Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f2e8306-c9b0-4ba9-b8e0-b9ea92af30fb.roa
File:                     4f2e8306-c9b0-4ba9-b8e0-b9ea92af30fb.roa (raw, json)
Hash identifier:          DZfjFbuBuOiXfop9+KMmS5/4tEQA+UFgrvDZrJnxtMU=
Subject key identifier:   45:57:5C:33:60:04:E8:35:90:36:16:1D:3B:B3:29:C3:2E:D7:C3:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AB0A670FD7342A005B8B08A9661471FE40E8C59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f2e8306-c9b0-4ba9-b8e0-b9ea92af30fb.roa
Signing time:             Sun 11 Oct 2026 04:40:43 +0000
ROA not before:           Sun 11 Oct 2026 04:40:43 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c5e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b0:a6:70:fd:73:42:a0:05:b8:b0:8a:96:61:47:1f:e4:0e:8c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 11 04:40:43 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=74fcc6a554dc1e3529b37a0d27a6506ff4f6052b938e4208851342d56fb8a158, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:58:6f:ea:bb:c5:fe:16:b5:62:f1:5c:2c:
                    ca:36:27:05:54:c5:1b:47:09:00:c0:88:e4:e3:a8:
                    a6:df:0c:d1:40:85:c7:11:fc:30:0a:4b:df:85:a3:
                    d2:92:8a:84:68:c6:5c:41:e1:8d:9d:15:ab:d7:d2:
                    2e:e7:a5:70:f3:4e:a2:c5:cc:be:64:e7:3c:66:bb:
                    ca:f8:1a:d0:dc:f9:cb:7b:f1:5f:c8:86:8b:39:97:
                    d3:3e:b2:4a:53:52:2a:b2:ba:54:50:b0:5b:98:6a:
                    c6:d9:64:1b:bf:a1:87:47:38:35:15:c7:03:69:5e:
                    6d:e4:db:e2:33:56:d3:29:dc:7f:f9:99:cc:2d:a7:
                    05:c0:a3:54:a8:1b:ba:72:ea:f5:3f:8c:66:c0:5d:
                    73:19:7b:ba:24:ef:cd:db:2c:1c:7c:60:d4:df:3c:
                    9b:08:02:6f:e3:78:53:e8:d4:cd:72:d2:cd:cd:bb:
                    f3:58:49:9f:62:96:28:9b:54:51:58:b4:79:dd:03:
                    d5:bf:8c:1c:a5:23:fe:6d:9d:73:8d:48:6c:38:02:
                    6e:98:0f:47:2e:e1:ea:62:3f:bf:b5:67:23:2a:2c:
                    46:af:3b:52:08:9c:ef:7e:f8:fc:31:29:11:d6:5f:
                    c4:4b:28:6f:87:1d:4c:5c:54:c6:87:bc:76:c3:79:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:57:5C:33:60:04:E8:35:90:36:16:1D:3B:B3:29:C3:2E:D7:C3:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f2e8306-c9b0-4ba9-b8e0-b9ea92af30fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c5e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b7:51:61:9f:6b:b2:2e:30:61:d3:8f:1a:1c:81:1a:78:c7:e7:
         b9:89:f4:40:86:f1:5c:67:22:b1:32:6a:ae:ff:04:79:fa:28:
         92:8c:81:58:9e:54:24:06:21:fd:3c:bd:5b:04:0a:a4:3c:d9:
         4b:d2:ea:4b:11:a1:2f:1c:0e:b7:83:7b:85:90:73:69:1f:a9:
         e6:86:7d:83:d4:0d:8f:f0:65:20:73:44:85:dd:b5:5f:80:21:
         f2:7c:7d:64:61:07:96:ea:b3:80:2b:d9:88:8d:9b:0c:36:21:
         ab:c3:f9:e7:c9:f5:b6:f5:b5:e7:53:4a:6c:5d:38:63:84:4d:
         e6:4c:8a:84:90:45:67:1c:fe:44:a1:84:f6:22:54:e0:53:00:
         21:de:4d:32:a4:8b:a6:46:4a:87:3a:3a:75:43:61:10:9b:f1:
         fa:0e:bb:4b:0e:fb:45:7c:49:42:51:6a:4b:01:2c:05:cf:da:
         b9:f1:ba:75:94:8e:fb:fc:6c:64:a9:70:f6:62:25:e4:02:0a:
         bf:45:b7:11:9c:cc:de:28:ff:8a:c6:cb:06:ee:05:73:b7:44:
         d5:e0:a9:3a:94:b3:fc:b4:96:cf:2f:79:98:b6:0a:e1:a2:f8:
         4e:4f:84:e3:e1:a0:01:b1:a7:2e:c3:02:11:63:a7:0f:26:29:
         97:8f:9e:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:19 2026 by rpki-client