Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91f3bbfd-9db2-49b2-bd0d-5cdf39f6973a.roa
File:                     91f3bbfd-9db2-49b2-bd0d-5cdf39f6973a.roa (raw, json)
Hash identifier:          9M3WsXzv2xYN7/bsWqB2FRlb9mVKS4ikTOcbPjmvrCo=
Subject key identifier:   D2:AA:99:8E:EA:DB:FC:4C:0A:2F:47:12:EF:85:0A:CF:87:4E:3A:6C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       51D17191E09CB7E8BD227184B46F6D4B3CD13B52
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91f3bbfd-9db2-49b2-bd0d-5cdf39f6973a.roa
Signing time:             Mon 04 May 2026 05:11:20 +0000
ROA not before:           Mon 04 May 2026 05:11:20 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ef8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d1:71:91:e0:9c:b7:e8:bd:22:71:84:b4:6f:6d:4b:3c:d1:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 05:11:20 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3f7dedd2a03da4ec6205b33bd6c08cc3d96c3b0cb696075fb422cf1703e75e29, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:a5:4f:da:02:94:38:6a:6c:9e:c9:da:a1:
                    fd:96:d3:45:48:7b:b3:98:fb:ef:25:b9:cb:d4:bd:
                    c7:c3:93:16:84:f4:59:c4:09:bd:0e:0b:28:58:1a:
                    e1:52:42:e8:dd:82:78:33:aa:fe:e8:46:ff:58:f6:
                    6e:59:da:ec:86:dd:eb:05:3e:7a:05:0f:43:66:e2:
                    66:83:2e:0f:b5:0b:ae:a8:57:42:00:5e:86:62:d4:
                    d2:08:66:fa:b0:1c:6f:8a:2e:22:88:ce:02:c9:c2:
                    15:45:6e:d0:05:4e:8c:de:cd:11:71:26:d4:c3:72:
                    30:1d:91:63:3f:af:c7:56:af:5f:f2:4e:bb:09:de:
                    49:cd:9e:32:e0:9f:a7:2e:be:e8:7c:5b:33:75:36:
                    9f:73:c6:ff:ff:f5:af:bd:40:19:06:b9:36:9a:81:
                    67:ee:9c:c9:af:72:17:ac:b8:d5:6e:75:15:16:7b:
                    93:ce:ce:ba:68:43:77:2e:b5:f7:8b:a9:53:e2:e9:
                    f0:4b:f0:06:6d:34:c2:a5:b6:a2:18:5a:71:49:e1:
                    a4:c2:44:8f:c0:59:de:86:cf:16:cc:28:ec:d9:9b:
                    cf:47:be:c9:ae:c0:9b:07:c3:b8:10:08:26:26:5b:
                    47:bc:9c:ec:fb:6e:30:92:68:75:7e:eb:00:0d:0c:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:99:8E:EA:DB:FC:4C:0A:2F:47:12:EF:85:0A:CF:87:4E:3A:6C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91f3bbfd-9db2-49b2-bd0d-5cdf39f6973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ef8::/45

    Signature Algorithm: sha256WithRSAEncryption
         07:a1:e1:67:75:63:73:a8:ee:9b:5f:9c:88:af:b8:01:95:ea:
         81:e7:9c:81:d9:15:34:e1:da:0e:ec:da:a6:ea:62:ef:c9:54:
         88:87:51:7d:1f:fa:b8:a7:4f:92:d8:7f:a6:6b:62:74:2f:23:
         4e:5e:f6:b2:12:05:33:84:1b:f7:87:8c:3b:ea:3c:ce:bb:0e:
         42:ef:68:17:2f:43:4d:60:ad:e1:56:c5:a3:1c:4e:30:f8:37:
         1d:f1:82:c7:64:22:6b:e3:45:38:0a:a7:f6:d4:b1:01:2b:8f:
         7a:17:6f:3a:5c:35:d5:24:f8:01:60:15:bb:bc:67:06:fd:87:
         fa:37:e8:31:5f:10:8b:98:aa:bc:c6:21:c7:5e:0e:ef:9a:20:
         6f:3f:4b:bf:2d:fb:ad:cf:21:7a:7a:9c:6f:47:cd:ef:f7:50:
         b4:25:77:6e:ae:a5:af:20:a5:b4:77:c6:fa:78:e4:ca:db:c6:
         04:a0:88:89:20:90:67:7f:7f:43:2a:8b:60:62:95:5d:78:27:
         a3:ea:01:cc:ef:3f:3a:cc:57:cf:30:de:e8:48:bf:09:1e:df:
         e9:01:f2:cf:10:26:67:db:ad:b4:62:12:c4:fb:1e:a8:a2:98:
         36:2f:1e:df:f6:18:4f:09:8c:41:1f:55:2a:45:d0:80:ab:1f:
         63:5f:35:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:06 2026 by rpki-client