Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa
File:                     a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa (raw, json)
Hash identifier:          eDXwRF0Vfs2btmcXq8cMiM8eA5mQZ/GGrsrRSEiZpjs=
Subject key identifier:   1B:2F:84:90:83:EF:82:5C:C4:DD:7B:90:B6:1F:DB:BC:C0:53:9D:5D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7A3FF7D934FC14EED65A52A5284C3095FB3DF4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa
Signing time:             Mon 04 May 2026 13:41:48 +0000
ROA not before:           Mon 04 May 2026 13:41:48 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c34::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3f:f7:d9:34:fc:14:ee:d6:5a:52:a5:28:4c:30:95:fb:3d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:41:48 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=5ecb7fba170e1f4984d4d29d219924b2be773595f0320d11f6d259905b0805de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:1d:88:5a:84:7f:ee:2b:b7:a5:b9:7d:2f:
                    6e:3b:f1:bd:c8:2c:f7:3a:37:33:28:fb:2c:b3:57:
                    57:b6:c5:66:dd:38:21:fd:bb:1e:35:62:c9:08:c1:
                    da:03:eb:73:80:5e:7d:62:78:06:f1:e4:79:b9:22:
                    56:dd:67:bd:3a:c9:7c:d8:f6:1b:68:1c:73:f5:4d:
                    44:39:3e:3a:bc:84:d4:46:20:a3:9c:ff:1f:30:47:
                    fa:e0:46:5c:d6:9e:c5:c0:be:ac:f1:62:5f:64:f1:
                    ee:3a:94:3b:db:45:55:c6:47:2b:93:b5:46:81:23:
                    af:26:2a:50:d7:f0:02:de:eb:b9:3b:58:b7:bb:4a:
                    73:74:82:63:72:59:d4:0b:4f:07:6e:1f:e4:ae:d9:
                    02:38:67:48:d3:22:24:60:e6:4e:a4:65:1c:56:89:
                    08:f1:dd:5b:6b:d1:13:96:99:e5:ad:13:d6:9e:d2:
                    a8:8c:c8:d9:7e:12:5f:58:98:14:46:fb:3b:04:e9:
                    ec:25:c1:88:98:f9:d7:c7:7c:02:67:9d:21:e6:0c:
                    b4:f4:4d:ea:f4:bc:c3:10:d5:07:9c:7d:49:2d:f2:
                    04:b8:86:9c:c1:c7:66:33:fa:74:99:08:6a:94:3b:
                    59:bd:8e:02:41:85:d6:af:d6:d4:cc:be:3b:7c:a4:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:84:90:83:EF:82:5C:C4:DD:7B:90:B6:1F:DB:BC:C0:53:9D:5D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c34::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:50:8a:06:1e:e9:e1:01:69:43:6f:44:eb:26:bb:b8:bd:
         c3:d1:0f:ae:17:6e:bd:ae:cc:fd:db:e7:0d:49:c4:a8:0b:03:
         b9:7d:1c:33:f9:dc:7e:51:fd:d2:f9:fe:c5:78:4b:3d:e7:79:
         29:7e:90:95:62:0e:6a:e7:ea:f8:c9:2d:57:da:4e:6d:9a:77:
         c0:1b:32:11:d2:b9:ff:c4:61:ff:7f:cf:87:14:3f:26:31:50:
         bb:49:9a:f2:2e:20:e7:6c:6d:72:d2:34:47:72:50:20:2d:74:
         1f:16:1f:0d:f5:4c:ea:d0:f1:c9:fb:65:01:60:94:86:c1:45:
         0d:4a:24:99:de:38:df:3f:e8:f5:b1:9d:fe:cc:93:a6:fb:66:
         48:10:9b:0f:96:df:03:3a:cc:cc:15:f9:14:d0:87:ea:c4:9d:
         38:0d:af:4d:97:f6:2d:0b:ba:0d:2b:4f:82:29:23:55:bd:31:
         c4:61:00:ce:7d:bb:eb:42:20:f6:41:8c:79:bf:2a:4c:d7:5e:
         ab:ce:26:06:ea:75:4f:7e:4e:40:b3:b3:90:2f:33:9e:08:00:
         43:a5:b4:9d:9c:0b:88:57:de:68:d9:0d:9e:73:ec:d1:77:83:
         50:3c:4b:00:a3:86:0a:a0:d0:da:69:b0:19:51:9c:11:74:ea:
         fa:f9:26:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:44 2026 by rpki-client