Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cda38ab-84e2-45ce-950c-d724145e02bc.roa
File:                     2cda38ab-84e2-45ce-950c-d724145e02bc.roa (raw, json)
Hash identifier:          4b3YMHeTiaabvttJFmKAPIpM9tWJ+mbKcm6RWjRMDL4=
Subject key identifier:   13:23:E9:31:E5:CB:57:06:FE:2F:83:F6:67:1E:0C:3D:2E:B7:A7:D5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E934AFF953D6ABE7EF4FBB6E6CB3889CA0C83F9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cda38ab-84e2-45ce-950c-d724145e02bc.roa
Signing time:             Mon 04 May 2026 02:31:48 +0000
ROA not before:           Mon 04 May 2026 02:31:48 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2920::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:4a:ff:95:3d:6a:be:7e:f4:fb:b6:e6:cb:38:89:ca:0c:83:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 02:31:48 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=99e44464b54314dfc7a39d35f855fcdaa0d023037638973d90426635dc0aa1a5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:84:e3:15:6f:cd:f8:ac:72:6f:07:09:7c:
                    3d:1e:31:81:0e:cf:29:b7:57:d4:ed:b5:0b:11:32:
                    ab:1b:07:fb:e3:39:69:cb:a4:8f:25:a4:66:78:f7:
                    aa:3f:df:99:f1:b3:f6:2a:8d:37:f0:fd:02:49:cb:
                    13:86:62:01:26:a9:7b:75:65:86:ff:68:9c:6a:94:
                    0f:97:74:cb:73:1a:fd:89:e3:7a:24:2f:13:1c:f8:
                    98:d2:38:00:b2:3c:af:84:ca:17:86:84:ab:b7:28:
                    25:b1:67:19:f7:74:13:3e:1f:56:04:df:ee:a4:b0:
                    cf:d9:27:cd:b9:d8:f4:57:ae:07:67:f5:4b:52:9d:
                    cd:b9:9e:e7:3c:f3:03:96:b4:6e:8e:83:89:eb:2a:
                    7b:33:00:91:e0:4c:3a:8b:dd:eb:3c:8e:46:5a:42:
                    c3:ad:3c:9f:eb:c7:57:2c:01:79:1e:cc:21:c5:7a:
                    b2:2c:19:dc:0e:ba:99:1b:92:b4:8b:b0:87:ce:82:
                    c7:c8:af:3c:51:88:cd:1f:2b:87:e3:87:48:9b:18:
                    1b:d5:1d:c1:51:72:7d:be:bd:03:7f:d6:d2:24:55:
                    c0:a9:57:23:e8:1a:59:e4:41:ae:e9:54:3a:44:39:
                    8c:d5:40:cc:26:06:82:a3:ce:48:f3:26:f0:00:e3:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:E9:31:E5:CB:57:06:FE:2F:83:F6:67:1E:0C:3D:2E:B7:A7:D5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cda38ab-84e2-45ce-950c-d724145e02bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2920::/46

    Signature Algorithm: sha256WithRSAEncryption
         be:d6:7c:9e:f2:97:ef:b5:15:0f:87:bb:2b:d6:0e:4a:f9:93:
         a4:76:2f:7f:29:4a:bb:7d:3a:c0:28:a3:81:b5:83:4b:22:a6:
         b3:5e:fb:c1:12:77:67:75:38:76:bc:ed:01:45:0b:23:9e:13:
         1b:70:f5:3d:0b:db:0a:14:fc:8c:4b:18:83:e2:1f:b4:f3:7f:
         f2:2c:37:c5:95:b7:dc:72:ea:a1:1a:c6:4d:0e:80:ba:7f:9a:
         6c:8f:97:91:a3:b9:b8:09:0a:dc:84:f1:f8:e9:5c:5f:f0:a8:
         03:dd:fc:61:d0:c9:30:4e:a5:14:6a:e5:9d:80:d9:65:b1:78:
         70:9a:8f:cd:bf:12:10:1e:6e:51:79:59:4d:f2:8b:d0:c2:e3:
         6a:ed:30:e0:9d:3a:ed:aa:f4:95:9e:c7:ba:d1:12:b9:60:7c:
         38:70:53:cc:1f:00:f3:4d:09:4e:23:da:f6:ed:50:fb:67:72:
         22:67:a4:8c:20:c1:26:50:ee:27:03:a2:dd:ba:d9:98:0b:b5:
         28:c8:58:35:48:bb:d2:31:bf:a0:28:0e:4d:41:bc:74:8f:4e:
         59:ab:e7:25:53:26:49:9f:ba:a0:ed:f3:db:e8:82:e3:92:a9:
         cb:e2:ca:1e:57:5b:0b:99:a9:5a:b6:f8:da:2c:42:e3:f5:d0:
         55:1a:cc:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:33:25 2026 by rpki-client