Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa
File:                     18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa (raw, json)
Hash identifier:          QuAN3k7Ssd9DkYgrKzBZcSNIY+6HYgHZ2lcqOe2muOU=
Subject key identifier:   28:52:C7:99:EF:E8:7D:DD:54:9E:C6:39:61:3D:73:BA:22:6F:DC:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       773231AFC0494F95EEF2DFEAA70698686EAF9182
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa
Signing time:             Fri 03 Apr 2026 01:40:11 +0000
ROA not before:           Fri 03 Apr 2026 01:40:11 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1216::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:31:af:c0:49:4f:95:ee:f2:df:ea:a7:06:98:68:6e:af:91:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:40:11 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=0dc958a0a9a23d29e5cb862e979d5744a5bb36f6a9b4a546ac9e15b51ad46e5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:38:28:23:e5:92:b7:57:e4:4a:6e:d4:bd:
                    30:a5:39:47:5b:51:b2:5c:03:97:95:d8:55:56:fe:
                    ec:33:d1:6a:43:1c:f8:8a:0d:1b:3f:b7:69:56:32:
                    6f:11:22:90:d0:a2:53:92:1e:2f:ef:df:bf:fc:62:
                    1f:e1:ec:45:34:83:b7:99:37:c6:77:eb:fd:ee:08:
                    1d:5e:f9:8a:84:27:62:58:03:df:c0:df:b7:28:09:
                    c4:f7:48:14:c9:6c:14:aa:fa:76:df:b6:e9:a8:9f:
                    68:35:73:51:e3:35:8a:e2:a7:8b:63:74:9f:17:17:
                    7c:8b:17:16:b1:48:5c:dc:b5:82:b0:04:59:39:8f:
                    6e:e0:ed:fa:ae:64:5d:60:c8:85:32:84:70:e7:f3:
                    39:79:8d:45:4b:c7:0c:5f:ec:4b:07:ab:a8:eb:24:
                    dc:5f:c0:08:66:f0:b1:dd:e0:98:41:8e:4b:00:f2:
                    c5:58:c1:ae:03:9b:96:21:e2:a0:af:dd:63:1a:15:
                    5a:33:16:d8:49:48:85:ec:c5:6f:0c:8d:4a:c7:35:
                    fb:9a:1b:46:f9:cc:07:68:d0:e8:11:64:de:1a:77:
                    eb:dd:46:64:23:7f:b3:1f:ae:b9:51:16:f8:1b:6e:
                    d3:05:21:b3:95:9e:f9:7e:00:a1:ff:8d:d4:32:07:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:52:C7:99:EF:E8:7D:DD:54:9E:C6:39:61:3D:73:BA:22:6F:DC:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1216::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:98:d8:ea:b4:53:47:9c:69:36:ee:67:86:0d:59:cd:a4:
         27:87:f7:20:40:3d:57:ac:15:6a:94:29:03:39:d2:8b:87:9b:
         bb:61:7e:b5:bf:05:74:df:d4:c4:67:eb:de:4f:0c:d8:cc:be:
         55:18:22:fb:80:69:87:69:cc:c8:8d:0d:1f:e5:03:df:fd:89:
         48:1e:2d:dc:5f:45:93:07:6c:50:a4:67:04:52:d4:8f:7d:3f:
         a5:e7:e3:f6:12:fd:92:50:56:bd:16:b5:cb:4d:0e:8a:c7:ab:
         ba:fb:03:f0:e8:c4:1e:fb:5e:ff:68:af:26:4a:50:1b:20:4c:
         77:fe:98:c9:38:37:cb:1a:93:d0:a1:35:fe:b6:df:03:57:ab:
         31:b8:e6:28:5f:11:eb:96:6f:ea:06:13:63:16:c1:7b:00:ff:
         5c:32:02:89:ff:92:61:64:b6:32:e9:e0:d7:8b:4f:4c:f4:35:
         67:9e:1b:be:67:b1:8f:ef:8c:20:33:7b:08:4b:fe:75:60:cb:
         e2:13:e6:d4:e0:43:33:7c:2e:26:fe:9e:ac:79:cf:79:c8:51:
         39:f9:6d:f3:f8:79:ed:72:7e:f2:a4:76:6e:08:e1:0f:e8:31:
         90:a5:35:a9:20:fe:53:fa:45:fc:e7:bb:35:c8:c7:8f:e1:74:
         f7:7c:e0:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:14 2026 by rpki-client