Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa
File:                     4c263704-eea7-4bfc-88ea-54aa3459d445.roa (raw, json)
Hash identifier:          zbDdl8fudwasFMF9hwrsZLqOGJkDf+W9vfbRNsbaDEM=
Subject key identifier:   D8:6D:6B:13:A2:62:D9:42:49:84:D1:6E:C6:25:EC:63:91:55:D4:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26FAEED403A3556BC8633D147FAAFEA3FD9EFC3B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa
Signing time:             Sun 03 May 2026 01:20:49 +0000
ROA not before:           Sun 03 May 2026 01:20:49 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ed4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fa:ee:d4:03:a3:55:6b:c8:63:3d:14:7f:aa:fe:a3:fd:9e:fc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:20:49 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=b2bcffa543ab4dad2f471576060840b8701738003d14c25c0df5a09e99281932, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:5f:77:bd:c6:42:04:e1:cf:b3:ed:72:3a:
                    a4:e7:c3:74:5e:60:ab:2d:64:8c:7b:8c:e0:c1:62:
                    85:55:a8:d1:34:70:ed:51:c9:2f:5f:a5:eb:09:6f:
                    18:dd:ea:a8:b0:05:24:02:6f:e3:7d:a1:b9:fa:74:
                    1e:17:df:00:cd:f7:3f:26:b8:93:ff:21:71:9b:3b:
                    24:4e:38:76:4f:35:f9:10:18:04:6c:17:c7:c3:84:
                    66:1b:b3:76:f6:8b:da:8b:3c:1c:ac:66:b6:92:43:
                    e0:7b:22:b6:a1:06:f8:9e:e4:0e:14:20:66:ed:75:
                    10:c2:95:b5:2f:9d:8e:d4:3b:3f:ee:98:e4:4e:79:
                    32:ff:46:44:f4:77:83:87:f9:1e:17:03:d7:ca:18:
                    b7:41:ea:2e:fe:db:b0:05:ae:1b:eb:9a:48:1f:60:
                    b4:f1:2b:94:d6:3b:5c:4e:c3:3f:47:06:dd:28:57:
                    c5:bd:3b:eb:a2:96:30:e0:29:ed:06:e7:88:65:f2:
                    d1:e0:aa:c7:be:65:2b:96:fd:b4:b2:18:25:31:4a:
                    37:a3:e9:1f:2f:7a:87:89:36:7e:0b:dd:c9:3a:e4:
                    72:8f:ff:bb:2c:33:8a:29:8c:83:52:98:e1:1b:5d:
                    99:b4:63:5e:98:23:1c:81:9f:9e:81:cf:8b:f3:d9:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6D:6B:13:A2:62:D9:42:49:84:D1:6E:C6:25:EC:63:91:55:D4:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ed4::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:61:99:4b:5e:1a:b0:ec:74:bc:39:5b:f8:5a:8e:49:35:
         15:ee:94:18:8d:4e:2f:51:f9:0a:52:2c:35:32:0e:ac:de:8d:
         26:e3:3b:12:56:bb:b8:55:73:ed:87:21:61:64:f9:45:35:b0:
         ac:f7:2b:dd:0c:a5:2b:34:c5:c5:e3:de:7b:ef:29:03:77:a9:
         df:61:7d:e8:b9:68:d2:86:d2:cb:3f:40:6e:b4:e5:eb:eb:3c:
         9c:13:cf:1f:3b:74:18:a7:80:01:45:23:4e:d0:68:c3:a9:99:
         62:ca:27:8a:8d:84:17:6b:6d:46:70:a4:f6:36:d4:f4:82:58:
         d0:59:12:ea:6b:88:ed:6c:3c:b4:ad:86:2e:52:de:7b:88:cd:
         89:93:05:94:2c:fa:8b:df:5f:a0:cb:95:ec:60:0a:28:78:29:
         48:60:14:a0:c4:2c:ec:c8:20:75:93:c5:33:7c:9a:cb:f6:61:
         94:e0:0a:0b:58:ee:8f:76:ef:51:b8:b3:2f:f0:a4:b4:07:95:
         c8:1e:00:2f:45:db:bd:c9:8a:32:89:6c:85:b8:1b:6a:cd:37:
         c7:27:56:82:10:b6:a5:e9:fb:8b:d4:5e:72:99:1e:04:fc:8e:
         90:9d:00:c1:a3:26:75:b0:9a:61:92:d1:64:4c:d9:60:e1:b1:
         32:7c:23:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:29:20 2026 by rpki-client