Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83639d30-76d8-485e-b1d4-7c1dba777f18.roa
File:                     83639d30-76d8-485e-b1d4-7c1dba777f18.roa (raw, json)
Hash identifier:          I0eidz5kWcdyJvLP63kyxRXED6cxH8ZOxwofYf1NNJ0=
Subject key identifier:   DE:8C:B1:D7:23:F8:E4:52:DB:25:5E:B4:42:37:10:CD:FC:B1:12:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2CF5FD1B061CDAEB1BCD28D2D35082F0CB5D7BFB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83639d30-76d8-485e-b1d4-7c1dba777f18.roa
Signing time:             Mon 04 May 2026 02:10:11 +0000
ROA not before:           Mon 04 May 2026 02:10:11 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3474::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f5:fd:1b:06:1c:da:eb:1b:cd:28:d2:d3:50:82:f0:cb:5d:7b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 02:10:11 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=377485ec6149b41c65822522b8ec234387dead01c3c8d224613624b71d2c7ff7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:84:c8:78:6c:96:56:86:0e:f0:cc:31:44:
                    88:64:60:f3:07:1e:9e:85:e9:71:24:d2:27:f2:f6:
                    e7:e9:38:65:23:81:09:9f:f7:88:e3:7a:13:fd:18:
                    d9:53:5e:a5:c7:98:25:b6:ba:77:c0:8c:98:2b:af:
                    b1:35:cf:17:b3:5e:76:fd:8a:98:b8:61:91:d7:fb:
                    d9:96:43:99:53:99:e4:b4:2a:06:7d:95:2b:ef:8f:
                    15:ec:40:13:93:93:14:bf:3b:0c:2e:85:fe:48:30:
                    4d:40:dc:da:f2:6e:d6:fc:44:8d:54:34:ec:3b:4e:
                    16:b4:ea:22:d0:32:d0:0f:c1:81:d5:43:d3:5b:2e:
                    25:20:22:e5:3a:75:bc:21:77:13:9f:4f:9e:e5:f0:
                    36:5f:42:46:aa:3d:d3:4d:d8:87:e8:b4:d1:b3:f6:
                    e0:e2:7b:2e:37:2d:c8:a5:fe:01:29:f2:e3:a3:34:
                    2a:10:a5:fb:81:7e:33:da:93:44:29:f0:9d:74:96:
                    b8:d9:a9:99:17:61:0c:13:c7:aa:9d:63:e3:ad:0e:
                    46:1a:f6:c5:90:63:78:15:90:00:3c:a4:30:9d:3f:
                    f8:de:49:36:cd:cd:c7:f4:55:28:01:31:c8:ab:1f:
                    c6:56:00:3f:ca:c1:da:0a:99:1e:eb:c2:41:67:5b:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:B1:D7:23:F8:E4:52:DB:25:5E:B4:42:37:10:CD:FC:B1:12:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83639d30-76d8-485e-b1d4-7c1dba777f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3474::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:cd:fd:e5:91:03:cc:97:88:58:ce:f1:ae:7d:28:db:0f:
         99:1c:fd:9a:9d:89:32:5c:bb:c7:f5:63:98:2a:b4:3f:de:24:
         2d:11:f8:2a:29:48:e5:ae:26:04:e1:cc:1c:a4:67:40:7c:fe:
         fc:c3:dc:e5:c2:c7:93:26:2b:89:34:28:78:89:5e:29:15:f2:
         9a:31:dd:b1:84:69:ad:c9:da:75:34:7f:d9:eb:94:e1:92:57:
         64:75:0a:8a:3f:01:cb:8e:17:41:07:51:f2:86:99:ba:f5:f9:
         3d:12:e2:fe:9f:28:9c:40:c5:43:e8:95:fb:60:03:6e:07:ae:
         37:54:73:cf:2b:a1:d1:aa:22:a1:30:ec:00:62:39:b2:a3:44:
         c8:b5:99:39:65:64:4a:59:f6:6f:f8:9c:10:f9:ab:49:24:ba:
         d9:4e:70:e5:98:16:17:a9:4a:0a:0e:fa:a3:df:ea:7e:13:dd:
         21:98:6b:14:49:1d:28:0e:13:f0:02:6a:d8:31:f1:3f:01:06:
         8a:16:9e:1d:d8:e2:51:5e:ca:5b:2a:54:6e:cf:00:8d:e2:ef:
         09:b6:38:b0:b6:7d:7b:46:b9:c8:1e:4b:e1:11:54:5c:ed:30:
         27:3f:49:8b:dd:f5:99:00:97:ae:fa:a5:fd:5f:53:02:3a:2b:
         8e:f5:3b:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:02:49 2026 by rpki-client