Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/905037b9-ebc0-4695-8707-2b5bca2c1ea9.roa
File:                     905037b9-ebc0-4695-8707-2b5bca2c1ea9.roa (raw, json)
Hash identifier:          +3XMN5u95fvHWePQnUAWC0PsiR2qpgvL3/tDeVaxJbc=
Subject key identifier:   CB:EF:F9:D4:B2:1F:62:06:77:F7:AD:46:C6:FB:84:4E:CC:9C:46:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55FBA11CBAF61EFBCBE6BFD6F2882B0C7679CB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/905037b9-ebc0-4695-8707-2b5bca2c1ea9.roa
Signing time:             Mon 22 Jun 2026 02:20:50 +0000
ROA not before:           Mon 22 Jun 2026 02:20:50 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e8e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fb:a1:1c:ba:f6:1e:fb:cb:e6:bf:d6:f2:88:2b:0c:76:79:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:20:50 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=5e92ce03c2ca2aa28263f50695d5fffcc737874c85836c0ec315767d79918340, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:0b:2f:1e:b4:3c:72:05:8e:d2:db:75:64:
                    47:33:e7:d4:90:2c:66:48:8b:12:79:c0:12:30:85:
                    32:4a:3d:9a:da:93:cf:1d:81:05:41:6f:e7:92:d8:
                    5d:97:64:66:3d:72:32:29:1e:0f:32:2d:b9:46:c2:
                    3c:54:20:f2:03:28:7d:1d:a1:ee:a5:2b:e0:75:23:
                    54:60:25:e4:41:3f:0e:e1:81:c5:ac:7a:2f:a5:bb:
                    a1:bb:bf:e4:02:23:ff:24:2f:89:e6:6b:a6:bb:41:
                    9b:4e:be:2e:60:a9:fc:71:bb:fe:ed:78:8b:2e:b6:
                    28:b3:72:85:c3:76:57:7c:9b:96:12:4e:ce:7b:a5:
                    ca:b6:23:f3:06:f4:1c:2d:33:95:27:35:a4:26:ac:
                    bf:b2:9e:8c:78:60:bb:c3:9d:ff:f8:86:8f:83:ca:
                    1c:6a:3f:3a:ff:98:8b:6d:13:f5:ef:39:62:0b:98:
                    9d:91:34:a2:a7:46:9b:27:4e:21:57:85:e0:92:4a:
                    af:1a:47:94:f2:0a:5f:0e:b3:ec:4b:f5:3b:ed:e7:
                    03:b1:53:b8:38:21:b5:b6:84:ad:da:6d:2e:ab:16:
                    f4:a3:f0:4d:96:96:9a:62:fc:47:3f:fe:56:83:a7:
                    39:ec:84:b5:e2:37:ca:c7:34:f0:89:42:fe:c7:e2:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:F9:D4:B2:1F:62:06:77:F7:AD:46:C6:FB:84:4E:CC:9C:46:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/905037b9-ebc0-4695-8707-2b5bca2c1ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e8e::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:40:16:c4:20:9d:89:32:ac:93:09:07:94:cf:48:af:82:eb:
         61:ae:f4:5d:0e:71:ab:27:89:1e:8d:14:bd:af:6f:3f:bc:18:
         f8:61:65:90:7b:d3:41:66:46:bb:64:40:6c:57:e8:33:f7:2b:
         9c:63:0a:2f:b5:70:00:36:8d:8a:d4:1f:9d:c9:fb:ce:cf:65:
         df:2d:f1:e1:32:a8:45:6f:1c:3c:e2:71:be:ed:9b:c6:b6:81:
         7d:3c:98:8c:5d:99:fa:38:ad:ae:93:99:0c:f3:f4:4f:6e:b9:
         a0:1b:40:b5:6a:e7:3a:c6:38:05:c0:20:b1:fd:30:d5:9f:30:
         18:26:1e:e9:85:b4:85:07:18:f8:ce:1a:9f:58:14:4c:fa:43:
         3c:71:1f:41:05:c1:15:f1:59:85:be:4b:58:aa:5c:f2:7a:f7:
         38:5e:74:75:42:b1:2d:5f:f2:3b:12:61:c6:b1:ab:d9:58:95:
         0a:bd:48:65:b1:4b:b4:8c:87:e8:a3:99:c1:30:76:0f:0a:15:
         8e:79:9f:34:e9:23:58:85:16:27:ba:0e:5e:4f:16:54:fb:f2:
         25:b2:a4:a6:26:34:e2:9a:68:e8:29:8f:5b:d6:56:a8:c8:13:
         b5:a1:f3:29:9e:58:60:47:4f:1c:c1:17:47:d8:37:5d:70:a6:
         3f:6b:ae:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:02:12 2026 by rpki-client