Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10833ad0-bc88-4474-8b8f-9b13fb4ebd3a.roa
File:                     10833ad0-bc88-4474-8b8f-9b13fb4ebd3a.roa (raw, json)
Hash identifier:          CHJ3su/CdlS3h5G7clRTtA/HFsGTEi6k3PmMjybuf08=
Subject key identifier:   1B:87:8B:5A:34:9C:19:38:BC:BA:00:A8:8A:1E:82:88:65:BC:43:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       552039D0A35B798EF63D43EB21E473205C4CCC4F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10833ad0-bc88-4474-8b8f-9b13fb4ebd3a.roa
Signing time:             Sun 03 May 2026 00:01:21 +0000
ROA not before:           Sun 03 May 2026 00:01:21 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d7a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:20:39:d0:a3:5b:79:8e:f6:3d:43:eb:21:e4:73:20:5c:4c:cc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:01:21 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=9c41edb9a1a717b596e20e2f8528834ddc3a9b8c064c00124488ea22217ae4ed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:86:0f:08:f4:5a:f0:b2:92:23:73:5f:40:
                    d1:e5:02:54:fc:91:fe:ce:e2:81:f0:94:35:57:d9:
                    a0:55:d5:62:89:f4:51:1d:53:6b:5b:45:90:b2:3f:
                    31:80:de:ef:b1:02:0a:d1:b8:12:22:6c:d2:e9:7f:
                    c2:75:94:a6:62:ca:44:ff:3e:b7:93:b7:50:23:f7:
                    85:d7:6b:48:19:ec:83:9f:d7:9c:77:73:5f:7c:be:
                    27:0f:c1:e9:fa:e1:3a:8e:00:a2:8a:50:af:5d:00:
                    23:fd:e2:37:50:ea:64:66:8d:e3:e8:80:d9:c5:f6:
                    1f:c5:f6:0d:ee:9b:b9:d7:4f:16:c7:ba:37:b3:08:
                    64:dc:91:58:98:2c:5d:55:d0:87:f3:72:77:8a:09:
                    35:07:da:51:04:3a:94:95:44:3f:2e:d0:a0:09:3f:
                    50:d8:3f:88:09:7f:38:0f:c2:b2:8d:8e:5f:96:82:
                    08:52:84:df:25:ab:30:8f:fb:fa:ea:ef:e4:70:aa:
                    e1:9f:26:c2:52:b8:9f:e0:50:1b:81:0b:74:a8:21:
                    4f:27:c1:bb:81:df:d1:90:10:7a:e6:82:59:df:7a:
                    a1:07:6b:ba:47:10:4b:a3:ca:a5:a8:a2:52:04:26:
                    1f:d6:d5:5c:4b:e5:7a:1a:3b:7b:83:b1:1e:21:2f:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:8B:5A:34:9C:19:38:BC:BA:00:A8:8A:1E:82:88:65:BC:43:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10833ad0-bc88-4474-8b8f-9b13fb4ebd3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d7a::/47

    Signature Algorithm: sha256WithRSAEncryption
         94:af:26:75:91:b9:ec:97:84:ac:07:d8:1c:ae:87:c3:5e:a5:
         94:94:2e:78:0b:16:a2:5c:e5:dc:f4:42:21:99:1f:21:c7:2e:
         8c:f4:5d:66:eb:64:2c:0d:b0:be:96:8d:22:7f:82:fc:07:8b:
         66:ec:26:49:ca:00:56:c5:7e:26:87:bc:cd:aa:c8:d6:ce:05:
         fe:46:dc:0e:c0:79:4d:07:40:39:51:7b:53:69:93:b6:a1:d6:
         07:93:5e:88:a6:9a:3e:24:b0:8c:7e:a3:c8:e5:4a:a2:e9:33:
         c5:b8:be:05:93:88:9a:28:67:48:60:05:bd:97:b6:cb:db:30:
         f1:fc:91:48:3d:6f:a5:68:d3:19:10:c8:56:ee:40:74:2a:ab:
         9f:28:3e:1d:f7:00:4b:bc:b0:50:bc:a0:9a:5c:c4:f2:cf:e5:
         6f:28:dc:20:a3:35:16:15:4a:cd:c5:7f:5b:b0:59:41:86:6a:
         c9:9a:58:5b:92:f4:02:51:92:79:d3:67:d3:8c:ec:ba:d1:18:
         05:48:8c:0c:01:81:2d:25:e6:9b:7a:c0:74:ac:b8:37:dc:6d:
         89:14:5b:d8:72:b2:72:3b:93:9f:03:4c:2d:44:a2:3c:99:da:
         82:4d:a1:16:42:e1:72:20:91:18:d8:09:ef:b4:b7:87:3d:4f:
         26:f3:c3:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:12:05 2026 by rpki-client