Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1704c254-dfc8-4e99-adfb-1a61b698e136.roa
File:                     1704c254-dfc8-4e99-adfb-1a61b698e136.roa (raw, json)
Hash identifier:          BwAxh3/f2ZejgIHUlN3G+4M2cDNNMTfDdnLCG4R42yM=
Subject key identifier:   2C:78:56:A3:50:4B:C6:10:D2:B6:3A:AF:A8:2B:2A:D8:D6:08:73:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7DB7D20A5D72F0187BDE5F4BCE1ED2390C64AD2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1704c254-dfc8-4e99-adfb-1a61b698e136.roa
Signing time:             Sun 03 May 2026 01:01:27 +0000
ROA not before:           Sun 03 May 2026 01:01:27 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2988::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:d2:0a:5d:72:f0:18:7b:de:5f:4b:ce:1e:d2:39:0c:64:ad:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:01:27 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=3633d352b2750f9c6b4184900c562618308494d901555b805626359abfe6faa5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:19:4e:a6:5a:09:c6:b3:0d:ee:aa:80:94:
                    56:3a:12:b5:15:28:4a:bc:90:3b:ea:5b:f8:0d:fd:
                    31:2e:ed:1e:61:da:0e:f7:6f:c4:3f:a9:a3:6c:c5:
                    e5:64:fd:ca:93:af:46:5a:a3:0f:ff:20:2c:86:e6:
                    8a:10:5c:a4:8d:f6:b2:ad:0c:2c:2f:3f:34:28:98:
                    f2:31:cc:0f:10:2f:b6:a0:85:c8:5e:96:c2:c3:d1:
                    b2:46:dc:59:07:2e:79:d8:10:39:1c:3f:d2:79:8a:
                    19:7c:53:b3:24:85:9b:ec:1c:de:0f:e8:8f:6d:33:
                    94:b9:bf:84:79:46:68:30:01:86:05:e8:eb:90:30:
                    13:82:5f:73:e3:dc:62:9c:ae:55:84:e2:73:3a:59:
                    92:10:b4:f2:f4:2e:b3:f8:ed:6d:a7:5c:67:7a:96:
                    6f:4f:f5:d5:2c:6b:c1:cc:90:b7:44:72:92:ff:53:
                    9d:7b:75:c8:52:79:4e:89:60:d3:af:c6:6d:03:6a:
                    3b:23:ee:07:d8:24:c9:8c:59:3a:58:f4:e6:51:b8:
                    c0:60:d1:81:3b:ce:fd:ba:0b:67:ab:97:2e:a5:14:
                    aa:bb:02:61:7c:22:21:91:4a:91:ca:a4:99:b3:5f:
                    f5:51:a3:d6:dc:8f:f3:ab:bd:61:3b:05:31:76:84:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:56:A3:50:4B:C6:10:D2:B6:3A:AF:A8:2B:2A:D8:D6:08:73:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1704c254-dfc8-4e99-adfb-1a61b698e136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2988::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:eb:c7:3b:4c:4e:bb:87:2a:3c:ed:18:7e:40:82:d0:fa:
         e7:94:fd:ce:1d:cf:4d:fa:39:29:b7:fc:cd:f0:0d:7c:2a:dc:
         88:2a:a1:96:f5:e3:e8:f4:0b:a0:99:a0:a6:d9:c7:29:ef:40:
         44:0e:29:b3:fb:d4:3d:57:23:fb:5b:ab:66:4c:c9:08:24:9f:
         36:86:26:23:22:bb:fa:b0:88:43:28:9b:a6:0d:c8:0d:88:4e:
         9e:e6:7d:28:d8:fa:f4:d8:50:9c:9c:c8:f8:59:7a:a7:a5:3d:
         9c:fd:ba:b5:42:8b:0e:a2:b1:0a:38:6a:e6:0b:9e:54:56:d2:
         99:36:57:09:68:cb:e1:30:87:06:4c:8a:61:d8:91:b9:01:76:
         34:ea:d1:92:8d:fa:3d:2b:d1:f0:b1:c3:ef:df:3b:63:09:47:
         5d:3c:47:6f:38:9e:ff:7d:5b:47:be:a3:50:0a:5b:14:39:e9:
         e3:69:08:ff:ed:0e:9c:2c:18:68:89:4c:27:01:cb:2d:f9:58:
         21:f2:d9:85:b3:a9:9e:fe:41:ef:b3:9a:42:28:12:b0:73:3b:
         85:80:05:f8:3d:d4:8e:bf:7c:7f:83:75:a1:25:2a:6a:d1:96:
         c7:33:a5:37:45:bd:67:1d:4c:e5:37:26:0e:01:aa:48:56:96:
         4f:ab:83:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:54:39 2026 by rpki-client