Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66ad4a42-a246-4417-af98-408f75c987fc.roa
File:                     66ad4a42-a246-4417-af98-408f75c987fc.roa (raw, json)
Hash identifier:          LQ8BF1UizBGOdrqDt/MHf9AEanuU9p+7yhNgyLFTT3M=
Subject key identifier:   4E:50:9F:62:35:0A:7E:07:B3:13:DF:DB:2D:29:23:89:EB:DD:19:97
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49BC11594935FEDBF58ED9B2BFFB41CAC7F672B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66ad4a42-a246-4417-af98-408f75c987fc.roa
Signing time:             Mon 04 May 2026 03:32:01 +0000
ROA not before:           Mon 04 May 2026 03:32:01 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ee0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bc:11:59:49:35:fe:db:f5:8e:d9:b2:bf:fb:41:ca:c7:f6:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:32:01 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=c13b55f07bec7b280a0382f715b9f593a22404d82bcd5004e91871a47d8187e9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:38:2c:1c:03:c2:35:97:7d:9b:09:4f:a7:
                    7b:25:33:1c:93:89:b1:70:bb:ab:c7:7a:5c:85:c6:
                    31:25:5e:7f:a5:4c:ce:e0:8b:6b:aa:28:79:8c:45:
                    20:f8:52:9c:1e:a3:3d:ec:56:72:2c:17:3b:f1:5e:
                    8d:9e:d0:ed:c5:69:ee:b2:99:c3:ab:ee:d5:39:04:
                    87:13:31:ce:3d:0d:39:43:5f:69:4b:23:d3:b6:6d:
                    22:bb:7b:d6:03:3c:0e:c4:4f:9b:51:34:eb:d1:17:
                    75:46:56:17:75:61:fa:ad:c1:e2:3e:8f:4f:b3:ba:
                    d3:19:8e:b8:d6:7c:5a:18:f2:4d:47:33:49:9e:93:
                    d3:5a:00:c5:be:57:f9:90:8e:0d:9b:83:4f:bb:38:
                    ae:d5:67:ba:ee:be:2b:f7:f7:e6:78:88:99:d6:8c:
                    d7:c2:7e:2b:2f:7c:07:06:81:68:05:a0:0c:ea:1f:
                    a1:d6:fb:20:35:2e:9d:a9:d1:4a:59:6e:60:49:c0:
                    b6:b6:c3:89:2f:b4:f0:3a:4b:72:ec:81:b3:b1:5c:
                    0a:8b:44:cb:2c:98:af:a3:63:1b:92:e4:c3:7f:26:
                    71:99:f5:4b:f3:ee:fe:22:8b:ba:eb:73:c0:6c:ba:
                    cb:ed:51:c0:86:3f:6b:f6:4f:a3:71:a6:4d:9c:9f:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:50:9F:62:35:0A:7E:07:B3:13:DF:DB:2D:29:23:89:EB:DD:19:97
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66ad4a42-a246-4417-af98-408f75c987fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ee0::/46

    Signature Algorithm: sha256WithRSAEncryption
         31:93:c7:83:7f:09:d1:6b:7e:1b:87:6f:02:f9:6f:9a:0a:66:
         85:6d:14:7e:c7:31:85:2a:c3:a2:69:54:b0:33:ff:60:70:f5:
         8b:bb:2a:04:ba:69:78:e6:b3:a4:b5:26:9a:ff:d5:90:8a:9d:
         6c:1b:d9:2a:4a:54:f3:f2:d6:2e:7c:0e:f7:7f:08:df:02:57:
         59:f5:53:b7:ca:3d:4f:59:cb:d0:e2:13:53:40:4c:ec:08:70:
         42:3b:25:6e:62:df:21:6f:f9:16:53:a0:13:90:3b:6c:bf:29:
         7f:e3:05:30:ea:bd:24:40:7a:33:93:3a:02:7d:85:1a:6c:11:
         a5:97:2d:cb:cc:af:76:f6:55:41:43:ed:8c:f1:44:1e:ab:9a:
         9b:70:d8:a4:79:80:2f:d0:c3:58:21:12:a4:6b:d3:2d:88:fb:
         3e:2d:99:68:4f:f3:21:90:08:eb:a2:fc:1b:e9:18:92:0d:16:
         9d:8a:41:36:05:37:8c:d6:2f:7f:27:97:12:53:81:16:45:ba:
         dd:ed:4c:f8:ea:ac:fb:70:cf:5b:b1:b7:84:44:ce:ea:ad:b1:
         a5:70:9d:c2:34:e1:46:6a:bf:a7:b4:0b:5f:ef:53:b1:46:18:
         07:14:74:99:1e:e0:02:40:cf:b3:aa:1a:2c:f0:65:d7:85:42:
         b4:4a:fd:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:08:32 2026 by rpki-client