Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2905f542-b4c0-4e5a-82bc-d9304fb7d7ec.roa
File:                     2905f542-b4c0-4e5a-82bc-d9304fb7d7ec.roa (raw, json)
Hash identifier:          jPTKrk4wynr04eynWlw90tzgdXGkz6Qf2x1pBDBtOHU=
Subject key identifier:   0F:13:0C:A4:11:00:FE:45:38:A2:A3:C4:7B:F7:4A:DD:1A:65:E4:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       78A691AC5901BA1EED9DE04EC705C549D44896A1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2905f542-b4c0-4e5a-82bc-d9304fb7d7ec.roa
Signing time:             Fri 03 Apr 2026 01:50:11 +0000
ROA not before:           Fri 03 Apr 2026 01:50:11 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:111d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a6:91:ac:59:01:ba:1e:ed:9d:e0:4e:c7:05:c5:49:d4:48:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:50:11 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=cccf1ede5de50c25a2fcd2cac49a14808f40b269a82298c81b5fe9325ae4093e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:cf:e4:4e:b0:19:f2:be:d6:62:11:73:7a:
                    08:08:37:db:6b:3c:6a:10:4b:07:99:00:47:c2:89:
                    0b:97:50:a7:62:dd:dc:f1:38:20:0a:3c:f5:49:6b:
                    33:e0:22:2a:54:fb:d6:6e:0a:1b:3c:70:dc:52:5c:
                    34:a6:7d:14:e3:aa:4d:20:54:00:13:70:5b:09:2d:
                    4c:bf:cd:aa:14:f6:96:d7:fb:5c:59:4a:0b:43:2a:
                    f3:51:de:8f:62:9a:a9:48:4b:30:1d:71:c9:79:d0:
                    1f:0a:7c:ba:44:7c:6c:8f:3a:8d:3c:d6:4b:36:e2:
                    ed:e7:be:15:36:6e:ba:86:e2:04:dc:b3:d2:f5:ec:
                    9b:2e:64:3b:55:70:e7:2e:b5:f8:51:b3:74:31:ea:
                    22:84:36:75:a6:62:d1:9a:7e:19:aa:1e:e6:4d:45:
                    73:84:66:db:99:89:f9:14:4a:fb:33:b2:2a:8f:27:
                    53:23:f0:79:9c:54:53:38:c2:8a:09:58:0d:f4:9c:
                    b7:3d:0a:81:31:ce:23:0d:e0:72:33:46:9f:b3:07:
                    0e:ed:db:44:1a:e5:e7:72:5c:ab:16:f7:d2:a3:0c:
                    8f:dd:ec:4b:fa:36:1b:a9:71:f3:ef:f4:60:ad:02:
                    38:e9:38:b8:db:27:19:92:a4:c2:dc:3f:8d:38:50:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:0C:A4:11:00:FE:45:38:A2:A3:C4:7B:F7:4A:DD:1A:65:E4:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2905f542-b4c0-4e5a-82bc-d9304fb7d7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:111d::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:e6:e0:fd:21:8b:40:4d:12:19:c9:47:9e:b7:58:69:d1:8a:
         56:88:41:5b:a3:92:22:cf:3e:75:9f:a3:a3:a0:48:89:81:e3:
         fc:8e:2c:11:c2:c9:0e:5c:59:85:47:63:1b:6b:36:dc:3e:b7:
         17:02:d9:05:1b:10:18:ae:7c:ff:8f:54:e6:a3:bb:ab:5d:50:
         f0:b2:69:92:bd:d8:64:0c:d0:97:d7:37:1d:9d:84:81:92:b9:
         01:c4:95:ed:71:c5:52:45:29:1f:83:77:1a:d1:78:b9:56:0e:
         18:e2:2e:d4:07:b7:d3:f3:1a:06:b8:b4:1a:77:f4:32:40:7b:
         75:6a:a8:6e:04:e9:38:b9:33:1c:0c:c3:bc:29:2d:b4:99:d0:
         6e:61:f3:2a:68:3c:05:c8:ce:d1:7f:12:e1:1d:ae:e8:7d:3f:
         67:a2:69:70:88:fc:08:11:83:ad:10:7c:36:1f:1f:cf:6a:da:
         14:29:e7:2b:25:b9:35:7f:ee:51:c3:78:ef:05:70:d9:69:24:
         c5:3e:ea:5a:f9:66:10:78:b2:c2:03:fc:4f:b1:c0:50:42:9a:
         1d:ce:41:84:e5:fd:1e:29:5a:2f:fe:44:5f:71:90:81:2f:b1:
         59:67:cf:ae:dc:74:bb:03:41:6a:0b:86:fa:44:0e:d0:ba:3a:
         42:22:31:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:48 2026 by rpki-client