Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ad68a1b-4385-414b-9416-3ab41f3c8853.roa
File:                     1ad68a1b-4385-414b-9416-3ab41f3c8853.roa (raw, json)
Hash identifier:          2pSs41Uy9zC5LcqBzESoMz/bUPr4F8tEpHSkDpBm+HU=
Subject key identifier:   9F:F8:BD:11:CA:06:E9:BB:6A:40:51:D4:82:1E:EC:AD:84:D1:46:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46D37FE8D0813C943F2C25E7350DBBAC6B852D63
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ad68a1b-4385-414b-9416-3ab41f3c8853.roa
Signing time:             Sun 03 May 2026 02:41:21 +0000
ROA not before:           Sun 03 May 2026 02:41:21 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2447::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d3:7f:e8:d0:81:3c:94:3f:2c:25:e7:35:0d:bb:ac:6b:85:2d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:41:21 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=26385ff2d3be80d57ca07217b5d6d1b5de2008312370a94ed292005b8f1d8335, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:5a:0f:20:88:7e:a7:a2:14:f5:66:74:11:
                    ae:ab:04:1d:f7:e8:50:ff:6f:ec:08:5d:ee:38:37:
                    12:27:cf:5c:72:2c:54:b1:2f:bf:26:12:2f:52:13:
                    cf:aa:4f:f3:e1:39:2e:ba:85:c4:7f:a3:c2:bf:bc:
                    4b:fd:ff:96:70:aa:6d:8e:d0:86:a9:21:4c:1b:2f:
                    83:bb:30:25:ac:17:3b:56:9e:77:4d:f8:af:6e:35:
                    97:83:b5:8b:27:6b:8b:71:be:af:68:26:7a:de:63:
                    12:3a:85:4b:1f:8b:13:79:6f:65:35:99:b6:fb:e4:
                    cc:fc:b5:48:a7:be:1b:4c:ad:3a:48:6e:4e:ef:fa:
                    32:d1:70:d6:36:a9:49:19:7c:1a:b7:f0:fc:85:cb:
                    a7:0a:8d:3d:81:d7:ce:aa:ab:97:3b:ac:7a:cc:00:
                    6d:ef:99:40:04:58:73:a3:96:5f:08:d3:ce:af:79:
                    6d:fc:e5:b1:a0:d7:27:5d:5d:96:50:dc:17:b1:a9:
                    d5:6a:90:f3:69:4d:8a:e7:b3:0a:72:00:f1:f1:ab:
                    86:b7:c6:94:f7:9e:8e:a4:84:61:e6:a1:bf:95:58:
                    62:98:63:4c:dd:ba:30:6c:6a:98:07:87:44:0f:d3:
                    d5:ce:18:5c:8a:fc:27:22:45:15:20:ea:9f:2d:63:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:BD:11:CA:06:E9:BB:6A:40:51:D4:82:1E:EC:AD:84:D1:46:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ad68a1b-4385-414b-9416-3ab41f3c8853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2447::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:8b:37:eb:15:a2:4c:46:aa:22:64:97:3e:b4:39:7a:e4:
         3d:80:b1:50:a8:dc:a7:ec:9f:c4:d9:05:0c:b2:39:fd:7b:46:
         49:3a:3c:89:33:d4:0a:c8:ab:36:1e:94:10:f2:af:64:fa:aa:
         ee:60:3b:f8:12:d3:ca:ff:d1:01:c7:ff:ee:a8:74:a2:aa:1a:
         7a:a2:03:2b:ed:92:4e:d7:f0:84:ba:95:5e:1e:44:bf:e5:6f:
         b7:09:2f:18:92:31:db:93:0a:52:7f:a7:cc:4e:2a:58:62:5e:
         55:5a:21:e8:f4:b8:5a:07:45:1f:da:0f:2e:0a:e8:19:09:38:
         ce:69:a2:94:a6:7a:4e:b8:f6:52:6b:b8:cb:d3:87:71:b6:b6:
         f8:30:dc:fc:8b:5d:67:1a:ff:35:a2:fd:07:2d:cf:2d:cb:6b:
         8a:13:ad:81:3d:b3:86:09:dd:61:40:1c:f9:b9:29:62:07:1a:
         72:91:fa:68:27:08:c2:ad:cf:2e:c3:f8:c4:25:78:30:98:7b:
         60:bc:26:4b:0a:d4:06:c5:0a:77:bb:f7:0f:05:84:ce:75:8f:
         fc:dc:9c:7b:08:2c:cc:a0:6d:4f:ce:f5:96:d8:ef:a1:6c:36:
         a8:fd:bd:20:76:47:19:ed:a5:cc:9d:07:64:da:8c:dc:73:d4:
         94:c0:ef:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:32:24 2026 by rpki-client