:c4:8f:77:5e:88:81:f7:72:df:4f:41:e2:9b:
                    cc:e7:45:21:83:c3:65:9b:5e:3f:31:79:16:91:f3:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:8A:05:3E:FB:A3:EB:3A:AB:50:E7:E4:AF:04:E0:E8:C4:44:EE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b04172c2-5f5b-4997-a7fc-07e951ee53e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1124::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:70:27:d8:b8:d2:fb:c4:f6:cc:2f:8b:f5:12:1f:6a:3c:38:
         7a:30:71:3f:55:eb:5d:72:da:e3:41:75:7a:36:dc:73:08:ff:
         f2:40:24:3a:fc:d0:56:ea:41:63:1a:74:b3:e8:e4:9b:b0:ae:
         c4:50:da:f6:87:f9:a2:0f:4c:6d:0c:98:9b:41:2f:68:d7:c7:
         be:8f:c1:a3:3b:98:d8:19:5f:33:46:62:3e:cf:d8:d5:8e:19:
         03:09:24:da:16:6c:fd:d7:31:4f:20:f4:1b:9b:03:60:00:f3:
         fd:58:3e:f5:5b:51:ca:42:e8:ae:41:58:81:59:02:c4:0d:21:
         3b:23:ca:dc:08:0c:ec:e3:c6:9c:ee:e2:27:49:9c:ed:fe:75:
         a3:05:c2:cc:1a:12:4c:4d:8b:a7:76:63:d5:f8:e1:20:04:93:
         48:c6:6b:5d:22:f2:d5:f3:9c:93:65:6e:f5:cd:38:fd:4d:ee:
         a5:ba:6e:cc:34:6a:9b:ad:56:a3:ba:c0:49:52:d9:de:5a:79:
         9f:bc:f5:db:54:79:b2:0a:84:89:9b:c1:c9:46:0e:f8:e6:2e:
         58:53:6b:8f:3d:a1:6e:f9:5c:5f:14:86:e6:76:66:cc:96:3a:
         aa:2a:dd:03:98:f6:3d:4c:71:c6:e5:af:f5:7d:98:a8:76:05:
         0b:30:8c:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:30 2026 by rpki-client