Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c6cee66-66a7-4777-bb5c-e3d95801bc39.roa
File:                     8c6cee66-66a7-4777-bb5c-e3d95801bc39.roa (raw, json)
Hash identifier:          +wyWKNOgTSWiRnKCeR6SjD6Sclm530XXaGzCIscTZmw=
Subject key identifier:   EE:DC:FD:3B:05:9C:51:4C:9C:C5:CE:16:1F:6C:92:D2:74:95:BD:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76876B6D1A9627353E475A71308DBFD9E3B9AE28
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c6cee66-66a7-4777-bb5c-e3d95801bc39.roa
Signing time:             Sun 03 May 2026 02:31:01 +0000
ROA not before:           Sun 03 May 2026 02:31:01 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3178::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:87:6b:6d:1a:96:27:35:3e:47:5a:71:30:8d:bf:d9:e3:b9:ae:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:31:01 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=99482ee59db17ad91bd419001fcc5a4a48d55f38711b68c221c812ff7919b974, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:5e:54:5e:c6:23:4a:84:85:05:0a:01:4f:
                    d0:75:f9:b7:5b:0b:5a:c6:dd:31:74:d3:98:ce:70:
                    90:05:36:32:80:47:50:47:85:55:f8:08:63:49:62:
                    2f:dd:c2:0b:f4:fc:11:12:11:db:e4:7b:4f:9f:74:
                    c5:c8:8c:7c:e9:93:f9:f2:ff:b0:be:36:d1:12:61:
                    2f:3e:4f:ad:ae:92:de:1b:27:75:6e:d5:0f:e3:47:
                    be:b9:20:8e:0f:a5:76:23:8a:61:f6:75:4b:34:8d:
                    80:73:a8:e3:a5:56:9d:68:75:ca:92:1b:e6:61:d5:
                    04:be:5f:43:39:45:92:94:4b:2d:3c:6a:0c:ec:58:
                    e6:96:ec:d5:ee:47:93:c1:56:6b:39:d2:99:3d:65:
                    d1:90:62:fa:8d:46:57:0b:bb:bf:00:b4:0d:e8:fe:
                    64:52:6b:af:66:db:29:5c:63:c6:4e:47:f4:d6:69:
                    2d:7a:40:44:e0:87:87:4b:90:82:30:40:e6:51:d9:
                    25:52:89:51:33:e4:87:3a:2e:54:f8:39:65:d4:ef:
                    fa:6d:a6:7b:e6:f7:c4:95:52:33:3d:0a:30:88:cd:
                    e0:31:1a:7b:c9:f9:47:75:66:81:b8:a4:00:2a:28:
                    81:cc:48:fc:f3:b0:f7:36:60:c0:c9:d0:ab:f9:ab:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:FD:3B:05:9C:51:4C:9C:C5:CE:16:1F:6C:92:D2:74:95:BD:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c6cee66-66a7-4777-bb5c-e3d95801bc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3178::/45

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:b1:58:de:7f:1c:76:27:92:fd:1e:63:36:7b:d0:ba:70:
         0e:87:95:a5:7d:6f:f0:52:38:ee:97:5c:83:71:f5:41:2d:88:
         8a:05:04:ea:5d:ba:2f:89:21:d6:1d:3c:25:c5:16:62:60:e8:
         2f:f8:05:5c:ae:55:88:6a:9e:20:5a:a2:09:b8:9c:96:bb:57:
         44:81:9b:e7:9a:cc:a5:18:a8:0e:ea:36:71:d4:3c:2e:f9:91:
         f5:20:34:6a:88:df:4a:5d:c8:ae:bf:27:1b:c6:5f:e6:2e:f9:
         75:62:26:28:4f:06:ca:5d:4a:38:a9:b8:42:04:c8:15:9d:98:
         35:20:f1:64:e3:5c:fd:27:b3:76:78:bc:35:d1:d8:9a:9a:0e:
         b6:89:8b:74:e8:9b:f6:d6:fc:f3:2f:86:eb:0a:5b:0e:d5:6f:
         ed:f7:29:68:c8:f1:8d:ea:be:1c:12:51:77:4f:86:d6:d0:3e:
         cd:44:64:8d:14:47:3e:51:9e:98:a6:ce:80:52:6d:3b:89:4c:
         da:b8:25:75:6c:9f:04:eb:73:6a:05:28:59:64:8b:2b:f7:a6:
         0c:7d:ea:09:a4:ec:77:c0:60:0b:f2:58:45:10:1e:11:a0:47:
         9d:59:ba:92:e4:5a:ce:8d:17:88:39:57:ec:b0:28:f0:0f:f9:
         b2:b9:e4:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:48:41 2026 by rpki-client