Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/946d0861-a03f-46df-bb0e-c6aa31cb4a8e.roa
File:                     946d0861-a03f-46df-bb0e-c6aa31cb4a8e.roa (raw, json)
Hash identifier:          PDBHaWkATpUMGctn9zgJxBPYSNFBqTH8XYyMHml4AWk=
Subject key identifier:   A1:E6:3D:91:CF:BF:94:EC:A8:7C:DC:EF:CB:46:24:7A:93:ED:CD:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       505BC592245B07CC8A0FF5D13F9FCB56FF9A10AB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/946d0861-a03f-46df-bb0e-c6aa31cb4a8e.roa
Signing time:             Sun 03 May 2026 00:01:22 +0000
ROA not before:           Sun 03 May 2026 00:01:22 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c94::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:c5:92:24:5b:07:cc:8a:0f:f5:d1:3f:9f:cb:56:ff:9a:10:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:01:22 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=bc5fa52599db36a8c5966a2ec965b0c26e0b70ebcac573fdc9d74ac95af7dbd2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:3b:d9:c2:d9:65:d1:f7:f5:47:68:64:12:
                    84:40:3e:7b:5c:da:a3:11:05:ca:dd:9c:58:d6:db:
                    5d:dc:36:da:5a:a3:64:a1:f3:50:4a:6e:5e:1b:84:
                    a4:3a:ca:5a:3c:db:16:2e:1e:0b:92:1d:20:78:4d:
                    71:1e:7d:b7:6a:a4:d7:80:4d:db:35:8d:c0:2d:c0:
                    be:c7:1d:43:0f:3f:d5:96:cd:d9:f3:cb:50:0f:60:
                    01:79:29:68:96:ac:73:ca:cd:cd:da:ec:25:79:38:
                    34:84:90:2e:df:91:43:63:ff:39:57:10:78:eb:28:
                    37:1e:cf:97:dd:22:4e:9f:58:41:b1:fa:bf:f6:b3:
                    a9:e4:f1:48:58:d3:42:5c:02:eb:45:57:15:46:f1:
                    4b:42:c4:c1:b3:2f:b2:6b:94:0d:1c:0c:47:c6:03:
                    b4:1e:1b:7c:ae:29:f5:57:95:22:3f:6c:c2:da:19:
                    2a:50:47:4b:de:b0:f7:77:ec:d9:bc:51:80:ff:dc:
                    78:4e:c2:ed:49:f6:1a:e8:7c:fa:d1:1d:74:28:f4:
                    40:a3:fb:d6:e9:1c:a1:76:7f:5a:d7:6b:a6:fa:fa:
                    9d:d0:31:e8:ed:7c:33:fa:90:44:24:0e:74:9f:40:
                    08:aa:fd:55:80:cc:eb:cc:e6:b6:60:1a:61:c2:da:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:3D:91:CF:BF:94:EC:A8:7C:DC:EF:CB:46:24:7A:93:ED:CD:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/946d0861-a03f-46df-bb0e-c6aa31cb4a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c94::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:3d:94:37:c2:e1:39:1f:1c:f3:b9:d9:3d:53:3b:61:dd:
         87:9f:37:b2:97:0f:44:f2:45:72:2d:86:90:97:a3:a0:11:2a:
         dc:01:27:51:d8:5f:36:7a:cf:46:87:48:bb:90:28:2f:5b:96:
         d0:aa:43:d6:ef:0c:b4:10:d9:58:b9:5b:27:42:7e:47:81:72:
         4a:6b:a3:8e:e3:0c:98:40:63:32:fd:bb:a6:1e:1c:f0:2c:77:
         7b:42:a7:8f:a0:ab:8a:8c:7f:e0:40:75:6e:c3:b4:20:08:8b:
         ee:29:08:fd:1d:98:71:27:b5:0d:de:53:e0:76:61:5c:7d:70:
         c4:5f:30:a3:a8:f4:48:b0:84:dc:0d:d1:f7:fb:8b:14:fa:e9:
         13:93:b2:d1:0b:a2:0f:6c:95:3e:59:88:3b:89:e4:c9:64:22:
         77:8f:9a:c0:89:15:2b:b7:60:b0:75:fd:18:36:cd:aa:51:35:
         c5:29:9e:8f:99:7e:c3:4f:1f:3a:82:98:e4:d9:d6:99:84:3f:
         b0:f0:fc:40:b8:a0:8c:d7:e7:91:ba:69:ff:fa:43:2c:55:19:
         df:c6:e0:05:d3:2e:09:ac:8c:8a:11:31:20:c0:c0:ab:d9:f2:
         8c:d4:11:3d:57:f6:c7:f0:02:46:12:59:83:bd:9a:29:04:15:
         18:8b:02:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:49:02 2026 by rpki-client