Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4abd6260-b787-46bc-87ca-3cf86ba01509.roa
File:                     4abd6260-b787-46bc-87ca-3cf86ba01509.roa (raw, json)
Hash identifier:          INicSy3RO00WFAlVcGKKz1ohUreSgPS0Xg3coAi3+FM=
Subject key identifier:   89:F1:F9:FF:E2:4D:07:B4:03:E5:C3:87:77:CB:F4:20:47:1D:90:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0E52EE55E0CD64EC457FB716244AFE98F4FEB2D7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4abd6260-b787-46bc-87ca-3cf86ba01509.roa
Signing time:             Fri 03 Apr 2026 01:00:43 +0000
ROA not before:           Fri 03 Apr 2026 01:00:43 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:52:ee:55:e0:cd:64:ec:45:7f:b7:16:24:4a:fe:98:f4:fe:b2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:00:43 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=44680b18c27a42bc9f993db63c49b744d219299c315538b65d9ab60a0dd2926d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:28:88:32:98:5d:41:e2:5c:3c:42:07:4d:
                    95:7a:9e:cf:ea:ee:f3:13:fb:ab:73:e6:b1:12:e5:
                    c5:ec:dc:26:13:62:97:48:4c:a6:5b:7f:83:c8:44:
                    86:64:33:35:2a:be:1b:5a:d8:ca:bf:fa:41:53:b8:
                    74:c8:42:3f:b4:d8:ba:77:d3:20:ed:b2:ef:f3:90:
                    df:6a:44:6f:06:48:8a:e7:87:e9:03:d2:f2:49:7d:
                    21:3a:24:4e:ea:8e:6c:62:19:7c:59:d2:92:db:ae:
                    f5:fd:ce:6f:fa:fd:5d:ea:9c:82:cf:5e:da:b4:4b:
                    3d:d7:a3:f4:17:10:9a:e9:f7:28:71:22:27:e7:34:
                    2a:ca:9f:21:23:96:a5:00:40:0a:cb:d5:7f:5d:64:
                    b2:26:22:38:7b:28:9b:dc:6f:cb:54:83:dd:c3:2d:
                    12:f2:da:43:f6:55:4f:5a:b4:39:da:bc:a3:76:e2:
                    69:ad:bf:04:50:4f:d7:5a:d9:72:4c:55:18:9f:19:
                    bd:40:1d:99:20:92:34:52:70:55:e7:0d:5a:eb:0f:
                    37:77:a3:15:d7:17:78:e1:f7:8e:e2:12:52:07:38:
                    a8:1c:12:1b:50:b7:be:47:fe:88:2b:60:f5:91:39:
                    5c:31:73:46:99:78:c4:37:11:0f:c5:1b:b1:d9:68:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:F9:FF:E2:4D:07:B4:03:E5:C3:87:77:CB:F4:20:47:1D:90:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4abd6260-b787-46bc-87ca-3cf86ba01509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:b7:af:f1:47:44:e3:05:2d:b8:2b:21:80:1c:52:0b:17:
         ab:79:58:6c:90:68:92:c1:5c:20:c9:a0:d3:bc:9b:bc:aa:0c:
         80:95:b6:a1:df:69:31:9f:c2:41:0d:4f:f4:50:c9:47:73:72:
         a1:24:38:3e:51:8f:db:9f:4e:b0:0d:35:43:47:19:1c:81:e3:
         1f:2f:87:bb:6d:66:36:65:bd:35:c1:62:15:6a:0c:dd:80:aa:
         b4:0a:70:2e:3f:03:2f:e3:98:4c:43:ca:14:52:7c:d7:f0:f0:
         a4:ec:01:e6:fc:e1:75:94:c9:dc:3b:b3:ce:27:a1:87:d7:81:
         fb:ed:2c:d5:d7:c4:06:35:0a:13:4f:95:e4:1b:6b:bf:f3:cf:
         72:c3:82:de:a4:8c:4a:0e:35:33:59:e5:16:43:d6:74:30:4b:
         2f:cd:3e:5d:bd:2e:80:5f:4a:0c:20:43:8c:15:6e:1f:bc:c5:
         38:19:e2:c7:5b:ae:a6:3f:e8:d0:9f:54:d6:29:da:b4:b9:54:
         f3:8f:bb:8a:b3:e7:91:c1:5a:dc:c9:be:2e:f5:16:91:98:af:
         61:bb:c8:ef:77:fd:14:4e:fe:02:c9:cc:60:ad:6a:95:fd:bb:
         03:79:e2:1a:cd:3c:16:e7:d3:59:d4:92:1a:95:a5:0a:bb:96:
         33:87:93:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:31 2026 by rpki-client