Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa
File:                     56f39aff-69f7-4a27-bf7c-799de0fff57b.roa (raw, json)
Hash identifier:          OI3fnXdYZMHKoekkEIuSuoZWFJEEmaiG1fHEJSRATg8=
Subject key identifier:   B4:9D:47:C3:3C:00:A0:2C:BD:6D:EB:CE:2F:51:39:A4:C2:D2:22:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46E2026F2A86E16842AFE0BFD506D2B413B3D11D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa
Signing time:             Mon 04 May 2026 06:01:06 +0000
ROA not before:           Mon 04 May 2026 06:01:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2994::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:02:6f:2a:86:e1:68:42:af:e0:bf:d5:06:d2:b4:13:b3:d1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:01:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=647d9f7bb303a5efec0e9a7c875afee21cd8cff7a34f163c67e0bf08d9eb869a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:20:02:ab:3d:28:52:67:c8:4d:28:98:3a:
                    78:3a:e5:14:87:cc:35:da:36:48:d8:e6:98:e6:33:
                    89:34:29:e3:a8:30:2b:4e:59:ef:84:fa:9e:ad:9c:
                    9f:20:42:ad:fe:a9:3f:f4:e5:72:4b:ad:32:6f:4e:
                    0f:bd:ef:46:32:61:d7:0d:31:f5:5b:5a:cc:c8:5f:
                    b0:01:72:14:73:74:53:ea:bb:fc:53:52:a7:44:df:
                    17:93:09:03:0b:62:a0:05:3b:41:b0:20:0e:3a:98:
                    08:a0:e8:7a:5d:7f:1c:83:84:e9:21:8c:5f:44:52:
                    df:bc:b6:cd:93:52:a7:18:33:ed:03:41:05:fa:9d:
                    1b:1f:46:59:71:4e:88:b3:a3:e6:aa:a3:20:91:7c:
                    56:3b:a6:33:f7:e2:10:bf:79:d4:30:88:4f:40:09:
                    db:c7:30:3c:11:04:16:71:07:d9:44:e4:3e:62:d0:
                    fd:c6:b5:6b:16:d8:e4:2a:5a:97:82:9a:b0:7a:94:
                    59:b0:40:c0:d0:1b:43:bd:6b:46:2d:d7:af:51:3f:
                    6c:5e:de:72:a1:5c:ca:52:dc:9c:8c:90:af:40:78:
                    a5:5e:72:20:a7:50:3d:ee:d2:14:d4:ec:73:45:5a:
                    93:07:12:0e:4c:7f:1f:de:9b:ef:16:50:7b:07:3d:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:47:C3:3C:00:A0:2C:BD:6D:EB:CE:2F:51:39:A4:C2:D2:22:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2994::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:69:44:9b:4b:51:57:7a:65:1f:6f:8c:92:ff:c1:18:83:
         4f:87:bb:9a:a8:c3:66:21:63:73:2e:10:49:a4:f3:1b:e7:a8:
         f9:4e:2d:11:70:ff:3e:49:28:48:a0:3e:0c:f8:7f:5f:ed:72:
         c3:8d:5f:49:3c:88:1c:bf:6e:48:86:cb:0a:75:01:90:4b:54:
         ba:ed:2c:ec:fe:f9:10:4e:96:b5:70:94:24:00:2b:42:05:55:
         9f:1b:db:6d:54:ad:13:12:d4:bb:dd:5d:f1:a9:5f:30:c2:53:
         b1:84:aa:e8:42:a6:04:01:20:3a:3b:44:8b:d6:1e:52:9d:97:
         41:f4:a2:fa:a1:32:99:62:80:c2:0c:af:7d:95:3f:37:42:1b:
         3f:f7:cc:67:9d:79:55:b5:47:b7:ba:fa:45:bf:36:2c:1e:d7:
         71:92:59:3a:39:fa:9f:68:46:d4:58:c0:d6:75:37:e3:01:96:
         d8:94:28:19:55:6b:ca:4d:fd:15:23:99:25:d3:dc:f1:96:85:
         8b:55:11:bd:d9:8c:22:ca:bf:e4:98:71:6c:2d:5c:e3:5f:d1:
         1b:ce:94:90:57:94:94:f4:6a:d2:2b:28:33:5c:22:57:95:19:
         c8:5d:38:dd:87:29:d4:13:88:0f:ae:e9:8b:b4:b8:d8:f5:b7:
         2f:38:a1:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:19:04 2026 by rpki-client