Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a8107fd-56da-4cfb-81d2-cef94838fe1f.roa
File:                     8a8107fd-56da-4cfb-81d2-cef94838fe1f.roa (raw, json)
Hash identifier:          zbIwdHtcGQNiB0koGjeYe0wk5HT8yZ+pSrMjboLnuGo=
Subject key identifier:   4C:C2:52:DF:5A:C1:00:19:07:6F:A2:E9:D9:FA:55:34:AB:FA:44:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5112934FEEAB6C96DC982133354ECFBDFD874293
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a8107fd-56da-4cfb-81d2-cef94838fe1f.roa
Signing time:             Mon 22 Jun 2026 01:10:11 +0000
ROA not before:           Mon 22 Jun 2026 01:10:11 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:12:93:4f:ee:ab:6c:96:dc:98:21:33:35:4e:cf:bd:fd:87:42:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:10:11 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=3e2d98c8eace2a226fd2b5927ca12c152adde95eb4d39ed15afcb240f358e51d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:b9:7b:6b:4d:15:91:8f:9f:45:9a:f4:8a:
                    df:4a:c1:a5:9b:76:84:a9:3d:78:7e:10:00:c0:6c:
                    0f:8f:07:bf:18:47:b6:70:e1:f6:c8:15:41:3d:9e:
                    b2:77:aa:aa:1a:11:78:75:d6:1f:f8:9b:e9:20:a7:
                    06:b5:b0:d3:26:e7:ac:69:90:b4:de:48:28:32:79:
                    2b:f9:ca:ea:26:2b:8f:a4:51:80:2c:10:cb:d5:89:
                    88:f3:36:a1:4e:5e:8a:ba:1e:5b:16:0a:19:38:72:
                    b5:96:7e:69:2c:f4:59:d4:a4:16:38:28:9b:e7:a2:
                    99:7d:98:83:fb:db:fc:a7:2b:bb:85:b9:b2:b1:2e:
                    6d:f0:2e:b4:9d:b5:b2:3e:ea:68:51:c6:3b:16:11:
                    03:7f:ba:1e:02:b6:69:b0:6a:32:84:2c:a8:43:e9:
                    c9:63:02:76:97:40:f0:09:41:8f:b0:df:7d:3c:57:
                    02:b7:aa:72:fa:83:0a:bf:5d:46:ff:11:81:09:1c:
                    4a:00:64:19:01:7c:e7:b1:4e:c0:29:da:31:2e:c2:
                    34:c5:cb:c5:9a:ba:f3:d0:0c:88:8e:11:ab:31:5e:
                    31:b3:7e:3b:89:7f:50:ea:00:32:38:47:7b:e1:9b:
                    fb:47:40:8a:89:95:a2:86:19:52:e7:81:35:87:bf:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C2:52:DF:5A:C1:00:19:07:6F:A2:E9:D9:FA:55:34:AB:FA:44:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a8107fd-56da-4cfb-81d2-cef94838fe1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:99:aa:98:16:0e:a7:b0:3f:06:a1:f1:a3:75:f3:33:aa:
         41:01:35:6c:8d:ea:a4:ba:35:b9:6b:8c:fb:be:dd:5f:d4:0f:
         3a:81:7c:ef:6f:02:00:83:ce:1d:1b:37:d5:c3:01:88:17:f3:
         1c:9e:52:45:7a:65:0b:5c:e1:66:c5:1a:e6:1c:25:ff:a4:cb:
         58:b9:6e:d0:d3:85:85:c7:e9:ea:88:65:bf:f1:d3:8a:48:7e:
         17:69:fb:d8:3a:47:24:09:b3:bc:f8:6f:5a:fc:ed:cc:80:14:
         37:e6:72:17:2e:d5:50:88:a8:1a:8d:99:a7:0c:36:3d:8e:1f:
         5c:8d:43:9e:56:35:6e:7a:75:a6:ef:c8:c0:aa:cd:25:f9:60:
         0b:0e:31:95:3b:d3:be:ed:8a:47:19:7f:f4:49:03:5e:a4:c4:
         3a:11:8b:c0:c6:a0:75:0f:f4:ef:58:66:74:98:9f:a3:df:79:
         74:83:e4:1d:aa:5b:91:0c:31:a8:54:33:37:73:df:91:98:1d:
         30:b1:80:65:12:b7:e6:13:50:5d:fd:5b:b8:19:e8:e0:cd:b4:
         d0:48:30:59:cf:26:4c:83:d5:33:d8:36:4e:f0:c6:95:b9:c2:
         c6:5c:cb:dd:e1:27:29:c0:89:b3:a2:cb:a2:4c:73:b0:cf:bd:
         a6:99:b6:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:01:14 2026 by rpki-client