Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08547d4c-0c35-4b99-834e-d0582628ee7e.roa
File:                     08547d4c-0c35-4b99-834e-d0582628ee7e.roa (raw, json)
Hash identifier:          dgPtByTOaXj8fjaA+BxYCH2eak+0Vai6mzMTWrEsIdg=
Subject key identifier:   54:2E:DA:CD:17:01:4A:6F:0A:DB:8D:3B:F1:59:03:8B:48:13:A4:C2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7C8304C2F91E59F998C4912A25F70CB70A5701B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08547d4c-0c35-4b99-834e-d0582628ee7e.roa
Signing time:             Mon 04 May 2026 10:41:06 +0000
ROA not before:           Mon 04 May 2026 10:41:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3928::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:04:c2:f9:1e:59:f9:98:c4:91:2a:25:f7:0c:b7:0a:57:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:41:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=f409148b6c1717b650bce7006d6caa7fabc966054e4d3b0adb2702e71bc469b6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:6a:30:09:72:ad:3f:75:2d:ec:d7:23:24:
                    52:6e:e9:0e:69:50:71:c9:f1:53:c7:6d:27:06:cd:
                    f3:16:b1:c3:8e:31:79:3c:f6:1c:f4:d0:28:ce:fb:
                    9b:ed:7f:0a:2c:16:b9:8a:03:dd:18:93:66:71:e2:
                    cf:92:34:9d:55:ef:88:33:c9:e2:fb:04:12:7f:e7:
                    1e:49:2b:80:7e:36:f1:8c:e7:80:a3:45:75:47:e1:
                    ad:1f:80:6b:32:5f:02:f3:e5:b6:92:0d:ba:44:2d:
                    68:65:67:a3:2e:f1:98:57:3a:04:a9:f4:fb:88:61:
                    ca:de:27:cb:02:b0:03:f1:e2:c1:89:a4:a6:bf:ab:
                    91:be:fc:86:c1:41:67:b4:e1:1e:b1:1f:64:44:a7:
                    a0:71:02:53:06:bd:54:87:e3:6d:79:db:65:1e:42:
                    61:89:c5:8e:de:ba:3c:34:85:af:0c:20:04:74:d8:
                    23:93:94:46:a0:30:a9:ab:83:6d:9a:be:cf:f9:83:
                    51:72:fa:37:a1:43:af:5b:50:64:3c:6b:0e:25:e7:
                    89:38:cf:47:b5:41:1e:e3:3f:6a:f6:6f:82:2d:12:
                    73:b5:c9:e4:1a:25:1f:85:04:f1:5c:46:4d:5d:90:
                    f4:46:1a:f7:10:a8:49:19:b7:16:39:ac:bf:18:4b:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:DA:CD:17:01:4A:6F:0A:DB:8D:3B:F1:59:03:8B:48:13:A4:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08547d4c-0c35-4b99-834e-d0582628ee7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3928::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:be:5f:07:ea:f1:54:e2:9d:37:8c:a1:12:bc:23:04:40:e7:
         08:77:24:e1:ee:ac:9b:ad:3f:06:8e:71:5a:94:9e:7d:d7:5d:
         01:99:9e:e2:d1:a6:bd:bb:b9:0c:92:10:c1:fc:53:56:62:a5:
         eb:26:8b:1a:48:b4:4e:54:18:bc:c3:85:e3:32:fa:dc:eb:fb:
         6e:1a:37:4c:b9:3c:cc:c8:3c:57:3c:bf:15:15:03:32:60:d9:
         82:ad:00:8b:49:f7:50:cd:51:9c:cf:43:fd:f7:2a:ac:e7:4f:
         5b:5e:67:9d:2d:84:6b:71:e0:bc:24:be:06:f9:ba:ad:9b:c3:
         6d:05:e5:aa:06:4f:2e:f1:af:55:43:b8:40:e9:0d:07:5f:5f:
         f6:86:58:cf:fc:1b:96:38:21:b8:c9:1c:35:92:de:50:7b:8c:
         3a:58:b2:6c:14:29:56:e9:ce:f0:f9:32:e6:7f:84:f7:44:23:
         f7:93:66:09:16:16:c5:c1:47:a4:49:74:66:81:39:71:aa:95:
         24:3a:4b:0f:a0:98:42:62:92:99:d6:c7:94:14:43:ae:25:16:
         26:82:26:71:7d:1e:48:ad:c5:7f:2a:c6:a1:93:07:f2:08:fe:
         8a:88:c0:b8:45:6f:fd:f7:cf:43:49:7c:74:32:6b:47:fc:b7:
         36:b6:41:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:30:51 2026 by rpki-client