Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88bb3de4-d986-42b4-a44e-e7f9ecea84c7.roa
File:                     88bb3de4-d986-42b4-a44e-e7f9ecea84c7.roa (raw, json)
Hash identifier:          Q/gCFG9jw75gqJ2097YRQeb5otmjSXdQ8uBK2brZsQQ=
Subject key identifier:   96:57:81:9F:28:73:96:43:DD:92:27:09:56:D9:89:E6:0F:A4:E2:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7AC75C03628D098A275F67386E9604C1BE5F04E4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88bb3de4-d986-42b4-a44e-e7f9ecea84c7.roa
Signing time:             Sun 03 May 2026 03:30:09 +0000
ROA not before:           Sun 03 May 2026 03:30:09 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29f0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c7:5c:03:62:8d:09:8a:27:5f:67:38:6e:96:04:c1:be:5f:04:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:30:09 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=d3adbadf49c47af02e477997d7244aec40d9cc3065e4e61619a156333dcc2e4a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:a8:ae:4a:28:27:10:6b:21:c5:22:24:11:
                    89:ad:ce:9b:84:f2:a2:22:4d:32:e2:fe:ca:95:71:
                    5b:4c:88:84:8e:53:41:b6:bd:1b:52:a3:bb:10:29:
                    df:ba:76:42:fa:ef:12:1b:28:4a:c7:9e:c3:44:a1:
                    79:f6:37:17:e5:5e:06:fc:90:34:9e:8b:c7:1c:3b:
                    2a:ee:1a:75:ca:fa:71:68:0b:85:9b:e2:44:dc:86:
                    0d:b9:33:0b:40:96:8c:ee:f3:95:7e:83:f4:57:d2:
                    91:4d:06:b2:5b:ba:7f:a4:4a:c3:29:29:7f:94:c8:
                    8d:ae:3e:b0:e4:f4:88:78:07:78:3a:15:ed:4b:53:
                    fe:1b:26:5a:2f:db:38:4e:b3:dc:39:61:d5:00:c2:
                    99:ce:79:50:1f:23:23:e9:4f:1e:0c:7a:56:1d:c3:
                    2a:ec:ee:55:86:5a:35:9d:3b:e2:d2:3b:d7:1b:35:
                    63:c3:bd:6c:61:12:48:ca:9f:c4:0d:65:92:e1:98:
                    f0:de:ec:51:91:45:d5:e8:b4:d2:c7:95:88:41:42:
                    30:b3:d0:94:a2:97:3f:f6:5a:25:75:d8:ad:3f:4c:
                    37:60:57:aa:eb:e9:82:de:b3:12:a6:07:e9:f1:cc:
                    14:5e:01:d1:fb:44:eb:bc:a3:f6:65:b7:b9:99:d1:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:57:81:9F:28:73:96:43:DD:92:27:09:56:D9:89:E6:0F:A4:E2:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88bb3de4-d986-42b4-a44e-e7f9ecea84c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29f0::/47

    Signature Algorithm: sha256WithRSAEncryption
         84:97:f8:6b:3d:ca:b4:03:59:c9:2c:b5:37:4b:a1:bc:50:86:
         91:e9:20:eb:09:31:37:8c:55:ff:97:a5:6f:67:02:b7:02:e3:
         db:66:5d:88:1b:13:90:f3:12:05:1f:c0:d7:66:0c:cd:af:09:
         fb:54:74:25:4a:69:c3:d6:25:7f:a2:52:b8:e6:4b:13:83:be:
         23:47:36:0d:52:c9:2f:cd:7d:e8:46:7c:58:da:41:2f:ed:48:
         71:b7:cd:b3:7e:16:4c:2e:b0:64:45:cb:89:58:0f:4c:63:d2:
         02:7c:2e:0c:a7:ce:11:58:4a:a1:73:40:70:6e:78:2d:aa:27:
         58:da:fe:d8:1c:a1:13:85:2a:42:8c:be:15:5f:2b:17:c0:5b:
         4d:81:2d:58:56:c3:2d:e0:27:c3:55:ee:ef:3c:16:cc:da:6d:
         98:be:67:ee:78:59:11:04:7b:8e:b9:54:4d:42:7a:6b:19:af:
         92:fe:aa:d6:77:9c:81:28:cf:b3:76:29:df:5e:10:13:b6:af:
         e4:5e:89:6c:fc:ff:83:84:db:dd:5e:b6:4d:46:b4:21:14:90:
         14:af:a6:98:ce:d1:b8:dc:11:97:24:e0:8e:f2:f3:56:96:13:
         7f:96:5d:1b:ac:71:62:6c:09:b8:5a:16:a6:d3:92:c6:81:df:
         69:6a:03:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:48:20 2026 by rpki-client