Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b44db4b-1d7e-4ad5-83ac-be8a5a09d941.roa
File:                     5b44db4b-1d7e-4ad5-83ac-be8a5a09d941.roa (raw, json)
Hash identifier:          XhxZD98hpigIMErfuf1Jkb7b+ialPHd+3nk5KNs7BZU=
Subject key identifier:   82:E9:72:AB:4B:DE:CA:E2:13:59:5A:FB:C9:46:D5:B7:B7:1C:AC:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       572DE5AAEA45009B051D9E0C3EF055DEFB0E5408
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b44db4b-1d7e-4ad5-83ac-be8a5a09d941.roa
Signing time:             Sun 03 May 2026 02:41:23 +0000
ROA not before:           Sun 03 May 2026 02:41:23 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ffc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2d:e5:aa:ea:45:00:9b:05:1d:9e:0c:3e:f0:55:de:fb:0e:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:41:23 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=2c0c154cf98d861f4abc7ccc5fc3aefc37847e4128c564e050f538be7938acce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:40:ab:c2:3a:e1:df:f0:ac:0d:56:5b:a5:
                    9f:b4:06:87:2d:25:ff:ff:49:44:4b:4f:1a:41:25:
                    04:77:d3:8c:9d:5a:cf:dd:59:dc:55:0c:73:a9:e4:
                    49:2e:16:38:1e:0e:5f:cd:33:e6:e1:40:bd:23:f8:
                    c9:44:8b:c0:c4:f8:fd:2b:55:a5:41:cb:d3:12:51:
                    51:2b:9c:72:2f:21:1f:10:06:7d:64:f5:05:fe:7f:
                    86:29:2b:32:b3:4a:cd:b3:b7:72:ec:22:8c:17:f8:
                    64:b3:d8:56:0d:12:71:83:1b:f7:05:33:8b:70:eb:
                    0c:73:b7:ed:30:e8:b3:6a:02:5f:5e:e0:a3:b5:88:
                    61:8f:1b:2a:56:87:25:3d:f6:b6:c3:72:cb:3e:fa:
                    6e:ab:6b:95:1d:d5:2a:21:a8:c1:43:6b:80:47:20:
                    a1:b3:1c:5e:5c:af:c8:ae:1f:62:f0:db:d9:8e:73:
                    8e:e7:76:20:c0:75:04:46:23:5d:f5:a4:43:91:da:
                    c6:66:69:bc:89:09:2b:c6:45:8b:ad:b3:b7:a8:38:
                    0f:4f:42:1d:9d:fc:f3:c8:45:71:5f:cb:f7:2f:71:
                    23:18:83:d9:b6:32:39:37:d0:b6:1f:f6:1a:63:64:
                    28:9d:81:cd:66:34:22:52:23:ac:e7:66:c7:42:13:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E9:72:AB:4B:DE:CA:E2:13:59:5A:FB:C9:46:D5:B7:B7:1C:AC:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b44db4b-1d7e-4ad5-83ac-be8a5a09d941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ffc::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:49:af:a8:ed:7f:09:03:5f:a2:64:dc:21:63:55:b2:38:c3:
         cb:a7:f9:fc:a1:2d:a3:c4:96:ef:60:a8:79:8f:7e:98:4e:d9:
         58:14:33:64:d4:19:f9:92:bf:fa:8e:94:dc:e3:03:ae:86:3b:
         66:5e:6a:36:5c:3c:94:c3:94:a8:81:6c:e0:3a:c1:22:db:10:
         92:8d:1d:a6:cd:96:3a:14:d1:24:63:9f:a8:ec:ce:39:a8:8b:
         73:8b:63:30:5e:d7:18:0c:4d:27:73:6c:ed:e2:9b:10:e1:a3:
         90:8d:d5:fa:d8:f1:78:8e:ae:fc:be:30:80:cc:25:12:98:80:
         8d:7a:c0:f2:ad:de:77:1d:15:2f:40:11:b4:51:14:e4:2c:8e:
         d7:47:d4:24:1b:b9:06:05:86:57:be:6b:1f:bd:6a:ff:8c:3b:
         62:11:25:53:eb:92:d2:ff:b7:f1:83:66:c2:cc:0e:80:aa:3f:
         1b:27:60:74:b0:0e:eb:f9:8c:70:97:de:c2:25:68:27:b2:f4:
         b2:43:36:e0:19:f3:92:4a:65:25:6c:9b:b4:8c:e0:4f:4f:99:
         a9:59:6d:a9:fc:b3:9f:3d:cd:e0:3c:b1:b5:2b:14:95:a2:95:
         65:33:08:5b:f6:c6:e1:a5:ca:2f:9b:2c:4a:6d:3e:c8:dc:2e:
         21:23:7b:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:28:31 2026 by rpki-client