Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16158022-bfa1-4be5-bb53-2622d9f09f75.roa
File:                     16158022-bfa1-4be5-bb53-2622d9f09f75.roa (raw, json)
Hash identifier:          a/BWL+xAEMkzgDAmJwHW+GWdrezpGEPR6V01lfbkEMw=
Subject key identifier:   91:74:C2:3D:A0:BD:CB:63:31:71:9F:57:55:61:BA:7C:6A:AB:88:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C1625A87EFC7D98B32E286AD117A3AE07A49EF1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16158022-bfa1-4be5-bb53-2622d9f09f75.roa
Signing time:             Fri 03 Apr 2026 01:10:57 +0000
ROA not before:           Fri 03 Apr 2026 01:10:57 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:115d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:25:a8:7e:fc:7d:98:b3:2e:28:6a:d1:17:a3:ae:07:a4:9e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:10:57 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=0ef87d0e3de40eeb81cc4961e08fa40f1aeab08a5f317edebe9ecc4727c65ca5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:30:1d:08:06:4e:00:ae:85:e1:13:95:52:
                    b1:b5:50:e3:c1:f0:05:6a:e6:e9:b7:0f:e9:a5:5a:
                    3f:be:5b:b6:97:bf:2e:95:27:8b:56:b9:5e:d4:f9:
                    c4:62:24:18:47:15:34:a9:a3:de:ab:5d:28:08:23:
                    7e:f6:ed:32:1c:4c:d0:71:db:c5:67:69:d1:40:cd:
                    9f:3b:6c:1e:26:e8:87:eb:71:3b:21:6c:c3:55:9c:
                    a4:f4:e5:21:03:33:22:b7:32:80:99:e4:16:69:77:
                    bf:86:76:a6:e8:56:bd:b3:2b:82:3d:88:78:b4:09:
                    f2:8b:48:6a:36:33:52:ae:ca:92:42:e7:26:2f:97:
                    28:70:ef:45:c5:b2:1a:9e:b2:d1:91:eb:36:31:82:
                    5c:42:2b:42:72:2f:68:35:08:60:bb:76:36:8c:71:
                    ab:d2:01:84:d9:36:75:5d:1d:59:38:0e:b9:43:57:
                    ab:5c:3f:53:00:5a:4e:46:d4:aa:81:97:32:c9:9a:
                    a5:d4:ba:4e:8f:ab:f5:c2:4f:35:47:9e:6e:0c:df:
                    9c:dd:9e:7f:b5:01:c6:21:0d:8b:96:42:16:d4:c4:
                    b7:45:0e:a1:76:b9:59:bd:0d:6f:95:59:ea:45:b6:
                    54:da:21:1d:d0:09:4e:71:f8:d4:a6:b7:81:03:8d:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:C2:3D:A0:BD:CB:63:31:71:9F:57:55:61:BA:7C:6A:AB:88:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16158022-bfa1-4be5-bb53-2622d9f09f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:115d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:b9:a8:55:a6:2f:53:f3:33:ee:b1:ee:ce:b2:59:0a:d0:7a:
         64:a2:63:bb:be:dc:31:6c:7e:d7:c8:b5:d3:8d:1b:c2:99:bc:
         09:70:48:11:4a:39:d8:e7:4d:55:87:ad:0a:e4:37:5c:33:b6:
         e0:03:28:cb:14:4d:ee:da:41:22:bc:a9:0f:56:fd:d2:ed:98:
         50:82:c5:5d:bf:22:83:c6:fe:c9:ed:df:aa:fb:e8:cb:86:47:
         9b:12:ae:46:49:2a:23:17:ec:2d:b5:3a:c7:30:74:16:13:c2:
         80:04:3c:25:4f:51:a0:82:11:76:1a:91:a1:74:ff:be:3b:2e:
         9b:e5:82:14:9b:aa:46:a9:02:b9:d5:c9:d3:3f:44:ff:80:30:
         14:41:35:38:2a:50:b9:6f:ee:1b:81:e8:32:40:a2:5e:1c:29:
         9c:c1:ea:c5:a5:28:d4:58:96:a8:c0:ed:8a:5a:00:99:5a:71:
         d8:59:f6:ad:4c:ff:3a:a9:7b:bf:e6:d0:10:9a:99:57:b9:35:
         48:c1:73:5e:71:50:d0:27:d5:ac:c0:58:88:71:d5:65:14:e0:
         be:9d:0f:93:12:93:0a:8a:68:9e:7c:b4:80:40:d5:7e:6b:31:
         2c:87:e4:2b:f0:4b:fc:50:7d:bf:2c:cd:77:a9:cb:bc:21:9d:
         48:6b:8b:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:13 2026 by rpki-client