Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa
File:                     36d1581a-44bb-4305-9fb5-41aecaebec5f.roa (raw, json)
Hash identifier:          akrUuWObP8YwiLEjqKKQ28EDJ8K9QJyJ0XtNVsHyVZQ=
Subject key identifier:   15:F9:20:3B:26:12:5C:1D:32:E6:CF:C0:C4:6C:87:67:17:15:A7:AD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       503351BAB90F19E5C10E72E6A99675EBB456E6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa
Signing time:             Fri 03 Apr 2026 02:12:01 +0000
ROA not before:           Fri 03 Apr 2026 02:12:01 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:51:ba:b9:0f:19:e5:c1:0e:72:e6:a9:96:75:eb:b4:56:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:12:01 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=355a49464ea4ca4832dbb61c9def8dd695f47cc0526cd547e06e1aecbfb73b97, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:27:5a:d7:e7:a7:59:02:d5:e2:ac:20:c9:
                    8f:48:21:70:8c:2e:8d:fd:8b:a0:ab:a3:ae:82:fe:
                    e6:b8:72:9c:cc:17:19:ba:12:b0:e0:13:35:67:e9:
                    b3:40:d2:db:22:5b:e0:7c:36:22:eb:5f:91:39:87:
                    21:b0:19:47:20:90:81:e4:3e:22:e0:b5:f9:84:1c:
                    12:e6:62:09:c5:5f:2f:73:ef:3f:de:d9:ab:e5:ee:
                    4e:d8:c2:5b:6d:1b:95:f4:76:c2:a9:80:c9:72:3f:
                    3f:7f:5c:4b:93:c8:19:5e:72:bf:97:8b:60:7f:e7:
                    d4:91:d5:bb:9b:5d:a9:07:29:c0:fe:a2:2d:22:3c:
                    da:e5:8e:60:c5:c0:72:82:05:d7:2f:5c:7a:19:e6:
                    7b:13:53:d5:f5:16:b1:c4:46:0b:bb:74:fb:0b:42:
                    6c:0c:63:d6:27:dd:bc:2e:ef:8f:f6:2b:18:3e:ec:
                    bb:8d:4e:c7:8f:d8:dd:e3:c0:ea:85:e8:01:f5:9e:
                    4a:25:c2:06:86:e6:f9:b1:80:56:c3:93:75:0e:fd:
                    53:21:a2:08:2a:ea:70:af:b3:2e:ea:cc:21:d4:3d:
                    e3:6c:c1:c3:80:6e:a4:53:1e:68:ab:be:aa:3a:f3:
                    bb:21:ab:af:35:74:a8:ca:79:5e:f4:1d:d9:0e:d9:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:20:3B:26:12:5C:1D:32:E6:CF:C0:C4:6C:87:67:17:15:A7:AD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36d1581a-44bb-4305-9fb5-41aecaebec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e46::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:38:24:8e:9a:72:94:5c:eb:b5:7f:57:47:f1:7a:c0:13:
         cf:ae:6a:1a:fb:33:93:6b:69:58:db:d3:de:f8:e0:1c:27:09:
         b6:ca:31:27:cf:d4:69:40:06:b5:07:b8:8a:71:b8:ff:61:b1:
         91:8a:20:d6:22:44:63:31:1c:4d:39:c4:cc:e2:e2:61:ad:bd:
         0f:3a:06:65:90:8c:00:5a:b0:7b:12:d2:e1:11:26:b0:b4:ca:
         92:be:e8:3e:b7:4e:2c:9b:2c:7c:05:a6:6a:39:a7:05:b8:7d:
         a6:59:51:ea:92:3e:67:e1:39:82:68:d0:00:27:b1:9d:99:bf:
         d2:fa:b8:68:c6:16:cf:33:b2:45:47:b3:fd:52:44:6c:13:bc:
         88:e2:da:8e:1d:0b:01:a5:ce:2d:be:b6:94:de:2b:d8:83:c5:
         d7:27:f4:3b:bc:71:70:77:e8:7a:1f:00:1c:5a:29:39:be:e4:
         dd:d2:0c:b8:e7:f4:c2:6a:1c:a0:06:f1:a6:dc:4e:10:18:5c:
         22:7b:56:12:be:51:c2:97:71:ba:63:d1:aa:ae:11:9f:d1:cf:
         aa:c7:c2:38:17:6e:26:85:49:dd:30:87:6b:18:e0:16:c5:7f:
         32:24:fa:1b:32:d4:cc:f2:27:db:9d:f0:ba:cd:0b:be:f1:bb:
         11:1c:d4:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:45 2026 by rpki-client