Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47052a11-64f7-493e-ae3f-dc6b450363c2.roa
File:                     47052a11-64f7-493e-ae3f-dc6b450363c2.roa (raw, json)
Hash identifier:          x7p0fXd59TXJTxTpgHmUfU8HKlxWCYBnQrp17EO1djo=
Subject key identifier:   E6:A8:CB:76:8E:69:DB:F6:69:9A:EB:DB:27:0D:49:C9:00:1F:4D:EC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B3F0BBBF2B80BCA0CFB705B046FD17B28E072A3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47052a11-64f7-493e-ae3f-dc6b450363c2.roa
Signing time:             Mon 04 May 2026 08:41:43 +0000
ROA not before:           Mon 04 May 2026 08:41:43 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2acc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3f:0b:bb:f2:b8:0b:ca:0c:fb:70:5b:04:6f:d1:7b:28:e0:72:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:41:43 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=2aee99dda7cbae8308750f06dc2a5e3176a02457bac223111fe6dc7662046b05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:73:83:8f:64:39:8b:36:33:17:06:79:2c:
                    27:9f:1f:1d:2f:54:ed:19:16:5a:8c:63:2d:84:2f:
                    de:66:9b:2b:e4:a0:41:e1:ac:05:bb:09:da:af:5b:
                    99:fa:da:74:3f:0d:7b:2d:1a:eb:3a:8f:de:d5:64:
                    53:8c:1b:ca:d2:f5:30:99:56:5d:26:94:ea:28:0c:
                    d2:43:8f:ee:fb:aa:06:10:d0:00:b9:62:0b:06:1b:
                    f6:5f:cd:8b:6b:07:08:6d:9a:65:63:38:1c:f9:45:
                    d0:58:92:b4:fe:95:76:0e:18:c6:64:67:66:84:4c:
                    e9:7c:b0:db:39:7b:02:b7:86:fc:ae:6c:80:81:65:
                    9e:66:bd:79:a4:72:5b:24:98:3a:ee:34:f0:69:79:
                    cc:a4:11:ba:f6:07:c3:f2:22:5f:eb:48:b4:a4:6a:
                    86:58:f8:74:00:e3:6b:fc:1b:23:af:d3:85:18:67:
                    7d:70:c2:72:08:f6:fc:95:87:7b:46:99:32:a1:2c:
                    cd:ac:19:75:8b:20:98:62:d5:09:30:86:65:8a:25:
                    c3:38:7e:0f:d3:f8:1e:59:89:7e:2f:1f:5e:c9:8f:
                    6c:b0:d3:d8:69:a7:8f:58:1a:50:4a:24:ca:ea:bf:
                    06:1e:82:86:6f:9e:a6:ac:ff:2b:3e:4d:71:da:e2:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:CB:76:8E:69:DB:F6:69:9A:EB:DB:27:0D:49:C9:00:1F:4D:EC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47052a11-64f7-493e-ae3f-dc6b450363c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2acc::/46

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:df:d2:49:05:23:e5:ea:75:9f:c1:b5:c2:1a:c3:b1:8e:
         e6:c2:4e:46:21:83:1a:13:f4:a5:ee:d0:a7:8b:e6:09:0c:d8:
         8c:61:44:a1:59:67:8f:fb:b8:c5:f3:25:6c:f1:f3:20:85:1b:
         68:a8:b3:0c:59:df:d3:02:ca:73:a3:2c:e1:bd:c6:c7:0e:ac:
         aa:aa:22:a5:36:92:3d:1b:f5:25:cf:9b:33:28:29:80:7f:3c:
         5c:8f:37:d3:3b:f7:ba:75:15:db:ff:75:da:13:51:5e:9c:b9:
         51:bc:c7:2f:9f:42:e6:84:d5:db:69:33:38:87:47:26:c2:b3:
         49:44:93:86:20:d6:b9:c3:e8:64:ee:03:20:d4:32:d2:7c:1b:
         4c:45:d6:c5:47:cb:55:19:26:90:97:7c:da:f3:64:8c:ea:4c:
         8d:72:fd:73:03:33:a1:3a:a4:79:e0:e0:aa:1d:a2:9c:29:b7:
         dd:3e:29:aa:24:28:b1:0d:1f:0f:a2:14:76:3c:04:02:c5:f2:
         11:61:1a:bb:15:ef:01:2c:61:b0:5f:3b:66:89:65:ad:9a:b0:
         de:66:00:4a:a2:7b:cf:0b:43:c5:05:2b:6d:a9:b2:8f:eb:af:
         11:02:2b:1b:6c:51:82:22:c8:84:9b:53:c1:f7:39:66:d6:4d:
         a4:17:7e:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:19:33 2026 by rpki-client