Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa
File:                     4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa (raw, json)
Hash identifier:          nwRovQ048VBTgg8uvNw3q2pAMGdJakoOC/JJKaKsVq0=
Subject key identifier:   EF:34:EE:13:02:AD:B0:59:B5:91:63:A6:FA:20:26:E9:D3:D4:F7:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35703F44751136A39D4F37110CA285B7BD0EAB22
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa
Signing time:             Mon 04 May 2026 09:10:44 +0000
ROA not before:           Mon 04 May 2026 09:10:44 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c04::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:70:3f:44:75:11:36:a3:9d:4f:37:11:0c:a2:85:b7:bd:0e:ab:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 09:10:44 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=afa5849adebe1b6ed391c1f60bc85731d64558ee3d8f24060eef02fddc1f2d5c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ea:b9:2b:a1:d1:2b:a8:a2:7d:ef:d3:8b:c6:
                    18:1b:c8:f4:c5:c2:a8:6f:af:5a:3d:18:05:35:fc:
                    fc:47:ab:ba:ca:d4:28:e6:5c:06:16:3b:88:34:fb:
                    8d:4f:8f:ea:23:33:54:d6:c3:07:db:71:0e:ca:15:
                    45:ef:0c:f7:f7:b6:9b:db:1c:76:c7:b1:03:9c:c8:
                    03:83:af:a8:2a:f0:04:44:08:04:77:10:b4:88:12:
                    9b:81:01:f7:21:07:d4:3d:8d:11:07:16:f4:ab:f0:
                    1a:84:e5:12:05:b9:09:db:49:f1:b2:f5:f9:68:6c:
                    68:82:47:a1:34:4b:44:03:4d:33:bc:17:34:ad:44:
                    21:52:a4:bf:43:2b:e5:69:d6:de:e6:4d:35:52:d3:
                    c2:63:3d:51:41:2d:79:a9:cf:6c:f3:c9:1b:49:84:
                    f1:09:42:9b:ac:fc:9f:5f:fb:81:66:13:76:20:7e:
                    fb:56:34:93:5a:7b:d0:34:7d:5a:71:2a:57:b8:71:
                    17:ec:d5:f1:de:8a:40:33:66:d1:aa:ae:73:ea:ce:
                    e8:37:a8:82:03:57:e4:92:3f:ac:40:aa:7a:e6:c2:
                    74:39:2c:e5:e4:87:e4:3b:96:db:8c:b7:12:93:58:
                    dd:da:e8:b3:6e:2d:81:78:ff:37:36:f2:da:ce:0e:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:EE:13:02:AD:B0:59:B5:91:63:A6:FA:20:26:E9:D3:D4:F7:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c04::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:ab:ae:e3:10:a2:a0:3a:33:8b:ff:ef:4d:db:52:74:8c:a5:
         97:28:43:c8:60:5c:93:31:3c:17:47:48:fa:05:62:a7:85:fa:
         6c:26:e0:da:b6:1f:e1:61:af:36:b2:c2:21:3f:0b:76:6c:9b:
         57:15:d9:e4:34:59:a4:18:44:41:b3:4e:22:53:76:e2:40:fa:
         28:9a:b5:df:60:e7:cf:db:d8:c1:c6:78:7b:5e:ce:cc:63:0c:
         bb:81:30:a0:d1:21:ac:9c:1d:85:fc:db:03:9b:76:23:50:fd:
         5e:71:e3:1a:09:7b:c0:67:f4:9b:4c:24:4a:e8:c1:f4:f4:bb:
         e1:d1:fe:bb:e6:85:0a:7c:df:9e:01:d4:86:a0:09:fb:c8:99:
         6a:a3:9c:e0:2f:47:83:41:ed:42:a8:91:79:ae:76:20:f2:2c:
         ef:9a:66:1c:96:e4:9d:76:11:c5:7b:1a:01:4c:d2:a6:31:7f:
         f8:17:66:24:fa:14:7d:a5:ef:a0:3f:38:4d:b6:ef:13:61:32:
         0d:62:49:2f:44:8d:1d:ed:4b:09:c1:ad:0c:5e:05:7a:96:9a:
         48:0c:db:b5:c1:6c:ab:0a:71:86:f8:60:de:13:24:b8:f2:a5:
         cf:a5:ba:5e:f9:ab:eb:ca:32:6a:a4:bf:a2:70:58:d5:c8:30:
         ef:31:3d:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:00 2026 by rpki-client