Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa
File:                     120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa (raw, json)
Hash identifier:          JD48YRWzC2cgUKV/AiF2EH0XOdAKVD/5sTJ2UubNSRQ=
Subject key identifier:   A2:B3:93:75:C3:68:E5:34:2C:1F:1B:8C:57:65:9D:F5:C8:03:FC:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       75183DCE106B3502A3855409B41C19DCFC725804
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa
Signing time:             Sun 03 May 2026 01:40:40 +0000
ROA not before:           Sun 03 May 2026 01:40:40 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:207c::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:3d:ce:10:6b:35:02:a3:85:54:09:b4:1c:19:dc:fc:72:58:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:40:40 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=d38b091e35b87093773e1f656a17dc41bd787680ee2562284bdb687c0f370710, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:ea:4b:4f:26:73:31:4f:6f:f2:78:bc:3e:
                    75:bf:fa:f6:f8:b3:4e:5d:6b:97:22:c8:bd:30:ad:
                    c7:af:86:d0:9b:16:be:83:13:d2:ac:70:7e:21:cf:
                    4c:05:a0:f1:f8:84:36:a5:a4:9b:53:20:ba:aa:85:
                    6d:99:34:d5:b1:d6:58:99:b3:ea:0a:ff:a1:6e:ae:
                    6d:74:4e:27:d8:f2:71:c5:12:f3:a1:e2:2b:ab:49:
                    14:c1:cc:cd:c6:48:7d:83:05:e1:02:79:36:d3:28:
                    d5:a9:93:cb:9f:33:13:25:e4:f6:e9:79:80:b7:5c:
                    23:f3:31:f5:00:ed:7a:ba:bb:4b:b6:d7:61:c8:07:
                    10:11:e6:98:f0:7c:9d:ff:43:e9:cc:7d:a3:6b:a9:
                    c6:cb:da:8b:d4:41:5d:02:f2:c5:d5:2e:01:bb:83:
                    10:23:dc:9a:92:74:79:37:fc:09:f2:45:17:a7:60:
                    f8:e2:b6:da:52:07:a1:49:27:ea:88:12:e5:f6:17:
                    04:91:d2:a5:9f:2b:62:22:3e:3a:28:24:a8:1d:96:
                    a1:e6:f8:4d:c5:dd:4b:e6:58:ed:90:ca:c0:9a:56:
                    8e:b3:97:79:21:22:c3:5b:f0:38:f7:2c:3c:a6:bf:
                    9f:74:5c:27:49:d0:d3:cd:62:5c:26:9d:4b:a9:30:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:93:75:C3:68:E5:34:2C:1F:1B:8C:57:65:9D:F5:C8:03:FC:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:207c::/47

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:8b:aa:3f:19:78:d0:c5:fa:3d:83:ad:1e:c7:6e:9e:57:
         95:56:5b:8f:02:b8:1f:2a:7d:3a:9b:2e:d6:9b:63:97:ce:86:
         a8:5c:75:d4:db:4a:51:e0:ee:59:2f:fa:62:dc:fe:51:8f:73:
         7e:e6:5a:13:89:68:e8:1f:3c:ed:e1:1d:78:5f:1a:13:48:3e:
         7e:07:11:20:57:00:fa:96:29:c5:f9:96:cc:fd:50:a9:27:e1:
         8a:6f:2f:ae:0d:f6:d6:74:1a:25:c3:62:6c:66:73:d5:b7:7d:
         3b:c7:9c:42:e9:f8:61:4a:e8:05:32:c8:68:62:d2:1e:a1:f5:
         c2:0f:ea:70:fe:ec:1d:90:18:59:b3:f6:45:34:9e:87:28:fe:
         2d:e9:f6:5a:da:99:8d:ad:fb:a1:c8:ae:39:3d:62:bc:7c:07:
         65:15:7d:bf:27:c7:b2:a7:be:f3:99:8e:7b:93:c1:fc:6c:01:
         a1:f2:4d:06:01:74:f8:26:d5:75:71:68:2b:1e:79:e2:57:4c:
         cf:5f:9a:89:c3:80:75:30:f7:cd:f1:c1:90:02:00:2b:ed:a1:
         8b:1a:ae:00:e2:1e:60:dc:f3:f4:7f:04:07:98:c5:aa:c6:a7:
         81:31:5f:20:cc:e0:0a:33:7c:36:df:51:6d:0a:11:98:ee:3a:
         71:4c:17:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 17:00:18 2026 by rpki-client