Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c4f4949-dfd8-403f-a19c-6e6acd577b58.roa
File:                     1c4f4949-dfd8-403f-a19c-6e6acd577b58.roa (raw, json)
Hash identifier:          9GOXQ5Ll9EymYeVj8UIL3gFuHQm3r7qGrAxnY5+Ty8g=
Subject key identifier:   42:15:E7:BE:F6:F3:DF:82:23:93:43:B7:D8:E3:0A:33:83:37:0A:CA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0137B758FF77EA5EBF18C9449B135FCEF2F7630D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c4f4949-dfd8-403f-a19c-6e6acd577b58.roa
Signing time:             Fri 03 Apr 2026 02:10:08 +0000
ROA not before:           Fri 03 Apr 2026 02:10:08 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:37:b7:58:ff:77:ea:5e:bf:18:c9:44:9b:13:5f:ce:f2:f7:63:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:10:08 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=6ba8bda2bf7462fbf2cfa127d8328b0e1f7788181cd4087a061a94ae6b109e4a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:9d:07:56:d7:4b:db:86:ab:ff:d4:b4:6c:
                    7e:31:b6:2d:b2:9e:e7:73:59:ea:7f:ec:bb:0a:48:
                    a0:08:44:f7:64:85:6a:1e:6b:3e:25:b2:e3:35:96:
                    77:18:56:72:dc:a2:f5:37:e8:d4:1e:8c:bc:a6:81:
                    eb:39:39:fb:83:11:b5:ba:b6:d8:99:75:69:55:23:
                    21:70:e8:53:2e:10:f4:b6:5b:4b:6c:54:16:fd:a4:
                    4c:19:f1:72:00:33:f0:66:2d:c6:7c:1c:c0:4f:47:
                    09:8b:bb:ee:ee:7e:5c:ef:fc:63:5c:fe:7a:88:08:
                    bf:97:34:15:fe:3f:75:a7:18:a6:72:dc:82:11:c4:
                    59:a7:6c:54:cf:7f:eb:65:11:79:5c:78:d5:bd:a2:
                    9f:d1:6e:4b:4a:13:39:85:1d:7c:ce:19:96:69:d4:
                    fb:e0:51:64:a9:fb:91:18:a0:3e:bc:86:6a:c7:76:
                    ae:76:9e:2a:ba:dc:66:ad:a9:94:2f:eb:41:0e:8f:
                    24:16:69:ed:81:51:20:d6:48:b7:68:fb:5a:7e:b4:
                    47:8e:87:8d:22:02:92:c6:1a:91:e1:a9:4d:51:b7:
                    b9:44:bb:8a:51:a8:cf:3d:5e:63:5b:84:4c:f0:dc:
                    6e:f5:96:92:7a:45:17:28:d4:f9:83:d8:99:5d:f4:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:E7:BE:F6:F3:DF:82:23:93:43:B7:D8:E3:0A:33:83:37:0A:CA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c4f4949-dfd8-403f-a19c-6e6acd577b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1140::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:8f:95:5c:66:48:8a:de:f6:8c:29:70:9e:c1:d5:b7:6e:
         aa:1a:de:5b:f1:f7:1a:1d:bd:06:6e:9e:8d:46:c5:e0:d8:34:
         98:b3:6f:c7:f4:c6:ce:ff:db:8f:2a:bf:cc:f9:9d:e7:ff:6d:
         6f:37:a6:0b:ad:85:b0:5d:f9:9a:28:48:ad:33:9a:19:f1:78:
         e8:34:52:e9:87:0d:35:7a:5a:ce:3d:9b:2e:3c:b0:bf:d3:b3:
         ec:c4:50:f0:55:21:84:3b:80:74:07:83:48:f7:12:9d:79:f7:
         a7:5b:74:31:10:24:b9:92:e4:7e:73:15:84:11:25:e7:1c:50:
         a2:03:85:70:a7:4f:ff:89:59:90:26:fd:d6:5d:78:59:17:5d:
         f6:73:f3:c6:27:f4:6a:57:1a:c9:c7:65:63:51:5b:6b:b0:db:
         91:92:b3:a5:8b:d5:14:f8:1f:fe:b0:83:17:2a:af:88:d2:6a:
         51:85:e7:09:a7:a0:88:af:4d:17:15:33:b6:97:dd:a3:29:2d:
         1f:21:74:1d:4a:81:61:f9:3e:dc:a8:8e:29:2b:28:ab:9c:16:
         5f:34:f6:9c:4b:68:6d:ec:6e:b1:30:1b:c8:88:27:fe:6a:c3:
         7c:70:41:2d:bd:4d:75:de:eb:bb:4f:99:a8:2a:23:ed:8d:0e:
         cf:51:de:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:56 2026 by rpki-client