Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0522cb70-d86e-461d-8045-2488421502d3.roa
File:                     0522cb70-d86e-461d-8045-2488421502d3.roa (raw, json)
Hash identifier:          J6lQk72CXVEG7nyvR9YiQSr768vI0yR6C6yV/UFLJZg=
Subject key identifier:   BE:1A:27:86:BD:E2:1F:87:BB:79:56:7E:03:AB:A5:C6:0D:17:C5:23
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60CBFD230C3927F7CCF1577E719986118532ABDC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0522cb70-d86e-461d-8045-2488421502d3.roa
Signing time:             Sun 03 May 2026 01:01:21 +0000
ROA not before:           Sun 03 May 2026 01:01:21 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3264::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cb:fd:23:0c:39:27:f7:cc:f1:57:7e:71:99:86:11:85:32:ab:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:01:21 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=0f31dcd002b7564a9e2f4d96034e550df87d85e43dd3f67689e2ed1cd89f96e1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:51:77:c2:b9:36:8f:62:95:d7:f5:35:1f:
                    ce:a9:d3:86:22:9e:23:14:c9:c9:5e:f8:dc:a7:cc:
                    24:c1:53:c2:44:67:1f:26:9f:36:75:24:8d:b7:05:
                    3a:a7:32:af:fa:79:e3:0a:f0:8d:70:1d:68:88:6f:
                    c3:76:e8:13:4d:fb:38:89:08:36:ed:f0:6e:f0:41:
                    67:65:9e:7c:28:c5:3d:0f:a6:04:4d:d0:b5:2e:07:
                    0a:a8:5b:a5:1c:36:b2:9d:16:fa:4e:20:2d:22:04:
                    1a:e4:dd:0a:58:6b:bf:0e:db:25:e0:90:fd:e3:28:
                    71:5f:35:d3:e9:11:6a:22:c7:01:20:e6:f2:bb:d3:
                    15:ed:08:ad:a6:51:b7:9a:4a:ad:b2:9a:f1:2a:87:
                    d1:7c:e9:35:07:78:bb:e6:ba:a0:5d:c0:76:4c:0d:
                    85:df:c5:c7:02:3c:41:14:82:19:fc:02:66:94:43:
                    fa:e1:bd:46:70:31:bc:7a:75:df:32:9d:d8:cb:5b:
                    fb:a5:af:37:e2:51:1a:ed:22:55:37:56:18:c6:66:
                    03:2d:30:24:bb:cf:de:ee:8d:28:7c:7c:45:34:9c:
                    91:3d:2d:f8:1b:8e:60:8d:ab:33:df:b3:72:0b:87:
                    2b:20:80:3c:32:b1:30:03:04:11:2c:08:f8:cd:4b:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:27:86:BD:E2:1F:87:BB:79:56:7E:03:AB:A5:C6:0D:17:C5:23
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0522cb70-d86e-461d-8045-2488421502d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3264::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:49:a9:8e:b3:b4:52:6b:9e:20:0a:6c:6d:e6:52:1f:65:4b:
         46:d8:9f:1a:b3:9a:62:50:7a:1c:c8:3f:cd:ec:0e:34:29:76:
         5c:bc:27:69:f2:8b:e2:e1:ba:23:9a:1a:19:ac:39:2e:56:74:
         54:a9:65:25:2b:b6:81:92:e1:34:1d:ad:33:2f:40:93:6f:55:
         40:53:32:50:2e:a9:a0:ae:c1:c8:a9:4b:35:af:d1:d9:69:d3:
         0a:e2:88:e0:36:a9:b8:20:89:d4:c8:30:8b:c8:16:05:d6:fe:
         b3:72:36:fd:c8:8c:e3:87:e9:ec:e1:e7:39:95:5a:98:44:7c:
         9e:f4:56:e8:80:6a:56:5d:73:4c:27:b5:9f:41:ff:a1:84:53:
         ae:3d:51:0d:ab:b7:e2:35:ed:b7:e5:93:42:d6:88:e1:a1:f8:
         82:73:b5:5d:8e:10:52:04:7e:26:bb:62:2f:d5:65:fe:a2:aa:
         a3:d6:cf:22:c1:72:ce:6c:de:ad:5a:ff:1c:2c:5f:e2:eb:dc:
         44:1d:c5:a4:e8:4a:10:5e:73:a6:63:95:1d:1f:8d:81:f9:98:
         79:b7:51:d0:9b:72:73:1c:42:21:8a:a4:85:a8:a4:8b:0f:de:
         db:f6:87:3a:79:68:9f:ae:c6:de:dc:9e:45:37:e7:4b:e8:30:
         42:e4:48:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:54 2026 by rpki-client