Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24a16d7f-882c-4b73-ab68-b6cb8f733364.roa
File:                     24a16d7f-882c-4b73-ab68-b6cb8f733364.roa (raw, json)
Hash identifier:          hIE6dJboZn4pVGhaNIgMChaUJyBz7rAPL3vpVaGFWBo=
Subject key identifier:   B9:7D:33:36:FC:2C:53:CF:D9:46:C4:72:BF:B6:CE:51:9C:51:64:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B0D2D0515B4C4BA0503D879127E2D5970461FA8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24a16d7f-882c-4b73-ab68-b6cb8f733364.roa
Signing time:             Mon 04 May 2026 07:40:55 +0000
ROA not before:           Mon 04 May 2026 07:40:55 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36ec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:2d:05:15:b4:c4:ba:05:03:d8:79:12:7e:2d:59:70:46:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:40:55 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=ebac6683028c078592648a20be37cfbf964a27a6f2bf2fd2ecd1634d1437ea0e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:de:4f:1a:ef:03:95:4c:f8:e6:25:20:46:
                    4a:98:84:94:3d:1b:9f:66:3c:ce:b2:8e:bc:46:3f:
                    a3:61:7b:b1:39:83:2a:93:37:78:3b:bb:40:0d:f8:
                    56:9d:6f:43:0e:ac:b2:6f:ef:a7:ce:34:eb:5b:17:
                    ac:df:b0:e7:fe:22:26:12:be:f2:be:b9:00:cb:96:
                    2a:57:d8:c6:69:04:bc:96:13:52:18:91:24:44:5f:
                    23:31:b0:52:ba:6d:eb:66:d8:60:f5:67:1f:a4:3f:
                    14:70:67:8b:e4:ed:4a:cb:dc:b7:4b:f5:54:f8:6e:
                    cb:5a:f1:41:28:84:e4:c1:cf:55:74:7d:df:e8:1a:
                    d3:16:a3:a4:0b:77:bc:eb:83:b0:eb:74:86:86:2a:
                    88:a8:43:54:eb:64:50:78:d2:be:99:68:cd:5a:ea:
                    09:93:3a:22:8d:d5:9f:5f:61:01:24:24:38:7b:12:
                    86:a7:f9:df:44:11:81:d1:f1:32:f7:55:fd:12:ac:
                    57:93:8d:5c:5f:03:00:37:f2:68:4f:7d:72:f6:2f:
                    5b:ae:c0:57:c8:f1:de:04:7e:55:b9:86:57:d5:f0:
                    f0:15:3c:ef:ff:f7:e1:87:f3:92:89:04:13:cb:ba:
                    be:33:85:6d:e7:9a:30:5e:86:15:fb:b8:cf:56:e3:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7D:33:36:FC:2C:53:CF:D9:46:C4:72:BF:B6:CE:51:9C:51:64:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24a16d7f-882c-4b73-ab68-b6cb8f733364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36ec::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:da:b1:dc:0d:9d:1b:ad:c6:a3:27:f5:51:83:36:14:46:
         28:6c:01:a6:68:91:63:dd:eb:c3:41:e8:9c:a7:f1:a5:bc:89:
         e9:c0:1b:5f:e6:92:fd:86:25:a8:2b:04:d3:bb:cd:b2:15:4d:
         0c:c2:75:2f:43:db:91:3c:b2:ef:f4:19:2b:9b:00:28:f7:f5:
         8e:5e:6a:88:06:d6:12:ef:d5:2c:c8:67:68:0f:44:85:0b:ec:
         03:3e:d6:5c:ec:fa:83:03:99:42:88:97:50:6e:90:77:76:a2:
         5f:0a:92:60:93:bd:cc:6b:b3:95:fa:56:a8:6e:2d:bc:c4:9c:
         67:b2:88:bf:c9:cb:6a:30:a7:9d:18:dc:2b:3f:d4:34:38:5a:
         92:c3:07:49:b5:b6:0e:90:14:52:1b:61:4b:61:72:89:a2:25:
         49:24:66:9d:ec:cd:f1:8e:0e:c1:49:21:b1:c1:3e:d0:b1:49:
         5b:45:4b:13:44:c3:82:4b:da:78:c8:a7:30:57:b6:fa:48:a2:
         da:0e:41:da:93:22:a0:e2:58:60:86:68:c3:22:9f:fd:62:19:
         63:ef:11:ec:8f:41:58:23:b4:2b:3d:b9:40:a6:bf:9e:d3:87:
         88:94:dd:e0:58:a2:50:e3:13:f9:90:cc:79:1c:51:0f:2d:59:
         5a:be:8a:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:01:05 2026 by rpki-client