Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ee9a1c9-7546-491d-a038-c57e788ead65.roa
File:                     3ee9a1c9-7546-491d-a038-c57e788ead65.roa (raw, json)
Hash identifier:          MGaRMIWFAlI0Nn/do+GDqgS7c0GFI11HQU9c5PJlXRs=
Subject key identifier:   DE:3B:B0:4D:52:90:A8:CA:1B:6E:60:25:8B:84:18:3D:57:FB:5B:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1345315EE1DA1DAC7BC58A25A349685FF09C003A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ee9a1c9-7546-491d-a038-c57e788ead65.roa
Signing time:             Mon 04 May 2026 13:01:47 +0000
ROA not before:           Mon 04 May 2026 13:01:47 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ea4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:45:31:5e:e1:da:1d:ac:7b:c5:8a:25:a3:49:68:5f:f0:9c:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:01:47 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=64ab409cfbb38b50091c6939bbcab753476980cca7c3488a9f81b93f88942e9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:8f:60:13:3f:5b:45:ed:9e:ff:9c:a3:13:
                    2e:02:e6:ba:82:f8:ee:41:86:10:20:96:26:4e:bc:
                    7c:e5:9d:41:30:95:5d:c7:00:01:f9:4b:9f:42:b0:
                    5e:b7:87:2e:60:ab:e7:c7:3b:73:a8:73:09:f1:fb:
                    e8:9e:26:83:f8:37:d0:3e:9d:5b:f4:f6:56:50:cc:
                    7c:16:e0:00:23:1d:ad:e6:39:ed:42:51:8f:be:0b:
                    7e:bd:28:83:41:bb:d7:42:f8:1a:e2:db:02:f1:21:
                    4a:14:1e:63:23:d2:e9:f4:00:d6:97:51:d7:8d:2c:
                    27:d8:4b:4a:55:92:66:6f:ef:30:d2:d9:a6:a0:fd:
                    a3:19:13:28:ae:fc:d7:1c:2a:89:44:c1:68:94:7f:
                    a3:dc:a5:84:b7:93:4b:12:9c:12:c5:ae:b8:a0:56:
                    ee:d0:69:ed:06:80:e2:fa:f2:ce:1b:8c:4d:fa:2f:
                    2c:a4:6e:1d:86:7e:8a:1c:06:cb:e8:8d:f0:4b:3a:
                    4c:95:4e:13:86:ec:25:53:58:43:8f:3e:c3:f5:9d:
                    ba:72:77:0c:ce:c7:32:92:24:a9:92:6f:6d:cf:a5:
                    28:aa:33:79:62:cf:6b:74:f8:0a:cc:db:d2:36:12:
                    5e:1e:30:e0:d9:18:e1:b0:39:0a:37:e0:75:7c:4a:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3B:B0:4D:52:90:A8:CA:1B:6E:60:25:8B:84:18:3D:57:FB:5B:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ee9a1c9-7546-491d-a038-c57e788ead65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ea4::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:ce:56:54:49:2d:c5:11:7a:63:c3:4f:ab:88:d7:78:b2:
         05:fa:38:5a:d2:3d:02:2c:22:6a:3f:76:f5:b8:53:f9:28:eb:
         43:6e:7f:3f:39:b4:27:f0:92:86:37:28:b9:01:ec:f0:b0:3c:
         50:d5:1f:17:6e:24:f9:6a:4f:90:f5:ef:a9:89:5b:80:1b:f4:
         b5:49:3c:a0:ab:4d:df:a5:1b:cd:a5:75:16:89:74:f6:3d:e8:
         0f:40:a4:d7:c8:7a:f4:95:b7:33:c3:12:e3:aa:fa:96:6b:49:
         1d:68:85:81:ac:7f:75:3c:6f:51:9c:13:94:96:34:07:76:4c:
         07:e1:ee:1b:e9:83:b4:ce:63:22:7f:1b:a0:7c:b9:3f:e6:f0:
         7b:62:3e:bb:5a:1c:1c:ee:a3:ca:53:51:20:53:88:92:60:cc:
         e1:b7:1e:bf:2c:7b:41:0c:d8:f9:d3:9d:e0:e2:3b:9e:bb:67:
         b1:57:dc:04:a0:3c:04:4a:8e:58:fc:39:9b:73:18:1d:9e:f0:
         75:ce:97:7d:d3:04:a3:fc:03:6b:b3:4d:c9:f3:ec:8d:d8:ab:
         17:c2:e2:8c:15:b7:41:59:8b:ef:b0:2b:20:a9:14:9e:ef:98:
         44:8a:e5:61:0d:f4:ec:20:c7:0e:6a:a9:93:7c:e2:9e:e3:e6:
         08:fa:c8:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:04 2026 by rpki-client