Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa
File:                     26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa (raw, json)
Hash identifier:          WkmzQTAa7hZ1G2YRd053G0jJamccsExnoicPgx9MIW4=
Subject key identifier:   C6:A1:61:87:7F:23:95:52:E7:41:F5:8B:55:8F:58:1C:29:2A:AD:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       701CC9E42479293CD3E2FF9C4F12F617B2CEEFC9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa
Signing time:             Sun 03 May 2026 00:41:31 +0000
ROA not before:           Sun 03 May 2026 00:41:31 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3262::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1c:c9:e4:24:79:29:3c:d3:e2:ff:9c:4f:12:f6:17:b2:ce:ef:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:41:31 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=ed5d8860e522b05b3027974b54f26c1862313e2bcf607f5ab6ebbd220a0f1080, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:e8:30:c7:01:7f:0d:8d:eb:5f:45:45:ab:
                    bb:8f:41:d2:98:18:81:73:f5:4e:11:bd:3e:f4:04:
                    9e:7e:a1:16:92:57:86:40:d7:61:55:76:88:36:78:
                    8f:29:64:e8:4c:0e:72:2c:3a:05:75:c5:86:3f:3b:
                    5d:7e:b3:2f:0b:f4:34:20:97:73:55:48:c0:f4:91:
                    2b:12:03:16:d7:19:2a:73:a3:91:16:77:65:e8:f1:
                    cf:56:77:01:d6:75:7f:7a:0f:e5:eb:4d:0d:31:1e:
                    f4:9c:08:f3:86:01:ac:f7:a6:e6:5d:22:16:0c:4f:
                    db:91:88:d1:ba:e6:ac:9f:81:06:83:00:3e:e8:ae:
                    70:6d:36:21:02:4e:96:0c:a8:17:c5:d3:c0:e5:cf:
                    bb:f9:68:76:56:c6:46:33:2c:e6:79:ed:ad:e0:0b:
                    a9:93:1d:16:1b:5e:a8:a1:1b:1f:cf:e2:db:51:bd:
                    51:cb:26:6e:55:88:3d:9d:48:b2:c1:f7:37:3c:cc:
                    86:a8:74:a9:2f:c7:cf:42:a3:4d:fe:90:9a:ab:c5:
                    0e:7b:df:96:05:eb:9b:29:2b:6b:e5:c8:97:96:63:
                    13:85:fe:f8:6a:85:2d:b5:23:24:52:38:e9:18:d0:
                    95:07:49:90:84:f2:85:24:2e:22:14:55:6f:67:09:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A1:61:87:7F:23:95:52:E7:41:F5:8B:55:8F:58:1C:29:2A:AD:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3262::/47

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:c9:08:3e:b5:55:54:7c:4d:59:43:81:6b:a2:4b:59:56:
         bb:a8:95:e7:c1:4a:8c:c4:a4:b1:78:ed:7f:46:c1:d0:37:72:
         85:d3:ff:ac:89:90:e2:3f:03:40:e4:a5:5f:25:69:7a:1a:39:
         26:94:40:34:a5:72:40:bd:83:57:1a:56:43:54:45:00:1b:5d:
         37:02:53:e5:32:2b:80:f8:24:b6:66:af:68:e2:59:b4:56:ed:
         5d:cd:93:ec:1b:d7:8e:59:8b:64:df:ba:02:a6:1f:60:f5:59:
         fc:89:13:da:f0:c1:72:f9:ea:13:b3:79:ee:1a:71:8b:c4:2e:
         ef:b5:62:0c:44:20:19:67:16:5d:93:d8:31:c5:b6:6f:50:31:
         f0:3f:aa:ff:b2:ff:90:2b:ad:5f:2c:aa:d7:ed:31:65:36:47:
         00:e6:2c:1d:0c:13:a6:96:ec:c3:5a:db:fe:fa:96:3e:5e:3d:
         c2:f3:aa:59:65:00:6c:45:ca:c5:15:15:77:94:61:92:9b:0e:
         90:f2:7e:f7:12:44:89:bb:f7:5f:ad:6d:e3:80:44:77:e7:47:
         70:0a:ce:96:9d:6b:dc:b1:65:1b:a3:65:cf:8c:5e:ec:8c:17:
         65:f7:e4:c5:e6:dd:1c:74:20:9e:cc:1f:b3:74:0f:df:a6:92:
         9e:c9:b8:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:24:39 2026 by rpki-client