Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d6e1926-a698-423d-a05b-6e41a13961fb.roa
File:                     1d6e1926-a698-423d-a05b-6e41a13961fb.roa (raw, json)
Hash identifier:          GPSnqYuw9h9RezOVGIRRXfwkHVRpnF/VC9hpEgvcJzE=
Subject key identifier:   22:6A:63:C0:4C:7D:35:57:19:D8:5B:C7:D8:AB:E1:B2:3C:7B:A6:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B1FB16128D8936ACADAE4646A2B79A7AFE84418
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d6e1926-a698-423d-a05b-6e41a13961fb.roa
Signing time:             Mon 22 Jun 2026 01:40:06 +0000
ROA not before:           Mon 22 Jun 2026 01:40:06 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1063::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1f:b1:61:28:d8:93:6a:ca:da:e4:64:6a:2b:79:a7:af:e8:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:40:06 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=e970b91dd6365306252ef9292dcccfd951a3c28995b240255e01e8333a44f16a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:02:71:0e:74:84:9b:6b:04:3c:de:01:03:
                    12:cf:d9:9b:ee:2a:be:91:fd:b0:4f:66:8b:45:50:
                    99:52:fc:e5:d8:eb:8d:43:1e:ed:26:f5:aa:f3:80:
                    91:aa:4d:f4:cb:b9:52:92:58:f3:f9:a9:bd:9c:b0:
                    1c:08:dd:94:00:6e:c4:9e:a4:5e:1f:6f:58:0a:2c:
                    74:7f:4a:76:f6:47:33:f3:a3:27:ce:9c:fa:6c:85:
                    ad:27:37:75:96:6f:d7:2d:56:b6:be:f7:ff:3c:4d:
                    74:ee:48:7d:82:e5:54:80:69:02:4f:4f:54:33:43:
                    f6:e7:43:b8:90:25:71:b1:9f:9c:0c:2f:01:c8:eb:
                    8e:d4:10:3d:45:00:48:52:d2:14:dc:09:86:a3:d0:
                    b7:3d:9a:13:80:f9:25:c4:9b:e2:e2:a9:49:2c:19:
                    e7:6b:c2:f9:6c:1f:ff:9e:ff:06:84:5a:b6:ef:a9:
                    91:34:9b:7e:4e:e7:7e:b7:e2:b1:60:f0:4e:78:e1:
                    ca:20:c1:a7:cb:b3:2b:1c:27:67:50:66:4a:ac:fa:
                    b3:f1:b1:ec:aa:bc:e4:c8:89:60:3a:89:8e:99:8d:
                    7d:e8:38:f3:7b:f8:17:62:5a:15:16:30:ab:b3:6b:
                    11:f9:aa:23:a5:07:41:4d:1b:f5:c6:40:ed:8d:30:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:63:C0:4C:7D:35:57:19:D8:5B:C7:D8:AB:E1:B2:3C:7B:A6:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1d6e1926-a698-423d-a05b-6e41a13961fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1063::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:72:be:91:fc:44:22:f8:ac:d6:79:24:b5:e2:7a:6a:0b:
         ba:bd:f5:fb:56:ba:41:1a:f3:bc:10:2e:d4:cb:38:6e:6a:eb:
         32:14:4a:6c:6e:32:55:cc:75:54:cb:dd:2e:9f:e6:40:cf:ef:
         86:01:b3:89:67:d4:6d:5f:91:b5:db:9c:5a:22:32:4b:75:fd:
         ce:64:4f:1e:4b:ba:09:f0:41:d9:6b:28:2a:81:d5:27:16:8f:
         1b:54:d9:76:2c:69:89:08:60:87:3e:d8:17:48:83:db:6a:42:
         ac:58:17:25:7e:48:42:b2:10:10:d4:70:d1:21:5e:f4:05:bd:
         e4:82:08:12:64:73:51:99:f6:51:11:7f:0b:21:e0:45:ec:dc:
         2e:ed:d2:e2:1b:71:64:85:fb:23:2c:0a:ed:84:b0:fb:80:16:
         71:75:68:c0:24:ae:af:2b:1c:a1:eb:a2:5b:cd:5a:4c:fe:cf:
         8b:77:f0:f1:74:85:e3:44:e6:b5:ef:ac:ae:c8:bf:f9:b1:80:
         d3:14:30:af:3e:ec:01:84:d6:1d:bf:95:45:76:9f:cd:40:ce:
         73:0d:cf:db:37:d3:44:17:a0:8a:57:a7:a6:06:7c:33:af:4d:
         f0:3c:3b:df:f5:8e:3f:22:fe:26:80:07:94:f4:c0:0a:05:0d:
         0d:40:9f:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:04:53 2026 by rpki-client