Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acde1f23-8800-4bf0-bc29-4c8e5007d3d6.roa
File:                     acde1f23-8800-4bf0-bc29-4c8e5007d3d6.roa (raw, json)
Hash identifier:          /yy8xyRpIAWnQ7tlNvIcxOKM1sAnY6CMNX0SrWvUO+I=
Subject key identifier:   EC:D9:41:3F:9A:DE:F1:91:33:78:72:4D:1E:AA:85:AB:EA:B6:B1:09
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02CDD7F7530A06CFF60FE131E431B5455118CC6E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acde1f23-8800-4bf0-bc29-4c8e5007d3d6.roa
Signing time:             Fri 03 Apr 2026 02:00:07 +0000
ROA not before:           Fri 03 Apr 2026 02:00:07 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1eb3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cd:d7:f7:53:0a:06:cf:f6:0f:e1:31:e4:31:b5:45:51:18:cc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:00:07 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=d2b70446e0894cd34092af8d2d2ef498b50bf722954ad4bfe038548018e924f4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:42:67:01:39:af:ac:8d:2d:db:79:2d:57:
                    ad:7e:4e:d8:4f:80:18:5b:df:db:18:0b:7c:6c:56:
                    db:82:f3:6c:4e:76:fe:58:54:3a:9d:ce:65:17:c8:
                    6e:94:ca:42:71:15:53:cc:43:c0:92:2c:19:55:4a:
                    64:78:4e:b5:59:72:1f:83:fa:bf:b0:55:2a:49:1a:
                    78:ce:0c:76:8d:20:e3:83:d7:a2:a0:9d:22:7b:cb:
                    01:3c:28:04:7e:e3:0d:40:17:41:97:e8:8a:f7:3e:
                    11:e6:af:b3:bf:8f:95:6f:44:b6:f8:f0:ef:bf:e8:
                    94:40:b2:e7:7e:d1:d3:4f:f8:d2:7b:ab:b9:ca:82:
                    e2:86:d0:e4:07:91:2f:40:92:67:47:ef:21:16:33:
                    22:bd:9c:68:48:7c:37:8c:92:a4:e3:27:90:03:3c:
                    9d:ef:33:42:7e:fd:c4:b3:e1:a4:f6:f1:41:52:f4:
                    2d:29:a6:9c:1f:28:3c:68:d4:3a:7e:7b:3d:a2:da:
                    be:c1:5a:5b:7f:ae:2d:c3:de:b5:13:46:35:d4:3b:
                    5a:f7:22:cc:4d:8f:ae:de:9e:77:50:0e:29:56:c3:
                    a4:9a:ad:48:c0:35:75:ba:81:34:1d:a3:a9:c8:c2:
                    a3:98:b3:7f:54:e5:1d:06:d9:86:2e:df:ec:f1:9c:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D9:41:3F:9A:DE:F1:91:33:78:72:4D:1E:AA:85:AB:EA:B6:B1:09
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/acde1f23-8800-4bf0-bc29-4c8e5007d3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1eb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:33:20:b1:15:e4:b4:e0:23:09:0c:47:cb:a4:e0:6f:32:b7:
         28:f8:50:15:d7:b6:97:72:0b:24:c0:b5:8c:a7:a8:ef:a1:ee:
         91:b8:44:89:7d:6a:7c:af:53:fa:db:6e:97:60:f3:53:3e:1e:
         ca:ee:c5:7a:02:d1:9a:57:36:fa:3b:49:17:a4:15:72:51:2f:
         78:94:d3:aa:85:0f:2d:2b:32:57:70:42:8f:94:5f:af:25:6a:
         13:7c:68:a0:97:f8:b1:51:e4:04:fb:b5:25:68:a2:38:17:5a:
         f3:3d:b3:34:3a:4e:38:61:75:d6:7c:e6:4e:f5:8c:71:1b:08:
         be:ce:37:42:5a:18:d8:9d:46:bc:dc:1b:5c:39:22:c2:2f:b1:
         8c:cf:24:08:f4:44:55:36:bd:3e:6e:a6:b1:dc:54:67:1a:de:
         9e:6e:06:86:05:86:6b:7f:cf:27:6e:65:c0:bc:5e:b2:b6:ce:
         62:82:b3:a8:12:6b:fa:39:c3:fe:b9:77:93:6c:d9:06:c7:72:
         51:ce:71:a6:a9:a3:bd:0f:47:28:cb:4e:de:1d:bd:32:38:2f:
         6b:0c:4e:b8:17:d0:dc:99:22:c0:d2:06:3d:a1:69:27:1c:e3:
         eb:0c:fd:2a:0b:2b:29:d2:72:e5:11:f3:3e:df:54:a0:c3:d5:
         46:ba:0c:e5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAs3X91MKBs/2D+Ex5DG1RVEYzG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIwMDA3WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMmI3MDQ0NmUwODk0Y2QzNDA5MmFmOGQyZDJlZjQ5OGI1
MGJmNzIyOTU0YWQ0YmZlMDM4NTQ4MDE4ZTkyNGY0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCX7kJnATmvrI0t23ktV61+TthPgBhb39sYC3xsVtuC82xO
dv5YVDqdzmUXyG6UykJxFVPMQ8CSLBlVSmR4TrVZch+D+r+wVSpJGnjODHaNIOOD
16KgnSJ7ywE8KAR+4w1AF0GX6Ir3PhHmr7O/j5VvRLb48O+/6JRAsud+0dNP+NJ7
q7nKguKG0OQHkS9AkmdH7yEWMyK9nGhIfDeMkqTjJ5ADPJ3vM0J+/cSz4aT28UFS
9C0pppwfKDxo1Dp+ez2i2r7BWlt/ri3D3rUTRjXUO1r3IsxNj67enndQDilWw6Sa
rUjANXW6gTQdo6nIwqOYs39U5R0G2YYu3+zxnHwTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7NlBP5re8ZEzeHJNHqqFq+q2sQkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FjZGUxZjIzLTg4MDAtNGJmMC1iYzI5LTRjOGU1MDA3ZDNkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHrMwDQYJKoZIhvcNAQELBQADggEBAHMzILEV5LTgIwkMR8uk4G8y
tyj4UBXXtpdyCyTAtYynqO+h7pG4RIl9anyvU/rbbpdg81M+HsruxXoC0ZpXNvo7
SRekFXJRL3iU06qFDy0rMldwQo+UX68lahN8aKCX+LFR5AT7tSVoojgXWvM9szQ6
TjhhddZ85k71jHEbCL7ON0JaGNidRrzcG1w5IsIvsYzPJAj0RFU2vT5uprHcVGca
3p5uBoYFhmt/zyduZcC8XrK2zmKCs6gSa/o5w/65d5Ns2QbHclHOcaapo70PRyjL
Tt4dvTI4L2sMTrgX0NyZIsDSBj2haScc4+sM/SoLKynScuUR8z7fVKDD1Ua6DOU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:34 2026 by rpki-client