Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9736c069-f338-4c8e-9967-488916d08fa6.roa
File:                     9736c069-f338-4c8e-9967-488916d08fa6.roa (raw, json)
Hash identifier:          Abhxdy39YRhWBN31eQCr0mUyVB6S9YJs1xKYixdu62s=
Subject key identifier:   E9:1E:03:47:6B:A4:94:1F:12:50:F5:F9:34:B6:C3:DD:A0:74:9A:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5E6C79736AB1DADCE5F8F7ABDB767B00ED625B59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9736c069-f338-4c8e-9967-488916d08fa6.roa
Signing time:             Mon 04 May 2026 06:42:12 +0000
ROA not before:           Mon 04 May 2026 06:42:12 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fee::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6c:79:73:6a:b1:da:dc:e5:f8:f7:ab:db:76:7b:00:ed:62:5b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:42:12 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=b3169ff675a7bc610328d6303fb6e5129636c4cbcb238dcf3e0c72507925974a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:96:5b:9c:19:a7:4e:0f:64:6f:f5:73:cd:f4:
                    98:30:f6:a0:21:77:2f:54:9c:1e:b5:b8:af:13:a8:
                    ac:3e:bc:66:af:60:43:18:a0:8c:ab:e3:50:2d:92:
                    ae:aa:ff:89:2e:90:7d:34:12:94:e4:30:7e:5c:ef:
                    1e:35:63:ff:d7:e7:f7:08:fd:b7:7c:9e:55:c1:ed:
                    17:0a:05:83:68:59:e4:4d:af:9b:4e:8e:dd:f5:31:
                    8d:94:83:6b:54:34:ad:32:93:3d:3b:ae:81:78:1d:
                    5b:13:ae:28:7f:c6:ea:cb:bb:30:49:10:5b:da:17:
                    c5:2a:80:2c:ba:01:d2:44:27:08:02:a2:d7:9c:dd:
                    be:55:df:71:d6:17:dc:aa:4f:4c:04:e1:db:16:ce:
                    14:b3:2d:39:0f:4a:cb:1f:d5:b0:9d:bc:bc:5b:58:
                    57:3e:a2:dd:8b:5d:99:b7:09:c7:1b:a7:37:00:5d:
                    2e:bd:6e:9d:f8:f3:42:12:52:b0:73:a4:9f:22:fb:
                    66:d2:6b:d6:e7:d4:5f:33:24:21:d0:8b:da:4e:fa:
                    b7:97:d6:ef:e3:b0:22:3f:d6:d1:74:d4:e5:63:6b:
                    ee:7a:d7:89:b4:34:70:43:4c:fc:d1:ed:b3:38:fa:
                    83:95:cb:df:fd:65:43:d4:8a:88:6f:37:aa:c6:18:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1E:03:47:6B:A4:94:1F:12:50:F5:F9:34:B6:C3:DD:A0:74:9A:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9736c069-f338-4c8e-9967-488916d08fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fee::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:80:b2:cf:31:29:11:ac:a1:4f:60:66:86:57:1e:4e:91:78:
         f0:bb:1b:50:2c:34:42:da:54:64:98:38:53:e2:fd:dd:8b:b2:
         39:f2:e1:f2:08:cb:05:eb:6f:ed:1a:b1:01:a7:67:bb:21:19:
         52:b0:ec:fc:85:aa:0e:90:2a:ba:a7:a2:ec:44:4f:fe:be:6a:
         35:ac:0d:a0:19:3b:5e:7d:aa:56:61:63:d2:77:cd:ad:7a:a2:
         8c:2b:00:f2:6d:c3:a3:e2:6c:78:92:ce:77:c6:80:a9:6a:61:
         1a:04:28:6d:e1:43:ef:fa:de:5d:a4:9f:47:25:f3:44:62:41:
         11:70:6f:2e:b9:cf:94:c8:2e:f4:22:d4:01:2c:51:cc:f4:0a:
         f9:2d:66:bd:07:f4:15:34:8d:e8:59:af:10:a4:a4:a2:91:30:
         b8:c6:f4:08:26:24:db:66:14:b2:01:01:e0:b1:23:eb:4f:b6:
         6f:f6:17:d6:3d:6f:ae:45:0f:fa:20:9d:0c:25:76:c8:d2:d4:
         bf:72:9f:52:3f:c3:d0:f0:46:59:b8:74:d4:0f:d9:3d:52:8a:
         19:c2:1c:2c:43:d2:b7:69:43:92:6c:c2:83:c0:f9:18:f5:75:
         08:cb:fc:b7:fc:a0:c4:14:0f:2e:92:ff:7b:e8:2e:a4:84:b2:
         96:85:e2:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:42:48 2026 by rpki-client