Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2941fff4-ea30-4145-836b-3e5279d26ce4.roa
File:                     2941fff4-ea30-4145-836b-3e5279d26ce4.roa (raw, json)
Hash identifier:          fEBMwxWATW9Sx5NE04Ck/ZtjSXBrgxLeBbYxVTPctUY=
Subject key identifier:   DA:BC:C6:BE:0F:6F:0D:EB:27:FF:7E:7D:CF:4B:0C:9D:12:2B:45:DB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4892C9D47FDF578D3A6DD7844F12C9DF63DB6406
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2941fff4-ea30-4145-836b-3e5279d26ce4.roa
Signing time:             Mon 04 May 2026 03:20:06 +0000
ROA not before:           Mon 04 May 2026 03:20:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29f0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:92:c9:d4:7f:df:57:8d:3a:6d:d7:84:4f:12:c9:df:63:db:64:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:20:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=5b42de5c593d60542c252e1c7be12f7093887a91753f1584c833ef54e329d110, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:b7:d5:f2:b8:5d:35:35:c8:00:0c:9c:22:
                    28:74:2a:ab:c0:63:f4:4f:39:6c:37:be:3f:fb:a0:
                    bc:9c:eb:f2:0f:38:0f:3b:5a:1a:4d:3f:66:dd:93:
                    1d:02:3a:ac:8f:bd:04:3c:29:0d:78:d3:9a:e7:f3:
                    1b:3b:b1:81:cd:3e:94:e5:7e:10:32:66:a3:8b:68:
                    13:91:d6:9b:21:7c:71:b1:1e:cf:3b:0a:a2:1e:d1:
                    10:96:19:7c:b2:c4:dd:26:b3:01:14:30:89:44:d2:
                    79:4d:f0:ea:34:66:df:02:4f:cb:98:82:07:a5:0c:
                    af:bf:7f:04:48:6c:88:bf:d9:e2:b2:f3:6f:33:b5:
                    12:e2:c3:b2:13:a2:84:59:4a:4e:f7:08:d3:11:a5:
                    c9:09:2d:28:03:e1:9e:6b:42:8c:1f:c6:1f:92:8d:
                    fc:64:1b:9d:7f:20:7a:f6:db:28:41:9e:0b:92:52:
                    a4:77:78:40:2c:ae:ae:70:2d:4e:77:21:43:67:fc:
                    25:a4:d4:12:40:8a:de:9d:26:2a:c4:9f:38:bf:ef:
                    f1:c9:7e:e7:a5:cf:45:85:09:5e:59:a5:98:ab:d3:
                    38:b3:85:27:2e:9a:77:87:81:4d:12:cb:0b:a6:f4:
                    c5:3d:f8:ab:f8:76:5a:52:3a:ea:57:1f:a3:c5:a6:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:C6:BE:0F:6F:0D:EB:27:FF:7E:7D:CF:4B:0C:9D:12:2B:45:DB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2941fff4-ea30-4145-836b-3e5279d26ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29f0::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:06:2a:8c:7f:62:f1:71:8b:90:86:57:2a:fd:11:ba:52:64:
         a1:22:c2:58:00:bb:94:a7:ce:a7:4b:08:93:60:b4:fb:6d:d2:
         e8:21:73:d4:5d:06:07:11:47:0e:69:e7:f4:b2:d9:48:2a:c7:
         65:17:2f:fa:12:69:95:ea:48:a0:af:37:42:ca:34:57:a8:cd:
         b5:4c:28:47:56:6e:b3:61:82:8f:1b:a2:14:55:fe:e7:0e:26:
         d7:8f:1c:5a:37:8d:ab:e0:64:f6:e0:48:c3:f9:0b:c7:26:26:
         03:d1:3c:50:16:ed:6d:55:12:85:e5:b6:78:bd:d1:f0:7a:13:
         05:4f:58:1b:4b:82:d5:1b:37:a4:13:66:fb:b4:c5:bf:04:66:
         cf:94:fe:b2:13:9d:b5:f8:d0:b8:ab:15:9a:1f:c2:d5:e4:67:
         68:cd:24:08:2b:a2:b7:7f:a8:26:1c:20:5c:7c:5b:9d:9c:ef:
         36:15:d0:fe:5b:44:53:0d:be:23:93:e3:14:58:a8:42:70:90:
         6a:3c:eb:f5:74:3a:e6:9f:5f:6f:60:47:60:36:9f:4d:f9:9c:
         90:1b:3c:05:88:f7:22:14:e5:b1:3a:57:eb:9f:1d:76:0a:ca:
         e5:23:d9:41:ec:ed:9b:db:1d:02:97:b6:33:ac:17:cf:83:0c:
         ad:9d:d5:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:31:25 2026 by rpki-client