Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45565068-20b5-4f41-b71c-2045af24d3ea.roa
File:                     45565068-20b5-4f41-b71c-2045af24d3ea.roa (raw, json)
Hash identifier:          WtRsYXHFZPfK2pHmd18dcqu8pcVFVjSfMpfC+cow4ag=
Subject key identifier:   55:FD:E9:F4:D9:38:0A:D9:8C:9F:0F:34:45:55:78:EF:BF:74:0C:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A4A7A33071D540AF51F7723F98623A8BC5EEF12
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45565068-20b5-4f41-b71c-2045af24d3ea.roa
Signing time:             Sun 03 May 2026 00:11:07 +0000
ROA not before:           Sun 03 May 2026 00:11:07 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ad4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4a:7a:33:07:1d:54:0a:f5:1f:77:23:f9:86:23:a8:bc:5e:ef:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:11:07 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=c1fab75e3cdef49ca435216169ad09c62a865bfcbce6cb7f43be1af571b7c6f9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:b0:0c:65:3d:db:f1:32:a4:1b:30:40:fb:
                    18:b5:62:eb:9e:c5:94:e0:70:ce:ac:69:e9:6f:0f:
                    7d:80:3d:0a:d8:3e:74:0f:bd:d2:e5:be:6b:30:15:
                    00:aa:5e:40:78:2e:9e:1f:bd:f5:a9:4c:e9:59:9d:
                    36:bf:21:1a:2d:96:34:70:9e:2d:74:85:9f:e8:d7:
                    d5:36:bf:d3:45:23:16:42:74:04:e7:fb:2e:62:f0:
                    3d:e8:53:10:d4:f8:ad:81:5d:20:8d:9b:59:d4:aa:
                    dd:ed:1f:71:7b:82:61:38:05:78:a2:21:94:cc:0a:
                    24:dd:cf:af:5f:d7:9f:fc:cd:a9:0b:ce:06:f8:dc:
                    82:5c:ae:58:85:d3:2f:c8:3b:53:37:fa:9d:dc:0b:
                    26:49:3e:2a:9f:d9:d4:c9:11:fe:f9:e9:20:69:07:
                    1b:37:4c:21:e3:8c:30:c3:8f:e5:35:76:95:d5:e6:
                    99:3f:54:a7:8c:a3:73:cc:f1:ab:64:a2:3f:65:d0:
                    60:30:26:93:93:48:af:65:75:08:40:d3:77:49:7b:
                    0a:c1:b9:12:d0:e6:ad:fc:70:ba:bd:4d:79:5d:23:
                    a3:66:8b:aa:13:30:19:ed:a9:c8:ad:cf:b7:db:e7:
                    97:d8:e6:1a:a2:2a:99:25:93:6a:6b:57:ce:fa:0e:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:E9:F4:D9:38:0A:D9:8C:9F:0F:34:45:55:78:EF:BF:74:0C:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45565068-20b5-4f41-b71c-2045af24d3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ad4::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:c1:af:40:3b:c7:cd:97:ab:72:5c:b6:e0:e4:4b:16:15:
         5a:e6:2a:22:7d:9a:bc:3f:46:d7:32:16:46:f8:37:85:fb:da:
         80:68:dc:63:0a:37:89:13:f9:74:97:22:ef:77:73:5d:ab:7a:
         4b:34:c0:5d:4c:62:0b:a8:1a:0c:26:1f:54:23:8e:8e:86:29:
         d3:45:f0:77:a8:4d:d4:55:63:69:3c:e1:28:5c:0d:17:06:7b:
         2b:88:ff:fb:fe:64:a6:50:3e:f1:c1:7c:45:cc:a1:c4:61:50:
         a6:6e:ca:c5:da:a6:d8:7f:3d:99:8a:de:88:77:8b:1f:f3:ae:
         80:17:d1:46:f9:ee:27:c0:60:b2:36:8c:33:22:28:bd:2f:69:
         6e:bc:16:e6:ed:c7:92:f7:1b:8a:45:42:5e:57:52:7d:67:b8:
         62:77:b6:26:46:b8:a2:a7:1b:35:55:ec:7f:79:dd:c7:10:48:
         1e:b2:9d:4e:e2:cc:49:dd:6a:b1:56:1d:12:d0:ca:0d:9f:19:
         86:a1:87:3e:b8:30:aa:63:0c:b6:a5:bb:52:04:fd:b7:ff:c6:
         12:16:7b:f3:e9:77:64:4d:24:fb:12:a7:c3:2a:bb:24:4f:a9:
         48:61:35:83:39:1f:4f:6f:86:88:d3:3e:4f:82:c1:56:b3:cf:
         47:13:f7:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 17:04:10 2026 by rpki-client