Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e43a62e-2fcb-4022-ad67-47e4d45cf3ce.roa
File:                     8e43a62e-2fcb-4022-ad67-47e4d45cf3ce.roa (raw, json)
Hash identifier:          JbE2vH2OazNntVSMCdKOUW9dknM9yK4JrcA265wNhb4=
Subject key identifier:   0F:59:D9:E1:C8:D6:39:F7:9A:7A:80:A2:9B:B1:D1:EC:1E:CE:7C:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4900F058A9C25417CCCAD65BC3EE5CCEC2977F59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e43a62e-2fcb-4022-ad67-47e4d45cf3ce.roa
Signing time:             Sun 03 May 2026 00:00:50 +0000
ROA not before:           Sun 03 May 2026 00:00:50 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:20a8::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:f0:58:a9:c2:54:17:cc:ca:d6:5b:c3:ee:5c:ce:c2:97:7f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:00:50 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=4f353948518b60699176ee4027bd12a36ac9da23d20be69c8ab237eb2bd5ac20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:a5:be:c0:08:04:60:f4:e6:f8:7a:38:1a:
                    bf:ef:ad:38:39:02:bf:f2:26:ce:1b:03:9f:b4:90:
                    99:b0:9b:77:3e:f3:91:fb:ad:e7:0d:f0:25:84:a4:
                    15:73:f6:db:cb:a7:42:87:e7:ea:20:97:87:97:1f:
                    94:e0:0d:1f:ef:39:61:a4:fe:e4:5b:3a:c1:22:e6:
                    b8:09:f2:52:54:b7:00:4c:f5:3b:a2:32:b8:c3:95:
                    61:49:92:52:2a:48:86:9e:a2:60:fd:8f:62:19:14:
                    b3:93:45:7d:dc:9d:54:b2:45:ae:bb:10:dd:4f:d5:
                    25:10:fe:15:98:c2:7c:0e:59:63:7e:78:23:29:f5:
                    ec:aa:84:7a:5d:b7:98:a7:14:4c:14:59:da:d3:de:
                    52:57:23:da:4b:e4:a3:b0:55:ff:9e:23:4b:a9:d1:
                    1b:93:7f:ce:2f:b4:d1:64:1f:e3:95:24:d7:78:ad:
                    b1:4a:5e:19:fd:10:92:41:78:29:8a:2c:49:38:01:
                    7e:24:a0:58:75:de:96:62:bf:8a:78:f3:15:2b:20:
                    f3:42:fd:2b:95:3c:20:a6:99:2f:cd:c0:55:8a:fe:
                    d2:43:94:7e:25:82:67:8a:38:b7:00:6a:a6:07:af:
                    63:5f:33:1f:a4:eb:c2:88:f7:05:7c:14:f0:cb:76:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:D9:E1:C8:D6:39:F7:9A:7A:80:A2:9B:B1:D1:EC:1E:CE:7C:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e43a62e-2fcb-4022-ad67-47e4d45cf3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:20a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:d1:39:00:ad:9f:2b:d0:00:7c:63:35:de:b7:9e:c7:a7:
         3c:96:79:ab:7e:6c:d2:be:98:79:95:08:5d:ec:21:fd:a8:56:
         35:b3:ae:76:0d:a6:0c:49:88:c1:d2:98:4f:2d:99:bd:49:a0:
         2e:57:35:22:ea:08:cd:8b:5f:a4:d4:64:7b:96:50:1d:3a:3b:
         d5:40:82:fa:df:84:b4:e1:c1:62:6e:6b:49:62:0c:53:2f:52:
         0f:73:37:31:37:00:bc:99:b3:43:ba:78:bd:89:a2:c0:91:f8:
         18:33:16:64:a2:48:eb:60:a4:bc:cd:3b:83:0b:ef:b4:c6:3d:
         81:29:49:42:46:fd:8a:62:24:18:12:36:d5:50:ba:ef:e1:49:
         d1:51:40:15:d5:31:44:5f:44:d0:c6:36:db:b2:41:c7:27:42:
         53:59:71:b4:38:f8:79:d5:1a:b1:31:6e:bd:de:71:b8:46:44:
         7d:81:5f:6f:4c:9c:e9:ab:f0:1b:7b:31:fb:1f:9f:d2:ea:4d:
         0e:b1:43:89:c4:fd:f1:d7:9d:81:90:55:69:9d:b8:4d:8c:b1:
         d9:09:ce:3d:55:03:ca:08:b5:79:01:17:bb:c9:08:7a:34:87:
         85:8d:c2:96:2b:34:8c:18:a3:3a:73:bc:6c:dc:e1:67:a9:06:
         e9:a4:ba:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:24:53 2026 by rpki-client