Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa
File:                     4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa (raw, json)
Hash identifier:          /Sgk/Tnk6TGn01H4u5nfVXF9tvsiYXqRXjPFkO1txas=
Subject key identifier:   13:70:B3:31:29:F3:CA:27:92:76:D2:36:9A:6D:62:D6:F2:09:36:42
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       534813EA7AD911077A81F5E7EF7FD1E5CDFBCBE3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa
Signing time:             Sun 03 May 2026 02:01:18 +0000
ROA not before:           Sun 03 May 2026 02:01:18 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dde::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:13:ea:7a:d9:11:07:7a:81:f5:e7:ef:7f:d1:e5:cd:fb:cb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:01:18 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=94ad019f37482472bffe7ad437c13282783407e8d7331aa669d1786588fe3588, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:c9:aa:37:a1:ce:f4:83:a2:f2:d1:db:2a:
                    fe:37:26:e5:7a:2a:2b:3e:5d:de:9f:7b:48:d0:c2:
                    6d:74:8c:86:24:98:f7:fc:37:c6:7e:90:be:b5:f2:
                    a7:4f:a9:01:2e:38:bd:3a:77:4b:a7:66:01:68:2d:
                    96:6b:f8:d7:b9:a7:18:d1:21:bf:da:1b:ed:54:96:
                    6b:fd:68:53:6c:e0:8f:3c:18:00:c4:3a:89:09:ae:
                    c5:9e:7c:90:be:24:52:f9:a3:0e:b7:cc:8c:67:be:
                    c6:e8:50:a8:5d:19:d2:c1:7e:3c:05:48:4d:9b:0f:
                    78:d9:54:f7:59:40:12:4a:01:c0:cd:fe:8a:9c:4e:
                    f4:7f:a3:ab:b0:8a:ab:31:5b:ff:cc:f4:33:3d:8e:
                    6c:29:f0:05:67:b3:03:f0:05:09:5c:9a:e1:a4:45:
                    28:51:61:8f:cd:95:c0:09:77:6d:0e:5a:a6:51:3f:
                    0c:5a:1d:47:4c:f3:eb:2e:a0:a1:9a:f6:aa:15:70:
                    93:a4:a4:b1:2f:e2:da:4a:3c:df:57:5e:4f:84:4f:
                    4e:b4:3e:fe:5c:e8:e5:6e:c2:32:6c:a1:42:0c:e0:
                    e5:7c:2e:32:7c:b4:85:b2:56:91:bd:ac:9d:3f:06:
                    da:99:f7:b0:42:77:3a:02:4e:19:60:3e:1e:27:01:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:B3:31:29:F3:CA:27:92:76:D2:36:9A:6D:62:D6:F2:09:36:42
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b5ed0af-e28b-4af7-8df7-a1acff7660e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dde::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:eb:35:04:e2:92:9f:cb:60:42:b2:9a:d4:5a:e4:b8:6e:
         ba:84:72:ff:76:de:33:91:14:ef:a9:c1:78:67:07:98:58:3e:
         aa:a6:11:8b:3a:2f:cd:06:52:dd:b9:82:96:08:0b:9b:4f:e7:
         bb:ab:29:1c:24:7e:91:1f:78:4c:d8:43:4e:5f:5d:83:42:1c:
         4c:48:1f:b4:ad:74:2f:7b:46:b0:07:93:c0:5d:63:af:b9:9d:
         53:c3:5c:1d:f8:29:c8:58:ed:46:e9:64:c5:45:00:e6:27:34:
         5d:39:8f:69:a9:1e:a3:2e:b5:6f:15:dc:27:42:1d:2c:64:ad:
         2f:de:70:ff:44:39:86:41:a6:52:6e:55:0b:83:62:f8:ba:9a:
         7b:a0:6f:b6:d8:74:a5:63:c4:7d:33:90:6d:1a:80:ae:98:ba:
         cd:e3:3e:f8:b6:2c:36:3c:6f:7d:fb:a4:7f:f4:36:14:e3:88:
         fc:2e:c3:d1:c5:26:ef:87:63:2b:0f:fe:0b:8e:f1:47:21:1a:
         9e:46:52:a6:6f:96:70:d4:1a:05:fa:ec:2f:f0:11:99:c3:0b:
         8a:c9:bb:0a:a6:88:92:c7:38:7f:31:9b:af:96:0f:ac:a7:34:
         28:40:87:59:5b:fa:2c:ad:77:d1:d2:0a:9a:bb:2d:0e:36:2b:
         16:3b:bb:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:48:05 2026 by rpki-client