Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f754f-a534-4830-b5ef-097b675b24f1.roa
File:                     8b8f754f-a534-4830-b5ef-097b675b24f1.roa (raw, json)
Hash identifier:          o9xkVPeE5b5d9+WwgOtYh6teA4PzLTdZckXTQD312/Q=
Subject key identifier:   98:99:16:95:65:D1:2D:21:DA:1C:8B:AE:A3:23:68:F6:57:DB:DB:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       719A27518B668068ED34E97C56D42CE0387B48D6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f754f-a534-4830-b5ef-097b675b24f1.roa
Signing time:             Sun 03 May 2026 02:30:58 +0000
ROA not before:           Sun 03 May 2026 02:30:58 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:27ba::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9a:27:51:8b:66:80:68:ed:34:e9:7c:56:d4:2c:e0:38:7b:48:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:30:58 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=4b2c303f98e8584ec49c619d37b00fb0799be0da7035464e73f6c0a9bb71f3e3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:f9:e5:3f:0e:18:1f:e8:c3:6d:b9:61:36:
                    16:8f:f0:92:3a:6f:5a:4c:b1:dc:79:f9:3c:ec:36:
                    65:d1:4a:2a:1a:fe:34:83:f6:8f:58:f0:a3:69:9a:
                    55:47:e7:9b:f0:e2:c0:75:d7:da:02:46:fd:7c:a3:
                    60:ad:95:72:66:42:bf:f3:b7:33:82:08:5c:0e:c6:
                    38:64:10:2c:9a:53:d8:c0:cc:67:33:74:61:40:f4:
                    44:78:e8:93:e1:70:dc:26:b5:b0:80:98:b6:79:23:
                    40:c4:bc:ec:2d:e7:23:26:3d:75:e6:39:4f:50:3c:
                    11:a1:4a:46:f6:c3:6a:b0:a4:fb:a4:f8:96:76:32:
                    e0:59:5e:fe:9d:34:28:54:1f:13:43:86:3e:0c:6d:
                    02:3f:1f:5f:c3:02:70:7d:6a:74:c8:3b:cb:eb:fe:
                    95:fd:d8:e2:59:3b:c3:46:e8:1b:79:28:7f:4d:6d:
                    88:16:f9:49:01:c4:00:20:99:e0:2d:de:4b:a4:e4:
                    98:d7:bc:c1:2b:b1:3b:cc:b3:5c:76:c2:cc:61:b7:
                    5f:43:ae:12:ba:c5:34:21:c2:12:f2:26:65:68:00:
                    0c:42:0e:98:22:1c:d4:bc:7f:20:f2:72:0c:33:3b:
                    9c:f8:ff:f1:4f:e2:29:99:ad:e2:cb:82:a9:35:94:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:99:16:95:65:D1:2D:21:DA:1C:8B:AE:A3:23:68:F6:57:DB:DB:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f754f-a534-4830-b5ef-097b675b24f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:27ba::/47

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:e7:26:c4:85:cd:ec:99:6a:d3:f6:56:ed:36:7f:6e:77:
         40:a0:27:30:32:83:17:16:45:c7:aa:b0:32:02:47:85:a3:d6:
         11:36:1f:2f:56:b4:af:5f:0a:80:76:6d:10:8b:f1:0d:10:1d:
         c7:fb:6e:18:cd:39:00:56:1d:fb:af:99:c9:eb:47:ba:a7:d7:
         fa:a0:a4:56:39:a0:1d:10:d5:74:96:eb:71:91:6a:f3:9f:34:
         2e:56:a3:79:94:8b:35:a1:2a:81:3d:47:1c:e3:8f:83:50:fd:
         a1:18:31:90:94:2b:8d:8e:7c:ae:c6:00:7f:98:14:7a:df:ce:
         2e:99:6f:01:a4:a2:9e:34:da:17:9d:41:ca:29:9f:21:57:5b:
         6e:03:a0:eb:0a:59:46:65:67:ff:2b:db:97:b8:62:1e:4d:89:
         a6:07:2a:82:29:97:91:09:85:f5:4e:98:67:ee:d8:47:17:7d:
         4a:98:89:48:5d:c4:38:58:73:75:35:5a:92:12:d3:2a:e7:4f:
         2c:d7:4e:2a:e7:f8:5d:06:a2:4f:02:15:39:76:e3:e9:37:d1:
         2b:f7:08:12:8f:73:25:55:c1:52:17:fb:b1:dc:2a:38:05:46:
         45:a3:e3:0c:69:22:c4:d8:f2:e2:a8:58:3e:20:00:b3:a3:75:
         c6:9e:20:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:03 2026 by rpki-client