Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/352917bb-af20-4524-adf6-2d30a5ed5858.roa
File:                     352917bb-af20-4524-adf6-2d30a5ed5858.roa (raw, json)
Hash identifier:          7QDrI4OMf2keVAoMbDY4IRA2HDVGMGuvuDo3bDGcFrs=
Subject key identifier:   EC:F7:87:E8:5B:0F:0C:29:90:71:A3:F5:55:84:9F:76:40:96:6A:9A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       53B469251D84160C074760F0F3705F0FACAA1A9C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/352917bb-af20-4524-adf6-2d30a5ed5858.roa
Signing time:             Mon 04 May 2026 04:41:44 +0000
ROA not before:           Mon 04 May 2026 04:41:44 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aa0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b4:69:25:1d:84:16:0c:07:47:60:f0:f3:70:5f:0f:ac:aa:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 04:41:44 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=bf65f97e74cbb9ad8df61d76b34eb25ba6bf3cbf9355a1c4952e79628d9afa2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:c9:28:a8:f4:81:85:5f:19:99:84:a3:e4:
                    38:92:11:0e:c5:6a:c9:60:39:37:68:13:f4:eb:8e:
                    02:44:7b:1d:6d:63:e2:f6:80:c6:be:c7:a0:28:d2:
                    fe:ce:c6:1d:41:9d:91:0e:58:1e:1a:c0:68:ea:56:
                    0c:e1:e1:5d:20:28:db:be:88:29:aa:90:b4:af:bc:
                    c2:3c:d3:d6:57:5b:b6:15:5e:ea:9a:53:23:69:b7:
                    a8:48:36:5f:9c:52:cb:cf:10:d8:47:f9:9b:53:3c:
                    f5:ac:16:3f:62:22:be:d9:cf:91:b6:3f:88:18:0e:
                    16:7f:8c:bb:1e:f6:c1:4a:0a:b7:92:b8:7c:5d:b4:
                    5c:1a:d7:ce:0d:13:ec:be:c9:37:25:a1:ed:51:65:
                    e9:09:2a:b6:55:4c:5f:1b:cd:c3:22:b6:69:24:4c:
                    a6:64:2d:1b:a9:e5:54:fc:b3:b3:8f:01:11:ed:86:
                    59:bf:b8:d4:18:f3:13:91:86:33:b3:e1:ca:27:43:
                    94:5d:cc:77:46:7a:3b:42:f5:44:2c:05:c0:ee:fc:
                    1c:cc:5a:c0:0c:88:09:35:d9:6e:2b:cf:c2:18:93:
                    82:0e:7d:42:c3:5e:85:61:48:be:18:e1:0c:47:e2:
                    a6:a1:34:13:19:bd:58:de:64:c3:89:a4:71:ca:6c:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F7:87:E8:5B:0F:0C:29:90:71:A3:F5:55:84:9F:76:40:96:6A:9A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/352917bb-af20-4524-adf6-2d30a5ed5858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aa0::/43

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:9d:b7:18:4f:70:6e:66:9b:bf:5d:bc:1e:6a:4a:87:5f:
         76:a2:dc:48:8c:ab:ce:83:8d:ae:06:d5:0e:73:27:48:89:ba:
         58:df:74:55:d7:15:25:76:f4:0e:c6:f5:d3:db:6e:e5:a3:6b:
         1a:86:59:35:c8:e0:18:3f:94:1d:9e:02:0e:ff:ca:63:8b:16:
         0f:a4:40:61:00:63:3b:82:60:e2:fe:35:78:f1:97:35:fa:42:
         5c:a3:f1:5d:cd:24:c1:f8:57:11:68:b2:39:70:fb:51:e1:aa:
         ab:3a:97:ed:a5:3f:2d:56:34:12:d4:10:60:4a:7d:e1:84:16:
         66:7c:a9:b4:7c:8d:34:1c:66:89:f0:ed:55:72:91:af:7c:63:
         83:f0:ab:8e:02:ad:fc:6e:b8:43:78:05:99:af:b4:06:81:c4:
         1d:b7:c3:93:e1:ce:31:16:ea:7d:0a:81:88:16:b1:32:29:e5:
         6a:d7:4d:cd:9f:5e:a0:af:19:d0:dd:07:23:72:49:5f:cf:c1:
         f6:07:5b:3f:60:0b:b9:c2:b0:3a:78:4c:99:a3:7d:ff:c8:97:
         b8:4b:0b:24:23:33:a5:04:95:c4:d5:ab:ab:f9:07:3f:00:a5:
         fd:6f:88:fe:12:37:7d:0f:ff:12:d6:6d:46:71:7b:95:9e:71:
         51:d6:90:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:14 2026 by rpki-client