Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa
File:                     7360a55f-018c-4cd3-986d-2e40c5d0a441.roa (raw, json)
Hash identifier:          5vueoaT1Sa5OX5DuGkoNcdqpbdiqIjIZwS01Id9rgsw=
Subject key identifier:   CC:70:82:4B:80:CE:AE:3E:BD:8E:53:86:CC:F3:5E:11:90:A4:9B:BE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       75A45D7BEE87A6FF3F54A31E412707633A234FAC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa
Signing time:             Mon 04 May 2026 12:21:19 +0000
ROA not before:           Mon 04 May 2026 12:21:19 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3560::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:5d:7b:ee:87:a6:ff:3f:54:a3:1e:41:27:07:63:3a:23:4f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 12:21:19 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=eba977d886638611827ebf355a20a7f778e9a7fa1e4ef482fa35794b78bbc098, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:b0:08:54:5d:69:79:a7:79:5b:1c:7f:98:
                    5e:34:61:2e:7f:3f:cc:21:92:69:12:91:7b:72:6a:
                    ac:f3:42:91:68:de:3f:16:1c:7c:24:9b:8f:a5:94:
                    66:5c:ce:8e:d7:b8:dc:48:06:56:c7:79:f4:2f:a6:
                    fb:49:48:6e:04:9e:c3:85:f6:98:e8:fb:5e:b6:71:
                    41:6d:e9:ed:f2:f5:ff:5a:83:06:b2:cc:61:c1:5e:
                    61:36:c5:54:90:30:35:5e:54:3c:f9:10:68:64:65:
                    be:ec:73:d7:68:34:1f:31:d6:0e:2a:3b:d1:8b:0d:
                    5f:55:b3:83:2f:79:24:3a:d8:9f:79:1c:73:06:c9:
                    96:03:03:bc:4c:43:43:0b:79:8c:91:c7:d0:da:46:
                    00:42:b3:59:11:0e:0c:8e:26:a4:fa:27:5c:15:d0:
                    68:0c:80:d9:18:af:cc:cc:a0:10:9a:44:fa:5e:0b:
                    f0:f5:79:a4:36:5a:8c:17:66:36:1d:be:d3:3c:e6:
                    89:04:38:54:a6:8f:90:bb:42:ea:69:fb:9f:c5:3e:
                    9d:b1:bc:99:24:a7:e3:87:1e:81:d6:42:fd:e8:68:
                    0d:4a:b0:45:66:7e:7b:db:14:88:99:fe:7f:dd:30:
                    32:e9:ce:d8:c2:e1:31:d0:3a:fa:c0:90:33:bc:66:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:82:4B:80:CE:AE:3E:BD:8E:53:86:CC:F3:5E:11:90:A4:9B:BE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3560::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:49:fd:0a:ad:54:33:4c:92:79:88:7e:bc:48:51:6a:ae:04:
         53:ce:25:de:61:88:ce:c5:91:33:9b:54:e9:30:51:7a:3c:f6:
         ea:ab:6a:b2:ac:b1:08:74:c4:44:4d:dd:31:90:cf:2f:6e:26:
         8f:2f:b7:6f:b2:52:38:da:1f:20:24:1b:40:15:54:13:31:48:
         bb:b0:81:9e:73:d3:33:ad:09:01:66:50:53:97:9e:b4:a6:0f:
         48:d2:61:67:74:10:d9:07:cf:7c:a6:cc:8b:bd:85:f3:ad:b8:
         b6:6a:a9:78:37:4a:ab:29:ec:38:47:19:2b:15:a3:ae:6f:70:
         c4:c1:60:63:53:08:69:6d:8d:0c:f1:2d:ff:a3:37:91:7f:6c:
         6a:b0:25:65:dd:0c:b9:47:59:cf:29:d6:50:07:a1:13:80:f1:
         93:ab:7f:b4:6c:4c:fa:a8:95:aa:24:f9:db:93:60:c7:05:32:
         35:0e:2b:7a:0d:20:6c:15:11:3a:3e:88:52:f7:68:a5:69:03:
         36:db:93:e1:71:71:82:19:be:96:89:80:4d:93:33:85:3a:da:
         e1:05:33:68:ec:4d:61:f1:32:41:d3:62:d9:2b:61:94:70:43:
         80:c2:5c:30:24:38:94:af:96:3e:90:9a:b0:fe:35:27:78:a5:
         e6:72:18:74
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdaRde+6Hpv8/VKMeQScHYzojT6wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTIyMTE5WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYmE5NzdkODg2NjM4NjExODI3ZWJmMzU1YTIwYTdmNzc4
ZTlhN2ZhMWU0ZWY0ODJmYTM1Nzk0Yjc4YmJjMDk4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWJ7AIVF1pead5Wxx/mF40YS5/P8whkmkSkXtyaqzzQpFo
3j8WHHwkm4+llGZczo7XuNxIBlbHefQvpvtJSG4EnsOF9pjo+162cUFt6e3y9f9a
gwayzGHBXmE2xVSQMDVeVDz5EGhkZb7sc9doNB8x1g4qO9GLDV9Vs4MveSQ62J95
HHMGyZYDA7xMQ0MLeYyRx9DaRgBCs1kRDgyOJqT6J1wV0GgMgNkYr8zMoBCaRPpe
C/D1eaQ2WowXZjYdvtM85okEOFSmj5C7Qupp+5/FPp2xvJkkp+OHHoHWQv3oaA1K
sEVmfnvbFIiZ/n/dMDLpztjC4THQOvrAkDO8ZiOzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUzHCCS4DOrj69jlOGzPNeEZCkm74wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzczNjBhNTVmLTAxOGMtNGNkMy05ODZkLTJlNDBjNWQwYTQ0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAANWAwDQYJKoZIhvcNAQELBQADggEBAAJJ/QqtVDNMknmIfrxIUWqu
BFPOJd5hiM7FkTObVOkwUXo89uqrarKssQh0xERN3TGQzy9uJo8vt2+yUjjaHyAk
G0AVVBMxSLuwgZ5z0zOtCQFmUFOXnrSmD0jSYWd0ENkHz3ymzIu9hfOtuLZqqXg3
Sqsp7DhHGSsVo65vcMTBYGNTCGltjQzxLf+jN5F/bGqwJWXdDLlHWc8p1lAHoROA
8ZOrf7RsTPqolaok+duTYMcFMjUOK3oNIGwVETo+iFL3aKVpAzbbk+FxcYIZvpaJ
gE2TM4U62uEFM2jsTWHxMkHTYtkrYZRwQ4DCXDAkOJSvlj6QmrD+NSd4peZyGHQ=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:36 2026 by rpki-client