Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0d1f2406-5c37-45eb-9d1e-669c9574ae51.roa
File:                     0d1f2406-5c37-45eb-9d1e-669c9574ae51.roa (raw, json)
Hash identifier:          +SVEq5WS4Jb3ioAlDJLvr0SIf9YqRT0sWCmdeIseUCo=
Subject key identifier:   5D:21:82:EB:DB:03:9E:80:8F:B7:62:58:E2:5E:4D:D8:18:60:B1:3B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2FC7B697CA6CDEF8F483F888C214AAB4E5508ABB
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0d1f2406-5c37-45eb-9d1e-669c9574ae51.roa
Signing time:             Mon 27 Apr 2026 00:20:07 +0000
ROA not before:           Mon 27 Apr 2026 00:20:07 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2606:8140:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:b6:97:ca:6c:de:f8:f4:83:f8:88:c2:14:aa:b4:e5:50:8a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Apr 27 00:20:07 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=60f55e463d69ccb5adc764f81c0b1d4581eec86034d0bbabd6cc44e78f1b9a00, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:e3:30:d5:8e:52:6e:3a:f6:8c:d7:79:36:
                    47:7c:21:80:9b:52:98:9f:c9:2f:6d:57:8c:ba:d6:
                    cd:05:7e:0d:69:30:74:76:7f:ee:4b:b0:c7:d7:b4:
                    5d:08:59:a0:a3:84:c9:9c:84:b6:86:52:0a:c5:b9:
                    e8:28:6a:a0:e2:9d:4d:2c:af:9d:fe:25:bc:39:ac:
                    b7:70:9f:c7:62:03:21:29:8d:3f:e5:e7:6d:37:d5:
                    dc:83:4d:79:f7:69:79:a8:8f:86:23:38:9b:43:7c:
                    5f:e6:90:bf:cf:4b:07:ff:85:8e:97:0f:15:a3:56:
                    42:67:a4:45:51:c7:84:86:3c:35:03:f2:3a:d8:fb:
                    a3:2f:6b:46:eb:0c:ed:fd:c6:d6:75:b5:d8:ee:b0:
                    1b:d3:33:71:ff:ab:2f:b9:b0:d5:f5:28:4c:35:01:
                    d0:b8:d3:72:40:64:96:3a:81:99:1a:a0:cd:b3:48:
                    56:0f:a7:0b:e1:92:1b:39:cb:0f:c0:44:9e:64:fe:
                    95:73:5e:5e:6e:bd:2b:48:2a:6a:86:29:43:7c:85:
                    1b:08:b1:b0:ae:b2:69:f8:54:d6:dd:73:1d:e4:03:
                    94:e5:a0:f8:bc:09:45:e0:ae:e5:b8:3f:20:c7:f4:
                    40:f4:8a:47:b1:56:b5:a9:7d:e6:eb:18:db:60:8b:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:21:82:EB:DB:03:9E:80:8F:B7:62:58:E2:5E:4D:D8:18:60:B1:3B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0d1f2406-5c37-45eb-9d1e-669c9574ae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:d7:51:f0:5f:43:1f:65:1a:f6:d2:d1:16:62:6f:b7:ea:
         78:b7:92:cb:52:12:5f:18:00:47:45:50:dd:3b:df:fd:39:26:
         da:32:0e:ff:00:32:ec:26:3a:45:d3:0f:df:89:0e:0f:24:93:
         40:99:76:fd:90:f5:75:c0:7d:58:cf:b5:e6:dc:6a:16:a7:b4:
         ad:72:c2:5e:1c:b1:31:26:06:21:a9:15:4b:e2:af:43:9d:1c:
         5d:ea:94:43:a3:e3:61:aa:84:61:58:4f:a8:17:4d:65:51:49:
         72:fe:91:3a:5c:c0:a4:4d:90:9d:89:62:9f:a8:19:cd:58:87:
         cd:39:4c:d0:68:1e:dc:c1:95:18:1e:f9:12:67:bf:99:8c:9e:
         55:2d:6e:d9:1e:9a:9c:98:ae:6c:0d:b4:ce:07:7c:71:72:43:
         48:9e:a5:f8:36:af:88:cc:0d:2f:7f:f2:12:f4:f8:b2:f6:02:
         a3:b9:a9:3c:44:53:d0:ca:20:77:fd:ba:0b:08:70:82:2c:f0:
         ff:8b:c8:95:ca:bc:b5:92:91:0f:7f:5b:a6:3d:cf:80:52:5f:
         6e:ab:63:50:49:48:14:00:79:06:ea:8d:b8:fd:35:36:cc:99:
         24:87:3a:ef:fb:4f:d0:a6:df:89:fd:f4:43:9d:a7:5e:5b:38:
         fc:f8:07:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 23:34:30 2026 by rpki-client