Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa
File:                     ba305e32-6888-4527-aefd-7ab542971786.roa (raw, json)
Hash identifier:          mHRR7UQXx6LikDn7Q+JAKnLxA7llxnijZKibBz7NsYM=
Subject key identifier:   FE:FD:7C:B0:66:6A:5D:FE:9D:66:F4:9A:69:18:34:66:97:B3:83:F3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       19A51BB330C08A2C89C3EEADA7910BC37B5F51
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa
Signing time:             Mon 04 May 2026 10:02:07 +0000
ROA not before:           Mon 04 May 2026 10:02:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:1b:b3:30:c0:8a:2c:89:c3:ee:ad:a7:91:0b:c3:7b:5f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:02:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=b02cc36d9ee9717768c86b1a15c84bfa0db9b52290ce1cd6c20b34790ce8f93c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:4b:3c:8e:7d:3d:b5:4f:36:73:04:c3:06:
                    f4:15:ba:8d:17:50:27:14:d2:eb:fb:b8:73:53:7b:
                    c5:0e:ef:61:82:c9:7a:78:ed:1e:06:a9:37:97:c4:
                    6f:de:93:1c:b6:22:4b:99:71:85:43:1e:0d:55:14:
                    9f:44:97:29:82:c2:9b:cf:e6:99:75:0b:4a:75:a2:
                    e2:c3:f6:41:94:f3:fd:ec:15:c0:d0:f6:15:c1:2b:
                    8e:6b:84:e4:94:05:a4:81:b6:cb:61:dd:b8:e8:9f:
                    75:63:4e:7e:07:55:3b:da:f8:19:4f:94:48:7c:35:
                    e3:2a:c1:85:b6:4d:3e:e0:c7:9c:d9:07:cd:34:fd:
                    69:37:a1:df:18:15:1f:ac:7b:56:29:5c:f4:ee:5a:
                    cc:f5:c0:43:e7:bf:26:8b:fe:5a:b9:b3:60:b6:56:
                    d7:57:3d:cc:9e:e5:a8:0c:58:1c:42:3e:8f:9e:04:
                    75:30:ce:05:ad:1a:cd:bd:4b:61:86:5f:b8:8a:fc:
                    a7:8c:2f:93:a0:81:11:28:9c:24:6a:5d:99:2e:39:
                    d1:cf:99:cc:64:e0:e8:1e:3c:51:9f:98:0b:a5:de:
                    d4:3e:44:69:d6:4c:df:a3:c7:bd:0c:31:31:0a:7f:
                    9b:e0:53:14:58:10:62:f9:75:7b:b5:a2:e1:a4:43:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:7C:B0:66:6A:5D:FE:9D:66:F4:9A:69:18:34:66:97:B3:83:F3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:31:76:e5:c2:ba:f2:fd:76:84:9d:8a:9d:5f:9a:91:a2:
         ad:94:69:1b:c6:79:9a:75:6c:0c:f5:89:5f:f2:55:07:84:d1:
         53:20:ad:0f:2a:0f:d5:5c:4a:14:cc:98:50:be:21:68:e4:fa:
         97:60:24:74:f4:42:9d:d4:e8:c1:21:d4:f2:57:0c:7a:90:85:
         7f:bb:ae:d2:54:66:29:3f:3b:cc:76:da:94:a5:a7:98:81:2c:
         95:60:93:7f:26:73:25:43:78:1d:f6:e0:95:74:82:a5:f2:b0:
         1e:4a:c4:37:f2:72:73:b8:4b:a0:bf:19:b4:07:7a:ac:5c:03:
         3f:67:e5:ed:19:3e:53:6d:1b:f6:11:5d:e8:8b:5b:cf:15:5f:
         eb:46:2b:06:06:24:1d:bc:fe:53:2a:b6:37:bb:ed:64:c1:3d:
         f0:cc:2c:46:8f:13:9b:02:ae:31:78:8f:84:7c:4b:23:a6:a0:
         59:0c:9d:b5:95:9c:0b:05:d7:c9:23:04:b0:01:9c:38:23:90:
         95:5e:cf:d6:63:66:e9:03:86:7f:5b:c0:70:c5:94:7a:f1:ff:
         97:12:97:5d:55:fd:e0:34:30:93:81:09:91:24:ca:52:36:02:
         f1:3d:68:5a:ac:e5:77:8d:34:2b:e5:26:90:c0:b7:50:9e:d6:
         91:e2:c7:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:39 2026 by rpki-client