Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/566e80fd-470a-4df0-b8b5-dea9804a2e4a.roa
File:                     566e80fd-470a-4df0-b8b5-dea9804a2e4a.roa (raw, json)
Hash identifier:          XrPLZ3BuOjzcxq1lm8PSVurO3h4Fv4WSg0Jzd8H+mBo=
Subject key identifier:   7F:F9:3F:E1:6C:F0:7E:53:B4:BF:5F:AF:16:DE:98:F2:35:CB:1A:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5E0796BAF75C4F651CC220E9B9ADFC84065EEE4B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/566e80fd-470a-4df0-b8b5-dea9804a2e4a.roa
Signing time:             Fri 03 Apr 2026 01:01:32 +0000
ROA not before:           Fri 03 Apr 2026 01:01:32 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ea8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:07:96:ba:f7:5c:4f:65:1c:c2:20:e9:b9:ad:fc:84:06:5e:ee:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:01:32 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=84eab12a476532e7682c32c575f7ac14e4140eb21850327389223e6158e740c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:0a:b1:c9:7f:91:cf:84:e3:9b:b1:ef:1a:
                    53:09:d3:a9:ee:68:d3:a1:a2:53:f4:ac:d0:61:23:
                    79:78:bb:d7:a8:53:fe:4a:fc:76:ef:ab:8f:0b:05:
                    39:2b:05:18:47:4e:04:2d:6b:dd:a2:13:99:5a:ec:
                    67:4c:6a:ed:cf:80:ac:e8:8b:e5:b2:75:49:52:f2:
                    9f:c5:8d:02:60:ce:2d:9e:a2:ab:29:9f:6d:23:cc:
                    dc:28:20:e5:91:76:6b:f5:74:a4:26:53:b3:60:41:
                    5b:a0:bc:b4:e0:85:62:09:30:e5:26:11:89:be:61:
                    41:c6:2d:ab:5c:b9:99:4b:47:7f:b6:81:28:18:67:
                    ca:91:3e:7d:cf:66:dd:90:d4:b6:5b:7d:ae:99:86:
                    29:b2:f3:2a:28:ae:ba:61:f4:19:ba:03:ea:6c:ba:
                    32:4b:62:72:b6:38:5d:66:f3:65:1c:ad:9c:12:7f:
                    ca:69:5d:bb:e0:65:1a:5e:5d:e6:f0:04:d6:01:d0:
                    f9:d9:60:fc:54:3f:dc:7b:e9:18:26:6f:2d:33:94:
                    16:b5:b2:65:d0:f5:37:5e:0e:5e:c4:32:df:89:3a:
                    38:b9:78:be:f1:2e:35:14:d3:31:d5:20:05:95:05:
                    a4:38:03:f4:24:bb:58:30:b6:4d:02:7f:27:17:97:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:3F:E1:6C:F0:7E:53:B4:BF:5F:AF:16:DE:98:F2:35:CB:1A:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/566e80fd-470a-4df0-b8b5-dea9804a2e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ea8::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:bd:de:0f:55:02:37:4a:00:bc:59:33:3b:20:02:a1:c8:
         22:7c:d8:23:59:d9:1f:13:e1:87:7a:2e:13:3c:36:ef:88:59:
         7f:60:03:e5:c9:e1:cc:63:1b:64:83:6a:25:f2:c9:53:c2:2f:
         11:81:33:87:32:84:1a:d5:24:ca:12:c0:e3:db:b8:b4:60:1c:
         4e:dd:e6:b0:48:75:e2:7e:dc:7a:95:a6:b5:57:ce:fa:70:10:
         fb:b4:bd:bf:29:ae:37:39:07:06:2b:02:ce:ce:94:3a:56:bd:
         eb:d4:1b:63:00:cc:b7:3a:39:07:43:bd:07:e4:2e:59:f2:2d:
         dd:fa:51:c2:81:80:f6:7f:9a:16:a3:2d:b3:cd:48:4f:de:ff:
         3e:7d:c2:e3:10:64:0f:57:e0:b0:78:2e:32:fa:43:20:00:c3:
         e2:2e:0a:8d:40:86:b4:d5:70:bd:92:89:5c:74:68:ad:32:c3:
         23:c2:61:bb:94:6e:37:e6:65:20:8a:f1:f5:80:80:e1:59:3c:
         38:c5:ee:16:58:71:a9:77:ab:ef:b3:49:2b:63:27:b3:00:17:
         09:ca:5a:bf:f5:93:e0:b0:db:01:eb:99:3d:bd:fc:dd:73:9e:
         bf:3a:84:be:7e:a7:a7:6d:36:42:82:fd:f8:2e:95:56:8b:3f:
         d8:16:dc:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:26 2026 by rpki-client