Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
File:                     096bfd2b-b402-4c0e-99cb-c87936877dc0.roa (raw, json)
Hash identifier:          HCFWQlahxBOxfpHfrEF4IqvpYOx9ArJwg66/YiVuZB4=
Subject key identifier:   56:55:97:B7:AD:F2:EE:D8:CC:CC:82:E0:3D:7A:C3:2B:2B:60:1E:53
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B699E11678F46635DED250B5F1BEFAA5C5CB1D6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa
Signing time:             Sun 03 May 2026 00:50:11 +0000
ROA not before:           Sun 03 May 2026 00:50:11 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:69:9e:11:67:8f:46:63:5d:ed:25:0b:5f:1b:ef:aa:5c:5c:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:50:11 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=00ee1735564bec08269225e77bfab57d977b8dfb6d584a13a40132d90a6bd073, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:0d:85:50:08:e0:15:66:a8:9b:19:43:d8:
                    7b:bf:5e:51:cf:63:36:3e:7e:99:d1:6e:90:5c:28:
                    92:8a:ff:c7:aa:e9:c7:51:6a:a3:7c:c2:3a:98:dd:
                    7e:d0:f8:25:66:e1:ee:50:07:23:d8:2b:cd:3f:09:
                    37:a9:4e:2d:58:a1:7a:29:be:ac:61:12:24:63:40:
                    43:69:78:ad:57:b2:47:30:a8:78:e0:31:20:30:23:
                    da:30:8d:28:ee:e9:e7:8c:10:d4:d5:46:73:e6:43:
                    ff:1a:8d:9a:e7:bc:44:47:f8:e4:e4:55:7d:d7:60:
                    da:34:ee:fa:16:55:6f:94:a2:67:19:81:f5:9d:08:
                    6d:0f:c2:ea:78:04:c5:c3:f9:23:2f:51:ee:11:30:
                    8d:4e:02:e3:ea:87:1e:5c:67:71:a2:92:45:0d:13:
                    1b:2a:0e:22:92:90:be:10:51:0f:9b:36:29:fe:bd:
                    ed:9f:2b:e8:6b:03:6b:fc:ac:79:a4:82:9f:b2:d3:
                    3e:a4:68:ff:cc:c9:b2:54:eb:f9:7a:60:b1:d1:4a:
                    e1:0e:13:24:f8:95:22:3e:a9:61:61:e2:0a:47:c8:
                    1a:54:58:92:75:2a:bc:50:86:78:a9:3a:e3:91:37:
                    aa:c0:80:8a:43:43:35:84:cf:f6:bf:5f:03:37:07:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:97:B7:AD:F2:EE:D8:CC:CC:82:E0:3D:7A:C3:2B:2B:60:1E:53
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/096bfd2b-b402-4c0e-99cb-c87936877dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:44:9e:00:72:d3:ee:e4:c1:32:ed:87:e0:29:6c:8d:2a:
         ed:2e:a2:db:99:66:90:1d:a6:03:92:7e:ad:23:b2:26:ef:0b:
         b0:f6:07:85:a3:8a:94:f3:d8:fa:9a:08:49:a7:3c:73:24:34:
         43:05:f3:63:77:ce:07:03:57:0c:7f:af:c0:f7:e3:09:44:2c:
         11:d2:23:c2:2b:80:5e:ae:d8:97:a8:cd:74:d1:21:a4:f7:24:
         21:ce:6f:d1:02:e8:01:67:01:04:bc:9c:33:e2:b0:06:b0:d2:
         9f:c0:86:93:94:12:21:31:35:51:b1:17:e6:2e:8c:fa:5b:f1:
         94:49:3e:83:a4:ea:f5:21:50:ac:8a:f4:48:f7:ca:90:dd:6f:
         ab:c4:1f:58:fc:5d:61:b7:c9:4a:74:d3:dc:e4:34:02:23:5b:
         9b:e5:52:09:f2:dc:75:21:2f:4c:be:ab:cb:d0:8c:89:e1:f0:
         7c:60:6f:82:36:c4:95:b0:33:8b:4c:b4:68:21:5b:66:a7:77:
         74:0e:b6:45:65:0b:97:88:fa:33:49:73:11:d1:2c:5d:79:ff:
         e2:81:15:ae:9a:9d:3a:7a:be:d7:d4:24:2e:1e:6a:3b:b1:16:
         c0:b9:d3:1c:15:f8:c8:94:8b:73:62:40:9b:18:36:71:f1:58:
         eb:7f:e5:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:55:29 2026 by rpki-client