Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac59fab2-28da-409d-94a8-d0b367e247a0.roa
File:                     ac59fab2-28da-409d-94a8-d0b367e247a0.roa (raw, json)
Hash identifier:          uEkeQ7ZIQBruWfXZVcx+jZUWRMLaPr4xLJ2qEWCyv+I=
Subject key identifier:   62:36:3C:69:B9:CE:89:12:0B:36:46:82:7B:8F:2F:7E:FF:A3:C3:3E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       089438BD69D3E8224DE93E8BB1905E1C1CC86905
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac59fab2-28da-409d-94a8-d0b367e247a0.roa
Signing time:             Mon 04 May 2026 10:41:07 +0000
ROA not before:           Mon 04 May 2026 10:41:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3724::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:94:38:bd:69:d3:e8:22:4d:e9:3e:8b:b1:90:5e:1c:1c:c8:69:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:41:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=89d9305641d57a5d4a935d9e13899f3380c9c8dab01136106c467c4343fbe1b9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:ea:0d:bb:ac:c3:4c:ec:af:7e:1b:a1:94:
                    07:83:c1:27:c9:3f:31:1f:ba:1d:77:cb:91:4b:63:
                    dd:54:f7:a2:08:83:28:28:3c:9a:25:d4:da:7a:a5:
                    0b:b5:47:b7:43:e1:ba:31:6f:2b:4c:b2:7f:15:0f:
                    f3:c5:79:c9:c4:4d:50:f5:49:2d:d4:5e:de:85:6a:
                    43:6b:3e:e8:6e:af:c3:78:57:96:1e:85:c1:a7:fb:
                    fe:f6:36:c1:82:ad:c8:17:43:f4:63:4d:d9:55:83:
                    7c:b5:e7:5b:30:b9:15:26:c2:c7:cb:d4:82:8f:0e:
                    8d:4c:b2:2f:43:bc:a4:30:be:ec:95:3f:81:32:33:
                    1a:c6:32:11:2e:d6:ee:93:da:91:2d:67:85:f3:2a:
                    db:b0:60:0e:34:40:f0:08:14:d8:90:3b:33:56:65:
                    be:15:0a:44:f7:e1:7c:bf:a4:c2:67:44:bd:77:62:
                    a7:37:50:2a:fc:61:e5:6c:ce:7d:04:e1:21:2a:e0:
                    57:e6:31:3c:bd:51:59:b4:39:4a:fa:07:7c:f9:85:
                    04:f4:23:79:22:35:d8:39:d1:5a:24:1d:47:f5:c9:
                    da:4b:51:a7:1b:9f:f4:da:51:cf:e3:af:25:a4:48:
                    f5:14:ab:80:6c:ca:d9:7b:4c:1f:3c:b4:fd:f7:05:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:36:3C:69:B9:CE:89:12:0B:36:46:82:7B:8F:2F:7E:FF:A3:C3:3E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac59fab2-28da-409d-94a8-d0b367e247a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3724::/47

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:e8:5a:43:e6:ad:45:03:9d:58:77:19:b4:36:92:76:9f:
         4f:04:0e:46:aa:90:76:80:d3:29:97:6c:a4:ef:ba:35:69:f3:
         a1:e0:d6:ce:f3:d4:04:67:ab:07:41:0f:53:99:c1:0f:a2:6a:
         e5:71:4d:29:0c:36:4a:18:c0:6f:49:b3:7c:51:62:e5:3b:ec:
         46:29:98:20:91:05:21:51:79:02:1a:0a:fa:cb:9b:57:c9:c8:
         fd:e7:a8:a7:9f:69:66:e6:a8:00:00:94:e4:9b:fb:3f:35:1e:
         8b:eb:27:6a:ce:96:78:28:d3:ae:45:f1:e9:16:4b:23:63:b6:
         29:4b:d7:14:91:d8:5b:4d:1f:73:14:0a:73:87:2e:17:c7:fb:
         4c:1a:bc:5c:80:f0:61:d5:94:57:4e:c9:53:af:d9:10:db:69:
         54:4e:62:96:a6:f0:7e:e0:50:14:e3:18:9f:08:fb:09:5d:63:
         69:bb:76:b3:6e:3c:e2:09:a8:0e:b2:b1:21:48:6b:ea:5c:65:
         02:26:41:73:9a:17:eb:a4:da:2c:0d:b8:db:b3:14:03:1d:5e:
         32:9a:1d:76:6d:09:e0:e6:05:84:29:ac:07:7f:c8:7c:35:66:
         6f:11:14:ba:f7:5d:3e:cd:e0:a9:f9:50:63:b6:3a:3d:da:f1:
         34:a1:58:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:37 2026 by rpki-client