Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/54487a76-21af-4c40-adaa-1be4e14a7fd8.roa
File:                     54487a76-21af-4c40-adaa-1be4e14a7fd8.roa (raw, json)
Hash identifier:          w98FqYXLLBOnYORdkZurB/c+RjbGn/aOyi7uT1ML3H0=
Subject key identifier:   2A:B9:A7:20:4A:1A:43:BB:A4:56:F7:E7:46:74:E2:C3:4B:1D:14:34
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57746D37C61D895B25FE843972F765E919F40DA8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/54487a76-21af-4c40-adaa-1be4e14a7fd8.roa
Signing time:             Mon 04 May 2026 09:21:48 +0000
ROA not before:           Mon 04 May 2026 09:21:48 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33d0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:74:6d:37:c6:1d:89:5b:25:fe:84:39:72:f7:65:e9:19:f4:0d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 09:21:48 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3ca4fabe2a4deab32525d465585f562c4bc5fafcb5ff61b5dc8adfdfed0f0e47, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:92:76:b5:31:35:33:a4:81:3c:82:ea:bc:
                    9a:a0:85:f1:4e:fb:ca:84:56:4a:9e:72:1b:f3:72:
                    6f:da:55:2a:40:b2:c8:5b:55:ad:eb:a5:9d:51:8f:
                    67:28:fd:2d:77:78:68:c0:3b:83:fe:d1:5b:bc:db:
                    3b:07:6a:25:df:fc:59:d5:b5:49:f9:30:e9:b4:20:
                    d9:87:4e:c8:34:67:9c:61:35:01:56:7d:8e:42:da:
                    ec:ad:97:2a:91:8b:dd:2c:c4:a0:ec:75:22:cf:c2:
                    5a:36:44:fb:32:f1:1b:60:36:0e:7e:3d:31:8a:95:
                    cf:70:dd:8f:16:3b:a4:c3:36:62:75:42:f7:fa:7a:
                    af:62:74:64:2c:4e:47:b9:16:5e:a8:22:a7:25:1a:
                    6a:70:7a:2c:b6:9b:43:99:3a:4f:ba:2d:48:f3:67:
                    60:ae:39:cd:57:a5:27:60:e7:d6:dc:51:4e:f2:8e:
                    f0:f5:09:f2:e4:79:47:5d:96:47:9b:1a:63:e6:26:
                    3e:3a:cb:0b:a5:a0:7b:4c:55:94:98:93:60:df:82:
                    88:3c:0d:4f:b0:a8:12:fd:22:b0:76:ae:8e:55:a1:
                    8f:86:82:72:51:c2:bb:9a:f9:60:22:6d:f8:b1:91:
                    ee:98:bc:6a:cf:cc:bd:53:e1:91:7a:87:b9:38:f6:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:A7:20:4A:1A:43:BB:A4:56:F7:E7:46:74:E2:C3:4B:1D:14:34
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/54487a76-21af-4c40-adaa-1be4e14a7fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33d0::/46

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:fd:51:32:32:d7:14:17:80:1b:d0:91:eb:68:56:e1:bb:
         d9:53:78:24:31:76:20:cf:b6:ae:bc:41:18:4e:94:53:c4:c3:
         64:1d:95:8e:31:37:27:f1:47:68:2a:aa:89:01:eb:fc:46:8c:
         83:14:e0:bc:b7:61:ca:79:62:02:6e:d1:4a:9b:40:17:12:34:
         8f:be:ee:63:dc:7e:d9:c2:9b:b6:d9:51:5e:a6:2f:f1:60:3f:
         fc:04:e6:95:ef:a3:6a:82:04:a8:fb:b2:09:56:63:26:6b:c0:
         3f:3e:10:ea:cb:71:8b:54:f5:b3:ea:51:8a:23:fa:fc:22:ef:
         7d:bf:01:08:fa:d9:85:44:f5:e2:99:3c:4b:10:ab:b4:05:7e:
         e0:18:66:f4:3c:f1:c9:2f:83:94:f5:96:c0:bb:85:b7:45:59:
         1a:fa:57:6c:32:5c:05:f6:22:84:56:c9:e6:66:2c:ad:9e:ae:
         cb:c0:1f:15:42:c8:d1:dd:91:2f:a1:f1:9d:30:52:45:85:2e:
         56:43:6e:ef:4a:17:10:d0:1b:a3:e2:5b:3c:83:93:a0:d9:11:
         0e:d1:ff:54:6e:78:10:8e:39:94:7d:a2:b4:e3:02:80:00:1c:
         72:94:5b:ea:32:55:29:0e:df:2c:7a:58:54:14:e8:a9:7f:99:
         e0:0c:2d:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:40 2026 by rpki-client