Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
File:                     3f7530a4-02dd-42e0-817b-19dba92efbe8.roa (raw, json)
Hash identifier:          jDaFU1mBnSzZdWeBh8bRuNVBpY9cKTs+eySAVgTC6Fw=
Subject key identifier:   49:EF:2E:81:09:26:B0:EC:ED:94:60:A0:13:2B:FC:BF:17:6A:AA:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       675B1004691D55C8EA6653A6A97D7BE1852540F2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
Signing time:             Mon 04 May 2026 08:00:10 +0000
ROA not before:           Mon 04 May 2026 08:00:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fcc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5b:10:04:69:1d:55:c8:ea:66:53:a6:a9:7d:7b:e1:85:25:40:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:00:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=1ece30fd815016e00585adc31e49bd8afbc2a5ffb15e20ba339f3e205d61ebca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:c2:36:ee:33:36:b2:5e:39:f0:99:13:da:
                    97:38:78:77:b3:87:d1:11:51:1a:51:a2:cb:53:1a:
                    bc:ea:d7:85:88:2c:59:e2:f4:f3:f7:25:af:93:09:
                    74:b6:54:a5:6f:c7:08:7d:fb:cc:56:c0:cf:36:a9:
                    49:2d:92:e8:28:fd:c7:28:d2:9c:c6:c4:51:63:96:
                    9d:42:69:08:b2:08:28:d6:fc:32:74:37:e4:b9:65:
                    cc:6c:f4:48:b0:f4:32:f7:f6:d0:46:10:76:aa:9d:
                    cb:e5:01:5c:52:87:16:fc:9a:6c:e9:f8:7a:cf:6e:
                    e9:e0:ae:e5:fd:48:8d:f6:3e:79:83:c0:1f:d4:63:
                    ad:06:01:cb:d2:95:47:f2:bf:1b:bf:bd:2e:b6:f3:
                    6e:81:85:b2:85:67:58:33:d9:8a:5c:84:29:dc:0b:
                    10:ea:41:4c:bc:46:a4:3d:36:be:58:12:13:4b:ad:
                    ce:db:a5:25:5d:65:89:f6:7f:6c:e5:0a:f7:95:2e:
                    54:ea:8a:44:af:44:10:a8:89:9a:ef:e1:ad:9a:6c:
                    6f:c8:b3:5d:03:18:1b:00:f2:bb:bf:b8:3d:56:7f:
                    6f:1f:4a:4d:bc:72:06:09:39:5b:b7:3f:16:13:c4:
                    1c:b1:8d:db:ba:56:f1:0f:55:52:ac:76:23:fc:39:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:2E:81:09:26:B0:EC:ED:94:60:A0:13:2B:FC:BF:17:6A:AA:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fcc::/47

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:32:c4:cb:62:73:62:b8:99:55:73:93:84:a6:5e:df:1c:
         7a:2b:6b:de:0c:50:6e:30:af:2b:cb:8f:ad:af:ab:c7:5c:a8:
         84:b5:bf:e6:ee:1b:2e:13:b3:be:1b:d9:36:8d:61:7f:66:62:
         1a:72:13:49:a6:88:88:4b:03:2a:bd:a1:64:a3:cc:1b:b0:98:
         2c:90:e8:37:ed:df:2e:2a:4e:cf:70:7d:d7:a6:04:0d:74:e2:
         85:74:4e:57:51:22:aa:b5:1e:1b:3a:6b:fb:a2:9d:2d:f7:3e:
         43:0b:c5:7f:89:18:d8:f8:de:86:54:28:1a:4e:03:4d:89:69:
         7b:92:65:aa:04:a4:c4:a3:9b:91:47:64:b0:27:8d:0e:03:27:
         4b:d5:00:9f:22:d5:7e:28:6a:60:d2:27:d2:32:94:a7:71:b8:
         86:df:48:b2:f0:2c:5d:3d:d5:66:72:f9:87:fb:98:c4:c2:7e:
         a4:49:c5:8d:ec:fb:51:e9:1a:ec:25:80:eb:ea:eb:04:61:01:
         32:96:d7:41:73:b8:87:db:1a:06:88:56:eb:c2:26:ae:19:a2:
         98:8e:08:20:dc:1b:d8:30:dd:72:78:7b:64:82:e9:57:9a:90:
         82:55:1f:a5:96:8a:d7:5e:2a:67:a8:88:52:3b:82:46:3d:1f:
         6e:ce:74:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:47 2026 by rpki-client