Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa
File:                     56ececec-04c8-4cfb-83f5-1dc00105cc66.roa (raw, json)
Hash identifier:          eH6vj9aW5rdQDcgg+bavr4wZ0kwvPu7SvE3ZIldKA68=
Subject key identifier:   E8:8C:F0:99:A4:7E:C3:F4:5D:13:29:46:7D:D2:25:C0:52:DC:CA:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6FE040F0892C0399D32BF7829D42861075FC1182
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa
Signing time:             Mon 04 May 2026 13:10:55 +0000
ROA not before:           Mon 04 May 2026 13:10:55 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e0:40:f0:89:2c:03:99:d3:2b:f7:82:9d:42:86:10:75:fc:11:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:10:55 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=e9b6bb9b447a36fae9a7826885ba47361107ca7e3ed95bb15b77f6d174051592, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:72:83:da:df:53:90:92:fd:88:0a:de:9c:
                    7b:09:b6:63:68:f6:14:36:69:28:95:95:83:f2:99:
                    0b:3c:66:db:be:1e:14:61:03:37:3c:a1:1f:fd:b3:
                    c9:80:99:ec:0a:60:df:b4:c0:ee:d4:64:65:63:ee:
                    ab:36:d1:74:df:5a:24:4f:e3:ef:d6:d8:dd:2c:83:
                    f6:30:5d:3c:70:33:7b:4f:6d:70:49:18:be:b4:d2:
                    ff:fd:c8:1c:d0:1c:80:ef:f7:99:44:ea:b5:77:df:
                    dd:5d:14:55:33:56:8a:c5:42:7f:e5:d4:9f:96:73:
                    83:e8:16:7e:05:79:49:91:4a:9b:4c:48:3c:4f:2e:
                    fd:93:3f:e4:38:31:87:95:a7:a8:c1:26:9d:8e:df:
                    d9:77:23:e3:be:22:cc:45:43:c0:54:ef:dc:14:40:
                    c5:ee:43:a0:1a:7c:c9:29:7a:bb:2a:5c:b8:0e:da:
                    ae:52:fa:9b:53:27:e5:9b:a3:3c:a2:4a:d6:31:11:
                    fd:cf:a4:4a:3c:18:8f:6b:fc:f8:c2:20:4b:0f:26:
                    d0:08:7f:d5:74:e4:f2:a3:91:f4:1e:06:e2:88:11:
                    09:ff:bc:9d:c9:69:83:ef:88:f9:f3:d7:3c:15:bc:
                    3c:f5:7e:fa:ca:d9:3f:97:39:f0:e7:7f:17:48:f2:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:F0:99:A4:7E:C3:F4:5D:13:29:46:7D:D2:25:C0:52:DC:CA:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:21:ef:bb:7a:a5:0c:72:aa:cf:59:8d:9c:4a:dc:9a:5c:
         87:51:72:ba:ae:aa:5f:72:de:69:9e:f8:52:17:9c:cc:08:a9:
         53:1c:31:60:c4:54:67:2f:4c:46:b5:5f:28:f5:6b:1e:95:83:
         b4:a5:24:49:c4:b4:09:be:a0:bd:9f:9f:0e:04:61:7e:6e:37:
         db:30:63:5d:dc:30:b0:8c:7e:9e:5c:ff:1b:c5:09:19:01:df:
         df:0d:f7:ee:82:75:71:ac:20:14:9e:d8:ba:b0:b7:cd:99:aa:
         9c:5e:f6:88:5d:5e:21:a0:3f:9c:43:02:cf:26:56:72:f2:d0:
         e2:2f:fa:db:c2:71:7d:44:83:3e:91:21:89:b9:f7:f4:b0:10:
         ca:31:85:b1:d4:19:c5:39:f3:3c:07:99:95:e0:d1:04:91:f5:
         f4:b9:1b:2e:44:d5:38:6e:31:a4:77:23:d9:36:14:89:5a:b1:
         3f:c7:ea:b1:b6:4e:4d:66:32:a6:a0:bf:1d:91:b8:9a:94:e6:
         35:48:e6:8a:11:76:30:8c:a8:30:67:07:1f:f3:c1:ca:5b:ef:
         0d:2b:6a:75:74:ae:91:66:47:4d:6f:e4:22:e9:ae:1c:fb:5c:
         88:60:6c:b4:36:1d:46:d5:b8:43:6d:41:d1:b9:79:49:d8:be:
         12:65:bf:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:08 2026 by rpki-client