Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ce0f708-98bc-4ad1-908f-4b56468432b4.roa
File:                     7ce0f708-98bc-4ad1-908f-4b56468432b4.roa (raw, json)
Hash identifier:          /6xwMirz2yrDpXPXmDcQGUMdZqQSHS6XyLoFAD1b0Hw=
Subject key identifier:   D5:F2:79:50:50:25:75:FB:5C:D4:FE:8A:DB:B6:C8:C8:9B:69:24:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       10E8C69628293416F4F7E0313E452F29E437F879
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ce0f708-98bc-4ad1-908f-4b56468432b4.roa
Signing time:             Fri 03 Apr 2026 01:40:10 +0000
ROA not before:           Fri 03 Apr 2026 01:40:10 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e8d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e8:c6:96:28:29:34:16:f4:f7:e0:31:3e:45:2f:29:e4:37:f8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:40:10 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=951a217cd2beea65139c6f7e1abef0f9af7f1f46e00345aae63e04f459d30564, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:03:9e:27:88:d5:09:04:8c:3f:ed:71:f2:
                    b5:1f:ee:94:2d:b4:90:25:68:14:cd:f6:b3:0f:06:
                    3c:d4:22:92:7c:48:0b:6e:cf:bd:a4:3f:90:d5:fd:
                    90:69:83:a3:ea:3d:12:9d:0c:27:dd:15:8a:cb:a6:
                    c6:e7:ab:ad:88:ac:d5:7b:a4:02:50:29:59:0f:55:
                    6e:1a:ef:e6:81:b5:62:0f:64:45:e9:74:e3:3b:44:
                    ff:7a:2e:1d:21:52:6e:7d:36:26:db:77:ff:58:08:
                    06:b6:f5:6f:27:a6:e0:33:74:a2:28:93:d5:62:a8:
                    a6:c6:8f:40:cd:26:74:45:a4:de:26:9e:74:0a:01:
                    57:67:f5:e8:8d:63:a6:9f:55:8a:ca:83:25:bf:87:
                    b2:34:b9:9d:64:2b:0b:5d:d4:b2:95:6d:cc:a1:f5:
                    12:22:e9:33:ee:46:c3:b0:99:8f:e6:d2:22:86:9d:
                    81:f2:31:72:d2:c5:4f:54:c8:b2:a4:45:f8:f7:1a:
                    cd:33:5f:b6:2e:cb:27:5b:9d:1e:14:f1:48:5a:a7:
                    7c:a6:7c:9b:d0:9d:26:31:9c:90:59:d6:dd:1b:d0:
                    96:63:7d:be:fc:bb:16:17:b3:dd:aa:d2:a8:0f:d1:
                    8b:4f:c9:2b:e2:9c:d6:12:c9:3c:e8:38:91:cd:16:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F2:79:50:50:25:75:FB:5C:D4:FE:8A:DB:B6:C8:C8:9B:69:24:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ce0f708-98bc-4ad1-908f-4b56468432b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e8d::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:7e:bb:3e:11:7a:86:f5:47:f1:81:8a:9b:43:a7:88:e1:86:
         80:ee:d2:0e:6f:07:17:02:74:70:09:31:69:d0:f6:9c:25:3b:
         99:15:76:22:47:45:97:26:55:21:d0:05:19:a3:a3:44:a0:05:
         a9:4f:b6:68:d3:b4:5e:9a:c6:4e:cd:b7:00:49:bf:44:90:47:
         16:fb:c4:17:ce:bc:81:23:5a:96:05:50:7e:47:dd:a9:86:2b:
         ef:76:87:54:ff:4e:3e:51:a1:60:77:b1:c5:bc:63:bd:c9:ed:
         2d:4c:bd:ba:0c:74:7d:66:94:9f:89:40:61:9c:e3:17:2f:28:
         6d:8f:63:24:78:03:f2:68:9f:53:5b:c5:8b:e8:6d:63:d3:bf:
         13:7f:93:8b:c3:cf:f3:a9:6d:34:a0:6a:68:91:fa:db:0f:29:
         91:7a:2c:40:7e:f4:fb:7b:5e:3a:a7:8f:72:5a:02:b0:f2:25:
         ff:6a:7c:b5:88:ac:bc:f1:28:e9:c1:33:fa:d9:f7:b9:49:59:
         55:a9:a3:a7:9b:f5:db:e9:e4:da:5d:91:1c:eb:76:43:d1:7f:
         67:75:6c:ea:a1:2b:a5:f2:95:39:32:1d:93:e5:f5:18:18:14:
         09:34:d6:fa:8b:87:83:f0:81:26:ce:0b:f5:11:96:55:66:9e:
         df:b8:12:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:08 2026 by rpki-client