Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73352b9d-9588-49ea-b621-2c73e1d0798e.roa
File:                     73352b9d-9588-49ea-b621-2c73e1d0798e.roa (raw, json)
Hash identifier:          Vp3dAnAvmuwuuqiZ3cOeF23uvbKzwhkkotMFHKyJDnw=
Subject key identifier:   75:85:A4:61:5A:AA:82:9A:56:C5:86:36:E9:4E:65:3B:F4:D7:F5:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F5299332181013DD1730A198ABAA3EBC38C6C99
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73352b9d-9588-49ea-b621-2c73e1d0798e.roa
Signing time:             Sun 03 May 2026 01:20:51 +0000
ROA not before:           Sun 03 May 2026 01:20:51 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:207e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:52:99:33:21:81:01:3d:d1:73:0a:19:8a:ba:a3:eb:c3:8c:6c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:20:51 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=faa9b33952cd8be5dc7653f1695e4299e6a13074ac21181fd9ba35e7087be248, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:68:40:b0:6c:9c:b3:67:c7:45:22:a1:01:
                    33:c2:f4:57:e8:ad:2a:db:89:e4:5c:9b:76:6c:88:
                    ce:a7:6e:37:33:3b:77:ac:2c:47:70:e3:f5:77:49:
                    ea:bd:83:f5:32:40:a2:a2:03:a8:b5:f1:68:5b:fe:
                    5d:b6:e8:cb:bb:30:a2:ed:b9:a2:91:63:1a:fa:e2:
                    25:ee:26:68:51:2b:28:4d:93:bd:e5:18:ee:13:a3:
                    12:cd:c3:2e:83:a7:b5:75:52:27:41:06:64:77:92:
                    b7:50:34:8d:6d:61:2a:67:19:08:51:a6:eb:61:2f:
                    64:73:d3:5b:dc:22:ef:fe:04:c3:4c:42:34:9f:b2:
                    14:ba:2e:72:c8:3c:72:3b:56:fa:86:2e:68:1e:71:
                    34:dd:26:12:55:a6:e9:b3:3c:0c:7c:de:e8:b7:76:
                    cb:53:96:26:15:8a:20:aa:9b:da:03:c5:1c:2d:6d:
                    94:ff:b5:8a:0e:29:e6:7b:d2:94:51:5b:b7:eb:fd:
                    3d:ca:97:cd:fe:9c:88:b9:22:14:6c:65:7d:30:11:
                    e0:fb:f1:ba:22:fe:db:07:0b:47:04:b2:d8:cb:f0:
                    8c:0f:4f:ad:d3:67:6e:2e:e8:b5:c2:8b:93:7c:78:
                    77:41:07:97:39:ed:95:f7:d4:b6:58:1d:36:50:f5:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:A4:61:5A:AA:82:9A:56:C5:86:36:E9:4E:65:3B:F4:D7:F5:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73352b9d-9588-49ea-b621-2c73e1d0798e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:207e::/47

    Signature Algorithm: sha256WithRSAEncryption
         20:26:2e:e9:72:03:a0:fb:7e:93:fc:2e:29:c7:60:f0:33:40:
         7a:b4:41:f3:65:ee:2d:ef:d4:55:49:a4:89:6e:57:53:8a:d6:
         cb:6c:f8:4f:4b:8a:92:3a:14:a1:68:67:63:94:09:19:bc:ad:
         b5:79:33:1a:ee:38:2f:52:44:21:5a:45:b0:56:84:d8:3a:d8:
         b2:ec:c4:94:f4:f9:62:1e:03:0c:49:43:64:77:a6:98:36:1d:
         e0:2c:62:ac:80:64:1a:76:43:f7:67:df:fc:fb:a6:a8:d2:f4:
         cb:0c:65:bb:2f:24:d7:c0:04:19:93:88:05:d5:17:a0:ec:22:
         54:b7:64:86:f2:81:95:ed:de:23:26:2d:2b:d0:51:99:00:b5:
         5b:3a:7b:e4:f0:8d:34:97:97:fe:f8:3c:76:21:6e:fa:20:8c:
         fd:6d:99:a1:e8:44:cf:86:44:67:dd:4f:f4:e5:dd:fc:34:73:
         d6:cf:d6:da:06:c3:04:0f:09:6f:c1:1f:2c:40:6a:dc:cc:66:
         25:ac:40:ff:69:a2:54:ae:72:0b:1e:bc:19:3d:3d:4f:b9:8a:
         18:9a:9b:e2:a3:36:99:cb:fa:34:48:40:e5:62:f4:20:f7:a7:
         c6:88:6d:03:1b:34:f9:e7:77:be:f2:58:db:29:86:79:c9:b0:
         8c:7b:c3:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:29:16 2026 by rpki-client