Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa
File:                     90cfe61c-18cf-49e8-b6df-56574149e45f.roa (raw, json)
Hash identifier:          pvGPqCsHWxJxGowoaaOy0fEpTTTIp4q1rESApHrX2Tg=
Subject key identifier:   4D:D4:F4:E2:15:13:1D:5C:3C:A9:A1:78:55:16:D8:18:4D:0F:14:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7203399A0B57E654E82CC8E06303984570E9D35B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa
Signing time:             Fri 08 May 2026 00:00:13 +0000
ROA not before:           Fri 08 May 2026 00:00:13 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     19047
IP address blocks:        2605:b940:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:39:9a:0b:57:e6:54:e8:2c:c8:e0:63:03:98:45:70:e9:d3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  8 00:00:13 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=f171726cb708ba9f10edc8f3ca0b7f9d48c71d8329b613a2bfe2f16c50d4e6a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:69:3a:64:d4:ac:ae:11:f4:19:82:83:5a:
                    19:48:b3:dd:98:e9:ac:1e:38:48:8c:56:ca:37:4f:
                    f0:54:7b:bf:4e:43:50:ec:a7:e7:45:5a:af:0f:66:
                    cc:38:92:c7:bb:8b:38:e2:96:bc:17:d8:f4:3f:55:
                    fa:76:27:ac:5a:4d:24:29:eb:ff:9b:65:01:8a:f8:
                    98:c4:7d:d1:39:f6:5c:31:0c:f3:e2:41:1c:7e:7d:
                    b9:29:61:be:3e:04:54:42:74:78:ca:1f:50:46:77:
                    27:c8:37:f9:e6:68:5e:4f:78:ae:37:d5:2d:b8:fd:
                    55:e6:eb:81:b7:e0:35:23:f0:38:8c:bd:eb:f2:c1:
                    9d:5e:d6:9f:d6:d4:05:8a:a2:e1:57:2e:91:bb:21:
                    40:b8:9e:a0:04:e3:25:2f:c3:de:c0:72:46:8e:e4:
                    0f:20:a9:1a:0e:fe:a2:75:88:0b:4c:43:28:35:84:
                    74:43:0f:55:71:5b:d7:b1:21:fc:84:83:07:e3:3c:
                    bf:b7:bd:20:67:3c:b3:e3:3c:36:d0:1f:df:32:53:
                    71:69:73:4a:a6:d4:09:89:ae:a6:ef:7c:14:39:71:
                    e1:98:c8:07:ad:b5:e0:19:4d:d6:3b:55:9d:62:67:
                    82:9c:0f:0e:1d:8b:7e:83:c6:d2:33:41:1c:fe:07:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:F4:E2:15:13:1D:5C:3C:A9:A1:78:55:16:D8:18:4D:0F:14:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90cfe61c-18cf-49e8-b6df-56574149e45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b940:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:27:76:5e:32:0f:5e:07:53:31:94:58:f7:af:59:dc:bd:cf:
         e4:5a:7c:66:8e:61:29:bc:d7:d2:28:4a:cd:94:58:37:e3:ee:
         d2:87:9d:92:8d:b0:63:81:27:a5:6c:68:a4:87:13:ea:4c:6f:
         54:54:66:43:21:5e:72:70:10:e6:bf:53:d0:b8:74:de:9b:04:
         36:af:21:9c:e0:52:f9:ed:11:67:3d:ce:8e:4b:ec:8d:31:fc:
         f2:2e:78:fc:00:bf:2b:7d:d7:27:06:14:2f:85:ec:1b:11:38:
         ff:08:bb:12:c1:5d:e4:b3:dd:6c:48:79:09:bd:ae:18:63:af:
         d9:7e:d3:a4:b5:bf:27:39:3d:7d:3f:03:ce:2f:7e:a9:05:a1:
         07:47:0b:4c:2e:e3:e1:24:af:e6:ac:27:14:b1:ee:e5:c9:85:
         9d:72:ec:88:57:8d:01:05:96:78:11:d6:06:25:83:0a:af:61:
         d3:4d:21:f0:f6:dc:9a:0c:18:6a:e4:15:9d:c1:22:62:e4:c8:
         02:96:48:6b:fb:2b:19:b8:2d:03:40:c3:da:a7:b4:35:2e:9f:
         07:16:26:fb:6d:0f:c2:57:90:a1:13:6c:6c:e3:b5:31:b7:76:
         e4:15:fc:45:f9:85:39:0a:72:36:e7:15:0f:1e:4a:8c:31:07:
         dc:6c:18:a5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcgM5mgtX5lToLMjgYwOYRXDp01swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA4MDAwMDEzWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMTcxNzI2Y2I3MDhiYTlmMTBlZGM4ZjNjYTBiN2Y5ZDQ4
YzcxZDgzMjliNjEzYTJiZmUyZjE2YzUwZDRlNmE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBgGk6ZNSsrhH0GYKDWhlIs92Y6aweOEiMVso3T/BUe79O
Q1Dsp+dFWq8PZsw4kse7izjilrwX2PQ/Vfp2J6xaTSQp6/+bZQGK+JjEfdE59lwx
DPPiQRx+fbkpYb4+BFRCdHjKH1BGdyfIN/nmaF5PeK431S24/VXm64G34DUj8DiM
vevywZ1e1p/W1AWKouFXLpG7IUC4nqAE4yUvw97AckaO5A8gqRoO/qJ1iAtMQyg1
hHRDD1VxW9exIfyEgwfjPL+3vSBnPLPjPDbQH98yU3Fpc0qm1AmJrqbvfBQ5ceGY
yAetteAZTdY7VZ1iZ4KcDw4di36DxtIzQRz+B9yRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTdT04hUTHVw8qaF4VRbYGE0PFCIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkwY2ZlNjFjLTE4Y2YtNDllOC1iNmRmLTU2NTc0MTQ5ZTQ1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBblAAAQwDQYJKoZIhvcNAQELBQADggEBAHYndl4yD14HUzGUWPevWdy9
z+RafGaOYSm819IoSs2UWDfj7tKHnZKNsGOBJ6VsaKSHE+pMb1RUZkMhXnJwEOa/
U9C4dN6bBDavIZzgUvntEWc9zo5L7I0x/PIuePwAvyt91ycGFC+F7BsROP8IuxLB
XeSz3WxIeQm9rhhjr9l+06S1vyc5PX0/A84vfqkFoQdHC0wu4+Ekr+asJxSx7uXJ
hZ1y7IhXjQEFlngR1gYlgwqvYdNNIfD23JoMGGrkFZ3BImLkyAKWSGv7Kxm4LQNA
w9qntDUunwcWJvttD8JXkKETbGzjtTG3duQV/EX5hTkKcjbnFQ8eSowxB9xsGKU=
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:08 2026 by rpki-client