Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa
File:                     8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa (raw, json)
Hash identifier:          N3tRT5+4oCuTgY0epKLSj2YWeGUuBUFKPzIB1pkYvRs=
Subject key identifier:   9C:39:06:9A:7B:F0:F7:53:9E:78:1B:56:02:1C:E5:97:EE:A1:29:A3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       198C017F23222A1C2CF753BAFC367E74A50B029E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa
Signing time:             Mon 04 May 2026 11:40:04 +0000
ROA not before:           Mon 04 May 2026 11:40:04 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3790::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8c:01:7f:23:22:2a:1c:2c:f7:53:ba:fc:36:7e:74:a5:0b:02:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 11:40:04 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3f22dd6a29c5a136ba290d566753d583e0b7aed317d2304713daff76abf55723, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:0e:16:dd:81:e6:21:78:1d:56:a8:60:32:
                    8a:1b:7e:05:4e:4f:75:29:9f:68:5e:fa:6b:93:2b:
                    98:1c:ef:fc:f7:9c:80:81:de:e7:74:03:38:7d:5f:
                    e7:aa:a9:f0:dc:41:6b:0d:2b:10:71:6f:9a:33:fa:
                    17:08:6c:7b:f0:ab:c4:0a:dd:74:dc:1a:5e:71:4d:
                    7e:57:f3:9f:a5:e8:1e:24:d8:b2:a7:df:7e:f9:5e:
                    9d:e5:93:b4:fd:0f:36:2c:ea:3b:95:69:80:0c:eb:
                    55:49:24:f8:72:2a:63:a5:03:0f:93:45:e3:21:95:
                    f6:d9:01:7f:07:c3:ce:39:b8:25:a3:a7:9c:6a:9f:
                    81:f4:5a:69:14:ef:0f:63:06:85:60:96:3f:8f:ed:
                    07:cc:40:01:97:7c:9e:78:58:f5:92:7b:98:a5:f6:
                    ac:20:46:cd:d4:fc:fc:62:a2:a7:ab:55:1c:46:8c:
                    f8:a8:4d:32:5c:62:68:77:bd:6a:c1:f5:33:97:59:
                    9c:f8:ca:6c:5b:8b:6b:6d:fa:2b:d8:34:04:cf:9d:
                    48:58:39:04:2b:8b:58:0c:df:60:c2:e3:fd:82:24:
                    24:a4:22:06:85:01:34:8a:bc:3c:a7:08:9f:34:c5:
                    77:3f:19:e7:47:09:00:f6:93:da:07:58:6d:00:a2:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:39:06:9A:7B:F0:F7:53:9E:78:1B:56:02:1C:E5:97:EE:A1:29:A3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3790::/45

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:6f:76:3a:53:9d:ee:b7:18:ff:ed:b7:59:d4:26:71:b8:
         82:8f:76:35:62:ec:47:d9:fb:b6:cf:1f:06:44:ad:54:e9:23:
         86:f3:17:11:b7:66:cb:3f:7f:33:c8:05:b6:f4:fe:94:27:91:
         76:86:9a:6a:d4:6f:cb:b9:24:36:2a:54:4d:88:00:13:9d:93:
         8d:ff:a4:97:92:c2:04:a0:a2:66:22:f0:3d:42:ac:a5:e1:83:
         37:8c:d0:67:54:c9:29:f3:fa:ad:e1:1e:43:62:9c:7e:b1:33:
         9d:ad:e0:42:ce:2f:c3:34:5f:26:af:fa:a6:26:1c:d4:bf:fd:
         0b:6b:8d:62:db:73:ab:84:eb:72:ee:10:39:de:bb:bd:cc:6c:
         c6:c5:64:2a:b7:5a:58:29:50:6f:0d:f4:a2:49:af:b8:7e:88:
         3b:1e:aa:9d:db:e2:83:20:64:70:ad:22:88:f7:4b:b8:5a:70:
         ca:7a:f3:80:fa:66:2b:0f:f0:20:c0:63:a0:da:8f:f1:6c:67:
         6c:ff:12:75:84:7d:fb:bf:29:c9:c2:9e:a9:e3:b4:9c:57:e9:
         90:85:07:88:e2:59:65:1f:81:3a:8d:fc:3a:b3:d5:99:a1:da:
         68:26:b1:ad:2e:85:b0:49:e5:a8:e9:9b:38:12:e4:3d:a5:5b:
         e1:cd:d3:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:49 2026 by rpki-client