Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ecc68-f689-4834-90d2-93df46bb8b92.roa
File:                     2d7ecc68-f689-4834-90d2-93df46bb8b92.roa (raw, json)
Hash identifier:          Hq/n6gaFET+7dO9FrZ/7WAXd0Y7XmmNR4aBZaCODw7M=
Subject key identifier:   5F:B5:63:EC:B4:EA:5F:26:15:00:30:94:29:53:1C:50:5C:29:B8:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A927CA298B1D6D98D90079CAC76CE0F169F880B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ecc68-f689-4834-90d2-93df46bb8b92.roa
Signing time:             Sun 03 May 2026 03:20:06 +0000
ROA not before:           Sun 03 May 2026 03:20:06 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b86::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:7c:a2:98:b1:d6:d9:8d:90:07:9c:ac:76:ce:0f:16:9f:88:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:20:06 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=40e03349397afe748389c4b2dacb527783dd165e497190c644c7187936040419, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:70:92:1c:0d:34:d4:91:fb:82:26:c0:3d:
                    3f:87:1f:5a:6a:c3:38:fb:bb:e1:be:ca:6b:99:83:
                    11:44:d5:5c:7b:62:f0:b9:1f:c0:c1:c5:bd:44:65:
                    5f:31:35:e0:d6:f3:74:21:de:e7:89:63:5a:98:44:
                    cc:2b:92:75:73:73:c2:08:de:63:9c:1b:74:1f:ed:
                    98:05:1a:e0:67:5a:8b:6e:d9:bf:59:e5:33:6a:47:
                    cd:35:be:50:91:eb:88:49:1e:a5:83:66:22:32:ca:
                    07:15:88:7c:01:8f:a1:e7:d6:a4:e7:28:64:55:73:
                    45:bb:4d:62:69:c3:d5:59:d1:aa:dc:8e:77:55:65:
                    5e:6c:52:10:03:3e:3b:bf:7b:43:a8:02:e4:41:45:
                    05:b7:6d:57:5f:a1:8c:87:c8:fa:31:d7:18:f3:e0:
                    4d:6a:a6:84:72:dd:3b:62:92:a8:d0:df:88:af:0d:
                    e8:19:77:fb:95:0a:1a:3d:0e:e9:91:99:3c:9a:8b:
                    c3:32:59:57:bb:44:38:12:42:19:a6:03:30:55:93:
                    ff:1c:e2:0b:f4:a7:a0:de:05:9d:13:ab:03:a4:61:
                    72:40:c6:05:4b:f6:7e:c8:fa:2a:63:df:56:d0:ca:
                    5c:56:69:07:f7:a8:4b:3f:77:36:9c:7c:66:05:33:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:63:EC:B4:EA:5F:26:15:00:30:94:29:53:1C:50:5C:29:B8:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ecc68-f689-4834-90d2-93df46bb8b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b86::/47

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:39:bc:6d:16:e0:53:68:1c:a8:0a:e7:57:9d:bb:10:70:
         42:f4:77:37:d4:a6:51:b5:90:22:a2:cd:60:d7:e5:df:48:6d:
         d1:ea:da:56:a1:78:5f:67:72:2a:be:b5:6e:70:ac:3d:fa:1d:
         ef:ca:fb:e0:e7:2f:f2:02:b4:87:b3:4a:e7:d1:e4:10:59:f7:
         fa:c6:e1:24:04:83:88:96:96:ec:ac:ea:e8:40:31:8c:81:5b:
         33:89:9f:c9:22:f0:89:a0:9a:b1:36:8f:67:cc:42:97:c3:c5:
         c0:58:59:08:bb:a5:86:7b:3a:d5:f2:22:d3:98:ea:11:40:c8:
         f4:96:d5:1c:3b:08:5f:a1:6e:da:c6:63:50:6f:6b:04:da:41:
         7d:49:bc:78:26:6a:c2:1b:09:ac:30:c8:19:c8:70:b0:24:de:
         d3:ce:8b:d6:e6:8f:33:31:e7:96:ca:69:33:4f:74:67:c9:d5:
         32:82:99:b4:15:d4:28:ec:6d:34:c2:bf:e2:47:f0:47:43:f6:
         f7:82:01:b6:03:0b:97:02:8c:34:e3:1c:e4:b1:5c:07:f9:54:
         c6:ff:08:ba:43:3c:2d:74:43:d5:c3:79:35:29:bb:ef:f3:29:
         37:6e:62:86:9b:58:35:49:b6:55:e2:ac:9a:98:a8:10:72:98:
         a1:ba:03:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:26:50 2026 by rpki-client