Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/781cfdb6-53af-4423-82d4-ca67de62ff27.roa
File:                     781cfdb6-53af-4423-82d4-ca67de62ff27.roa (raw, json)
Hash identifier:          okkc/mOHI5kLBaKNvteVkOYwGPVpM0WQT5scq0Wq0AM=
Subject key identifier:   47:A3:CF:98:4A:6F:8B:34:F3:18:53:FC:D1:4A:CE:28:32:1E:8E:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       41D03ECC023E0C1C122EFF9CC5E9D5EBE11768FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/781cfdb6-53af-4423-82d4-ca67de62ff27.roa
Signing time:             Mon 04 May 2026 09:21:16 +0000
ROA not before:           Mon 04 May 2026 09:21:16 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b60::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:3e:cc:02:3e:0c:1c:12:2e:ff:9c:c5:e9:d5:eb:e1:17:68:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 09:21:16 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=89b1ffd1915d97cde9de90703c7701eadeb6478a606e58ca586ee9dac7d889c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:b0:85:85:d5:dc:3c:49:fb:1c:c9:a7:45:
                    ee:3d:75:72:2f:1c:0e:a3:e9:ac:ab:59:23:9f:ad:
                    99:79:06:3a:b1:50:88:90:9a:0a:09:79:3c:ec:24:
                    3b:2a:66:dc:a6:5c:8c:ff:6c:1e:02:2b:8b:e6:b9:
                    52:18:ac:35:c8:97:e4:8e:1f:c6:36:ca:00:ac:d0:
                    50:8b:27:42:3d:6b:6b:8a:5e:48:cb:95:86:4d:6a:
                    14:9c:5b:63:a0:0f:12:35:83:c2:ec:33:4b:3e:0e:
                    aa:6f:56:1e:64:25:73:22:6c:be:b7:aa:e8:64:5f:
                    e8:1f:83:ed:48:a2:26:97:3d:71:1b:30:f6:1a:9d:
                    2f:b1:b9:34:93:15:1d:dc:09:d7:da:59:9c:bd:78:
                    20:31:24:fe:24:ff:39:0c:83:3d:03:1b:75:36:b5:
                    e2:42:eb:4e:a9:b1:0d:a3:26:3d:3b:08:de:3e:32:
                    ee:ac:9a:3b:08:22:5f:1f:53:be:9c:2a:22:eb:3e:
                    9e:0a:48:49:00:dc:8c:d2:b3:64:b0:16:2c:b1:1c:
                    84:f0:58:b4:f6:f3:97:56:4e:5c:67:f5:a7:05:5f:
                    aa:68:45:4d:c7:87:76:0c:a4:9d:46:e4:82:96:26:
                    69:1c:87:b9:50:e4:84:6f:45:ce:e3:f9:75:a0:9e:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:CF:98:4A:6F:8B:34:F3:18:53:FC:D1:4A:CE:28:32:1E:8E:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/781cfdb6-53af-4423-82d4-ca67de62ff27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b60::/46

    Signature Algorithm: sha256WithRSAEncryption
         93:21:1a:1b:b3:59:eb:da:c0:51:37:07:5a:ee:19:21:0b:66:
         a9:d2:de:b9:b4:7a:26:64:4c:e3:34:50:2f:0a:e6:88:85:e4:
         44:6d:84:d6:91:fa:89:ac:85:7c:57:c6:0d:4c:4c:05:4e:7c:
         81:01:9a:2c:63:cc:d0:51:3e:17:25:c4:54:b3:21:72:3b:6e:
         dc:70:0b:69:34:8c:77:12:a7:c3:0e:3d:c7:9a:aa:dc:64:c0:
         ff:05:90:3b:ff:e4:a6:6c:99:52:7b:f5:2f:cb:03:38:a4:7f:
         02:4c:d6:89:80:ce:6c:b3:8b:eb:33:62:2b:5d:97:12:bb:8e:
         be:88:c4:5d:61:f7:05:40:5e:ea:80:e1:88:7a:96:13:9d:63:
         df:a8:8e:b8:51:ef:15:7f:23:d2:28:e6:0a:2f:9b:fa:43:da:
         6b:75:ef:d6:99:29:5d:29:58:00:28:0e:78:6e:b4:7f:07:a2:
         d0:e2:81:c7:9d:c4:00:cd:14:d2:54:1c:45:99:4a:6a:ca:f4:
         b2:bb:ee:35:b0:9d:02:6d:7b:83:9e:03:93:ef:67:65:3c:c5:
         6f:2d:5a:1e:50:e9:df:89:db:e0:3a:f1:4c:71:22:09:a6:5e:
         26:f0:0b:02:50:ee:56:ae:c0:62:69:3a:bc:f5:d9:df:1a:68:
         c2:03:4e:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:47 2026 by rpki-client