Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036896f6-30b5-45b4-9d17-19054e93e23d.roa
File:                     036896f6-30b5-45b4-9d17-19054e93e23d.roa (raw, json)
Hash identifier:          svBMVpvIJLHxKCHpn47KrIpQ7Ad4Tkz+661ECYV89cc=
Subject key identifier:   E6:65:A1:08:0B:27:3F:AF:F8:EE:98:D9:AB:A1:DE:58:05:37:DF:19
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4C8EAF155FA72FEE2BDB400D8C7D40B1ED846756
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036896f6-30b5-45b4-9d17-19054e93e23d.roa
Signing time:             Sun 03 May 2026 00:10:08 +0000
ROA not before:           Sun 03 May 2026 00:10:08 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:27ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:af:15:5f:a7:2f:ee:2b:db:40:0d:8c:7d:40:b1:ed:84:67:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:10:08 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=3aa029ad5ae6ded6c5ad4a13ca7561c29adb3e3c28a4a98cc0efcd05a6ea3d95, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:5c:24:19:55:d1:9f:30:83:0e:82:cb:7a:
                    35:71:80:5a:74:42:bf:15:25:5a:91:e3:c7:34:d6:
                    55:40:c9:e6:65:da:da:63:a6:25:5b:be:08:cd:3b:
                    49:c6:50:13:a7:df:79:44:40:7f:8f:b6:ac:95:8f:
                    55:19:e8:f8:4a:21:b7:40:5d:f1:36:ea:d8:d1:90:
                    6c:21:60:f2:df:3e:1c:c8:6e:cd:bf:db:a3:22:bf:
                    4f:a9:24:2d:e6:56:08:d3:17:61:2c:9c:cf:9b:f3:
                    22:7b:3b:4d:0a:db:5e:b1:d2:74:29:b5:ab:6e:f1:
                    fe:29:9b:da:d5:f1:5b:64:56:00:44:f3:fa:e1:48:
                    16:75:0a:1d:35:2b:39:cf:d8:1a:fe:04:18:4f:28:
                    bd:7c:74:f7:c6:0a:ce:dd:f1:33:c0:b8:74:4b:5e:
                    e3:f1:47:11:07:ef:b7:21:1f:bd:56:c9:3d:c8:7a:
                    f5:bf:67:2d:3d:04:80:dc:12:e5:a4:76:08:aa:e7:
                    c2:d3:1d:8e:54:52:d9:64:33:43:f2:86:87:d8:20:
                    8c:a8:a3:a9:32:5c:81:8c:e3:b0:35:eb:7c:3f:bc:
                    40:d8:bb:62:79:70:e8:99:42:6d:de:7c:19:27:11:
                    a0:29:5a:72:a9:0b:ee:51:57:3c:10:fb:e5:a1:5a:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:65:A1:08:0B:27:3F:AF:F8:EE:98:D9:AB:A1:DE:58:05:37:DF:19
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036896f6-30b5-45b4-9d17-19054e93e23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:27ed::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:23:75:e0:32:51:26:d0:99:0c:8a:16:13:5e:1b:bc:20:
         09:3b:5b:09:37:b3:c5:30:ea:fe:3f:65:fb:1d:cd:02:87:d2:
         22:f2:76:ed:f2:81:06:47:c1:b1:b0:28:cc:b5:7c:f2:ba:dc:
         aa:d5:1b:ee:80:28:c3:da:61:ec:2a:c3:c1:aa:31:98:65:22:
         0a:46:46:d8:c8:de:cc:43:25:6f:8f:87:0b:31:25:af:d2:0e:
         4a:3e:0e:03:78:9b:8b:6b:1f:a0:f6:19:6a:8d:5d:4b:8a:64:
         b0:d6:d9:2f:83:13:71:ef:b7:fa:78:01:fb:e3:3b:f1:48:1b:
         ff:42:43:5e:2c:f3:bd:d6:af:37:49:44:b6:7e:4a:a7:d9:24:
         c7:ce:f3:2c:a1:d0:06:22:41:84:b8:f9:b5:8e:4a:b4:d5:b4:
         40:41:b7:53:97:d0:de:94:a8:07:3c:9c:40:44:f0:fa:e3:a2:
         44:a2:21:42:85:f8:87:9f:08:90:34:ec:7a:9d:cf:a1:b9:1a:
         4b:04:71:80:f0:29:57:ca:35:1b:b3:b4:8c:3d:ae:63:12:7f:
         06:ea:c7:c2:59:8c:a6:69:5d:48:40:45:6c:7b:48:bd:d6:1b:
         48:04:6d:e6:31:30:13:19:00:c3:29:45:17:d7:e7:3a:85:1f:
         2b:0e:86:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:28:54 2026 by rpki-client