Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a598250-39c2-4e3f-b44a-b30dc9f29c8d.roa
File:                     0a598250-39c2-4e3f-b44a-b30dc9f29c8d.roa (raw, json)
Hash identifier:          v3a761GjtWx47dRidLiqG+bLjk4Ne9mRLmv/6VgxGQk=
Subject key identifier:   20:FB:34:6B:CC:88:62:E8:94:13:B5:65:F5:0D:D0:31:6B:90:5B:BC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F8FF3F2489DEDC8BD211BEC7DD872E9876668F3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a598250-39c2-4e3f-b44a-b30dc9f29c8d.roa
Signing time:             Mon 04 May 2026 10:22:07 +0000
ROA not before:           Mon 04 May 2026 10:22:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:f3:f2:48:9d:ed:c8:bd:21:1b:ec:7d:d8:72:e9:87:66:68:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:22:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=e2cd75b7d4353fffeebbac8dc953c1dc6a2a0ada4206934f31854390a60e770a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:fc:e9:77:db:26:01:97:c9:73:e0:7f:ab:
                    50:70:81:20:ac:aa:73:d9:82:9e:54:b6:53:c1:d1:
                    10:c3:5f:43:9e:55:37:ef:a4:12:a1:38:8a:4f:e8:
                    fe:55:30:49:94:c2:8a:4e:9b:fb:42:85:c3:88:e0:
                    c8:97:c5:71:4d:cb:53:0a:c5:00:85:d1:80:78:e3:
                    24:04:3f:ff:86:02:33:a4:fd:56:c6:26:b3:ca:62:
                    50:3b:75:46:cd:f9:43:2c:9e:44:86:09:5b:cc:cc:
                    cc:04:03:b8:cd:d8:a1:c4:54:ff:2b:a8:c2:f8:3b:
                    0e:b1:eb:5c:45:87:eb:0d:43:ce:3b:79:77:46:df:
                    12:63:49:9f:f9:a0:eb:16:18:6e:71:01:b4:61:1c:
                    cc:5c:8f:60:ea:24:52:32:ab:da:c0:8c:f0:ef:3a:
                    80:1f:af:94:18:49:8e:1b:6d:d7:96:97:aa:49:bb:
                    b9:0b:5d:26:22:5d:ea:40:93:1d:f6:16:d4:70:2f:
                    f3:e5:0f:40:1d:4d:58:d8:bf:93:3d:4d:81:75:74:
                    47:b1:7d:49:7f:f6:d4:d0:66:e3:b4:5a:70:49:d9:
                    eb:81:f5:93:06:b3:2b:ff:3e:0c:a6:68:2f:d7:38:
                    18:e1:4c:d4:5c:cc:5f:33:68:f6:a0:54:f1:de:e5:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FB:34:6B:CC:88:62:E8:94:13:B5:65:F5:0D:D0:31:6B:90:5B:BC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a598250-39c2-4e3f-b44a-b30dc9f29c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:81:73:a2:89:e4:80:ea:4b:82:4b:2b:e2:b1:3a:05:5f:
         d2:5b:27:4b:a7:3f:88:3b:18:44:38:27:04:91:34:93:3c:b8:
         ad:77:d5:b2:ff:ec:45:c6:3f:18:e2:15:cd:76:69:cb:91:82:
         f9:b7:30:29:c8:4c:37:78:0b:8b:1f:11:d7:ac:ed:7e:ff:1d:
         9f:af:7d:d0:ad:c3:bb:ea:23:77:2e:36:95:05:b2:54:29:44:
         09:bc:54:56:9d:57:8f:49:09:8a:4f:58:11:7c:ec:7f:0f:75:
         61:0f:87:ad:15:b9:8b:a5:79:eb:c7:fc:24:5e:2f:16:e7:04:
         86:70:98:ea:fc:0c:92:23:46:8e:1d:fa:c6:c8:28:65:22:08:
         df:ea:af:88:df:b1:ab:63:15:71:f0:30:1d:97:c2:11:3d:70:
         22:44:7c:f7:a4:f8:43:1e:89:07:51:c3:4a:82:73:55:27:61:
         d1:cc:6a:3a:cd:f9:10:7d:8e:2f:6c:4e:2b:ae:9d:73:5a:9f:
         6f:00:71:46:b7:e2:0e:ff:49:da:cc:83:5b:24:93:18:0d:af:
         35:14:03:54:d4:c7:e9:58:8f:b4:72:44:94:e6:8a:98:02:ff:
         96:b2:92:4d:53:ad:47:a4:1e:37:8c:19:e3:b7:71:f3:8d:c8:
         23:86:8a:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 00:58:30 2026 by rpki-client