Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa
File:                     955dd925-093b-4cc5-8367-82d54738ad7c.roa (raw, json)
Hash identifier:          NQt1VUFQi0u515qKBa2OECJ85Jl+/NKkpTK6xEJuDeI=
Subject key identifier:   BA:8D:97:A7:08:D8:60:05:97:BB:89:75:07:2D:00:61:CA:CF:5B:A5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       567B286CC1809F9C8B01ED1F6366DC02A9A21B06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa
Signing time:             Sun 03 May 2026 02:40:09 +0000
ROA not before:           Sun 03 May 2026 02:40:09 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1238::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7b:28:6c:c1:80:9f:9c:8b:01:ed:1f:63:66:dc:02:a9:a2:1b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 02:40:09 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=419e259dd38454971ff5aa04fc7c7681f80072d2c94246db21371e2cb890b000, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:b8:a9:d2:2d:a4:ba:8a:7f:7a:ad:c6:0e:
                    8b:fd:b0:6e:c6:84:f9:7e:bb:5b:53:2f:a9:ed:0e:
                    9b:e2:01:9e:b7:29:3b:a8:57:01:5c:a7:a9:98:19:
                    10:f7:fb:66:d5:80:1b:02:0d:83:84:65:ed:d8:c1:
                    7b:4f:31:6c:c4:f7:88:88:31:2b:48:f8:7f:5a:79:
                    f6:0d:0b:e1:df:c0:f8:12:09:1b:3d:ed:a3:33:d5:
                    23:33:47:25:8a:f0:c5:33:e5:49:b1:c1:3d:45:6a:
                    c5:49:dc:95:bb:ac:af:46:ae:79:7d:cb:83:ad:0b:
                    81:15:33:79:57:5a:f4:f9:24:8d:2c:4b:d0:8e:1f:
                    c9:f0:da:04:31:e1:d4:96:bc:c0:30:83:4c:ac:49:
                    45:1e:f9:64:d7:f0:5e:50:0c:ac:9a:e2:a5:de:e1:
                    fd:d0:ec:19:b1:9d:06:af:c3:e9:71:07:e0:62:dd:
                    b4:f8:cd:40:c8:de:53:78:5b:c8:49:85:9c:f7:ff:
                    a8:4f:69:e4:ba:34:67:fb:bb:20:f9:07:61:26:61:
                    13:c1:60:65:22:9a:70:cd:ad:c7:dd:b8:c0:e5:c4:
                    f2:ae:6d:b4:bc:84:fb:c7:70:a7:f2:8a:64:66:b3:
                    aa:56:55:aa:ab:d0:79:36:5f:a7:b5:77:51:9b:a7:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:97:A7:08:D8:60:05:97:BB:89:75:07:2D:00:61:CA:CF:5B:A5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1238::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:63:8c:bd:62:a1:22:f8:86:45:84:cf:02:08:52:4e:17:
         d7:0d:fb:e6:5b:9e:8e:b9:99:6e:ac:f2:a1:ac:da:1b:4e:e5:
         90:26:fb:b2:87:aa:5e:6c:96:fa:83:d0:d2:48:97:c3:ff:9e:
         12:ae:76:63:fa:2e:de:e2:fc:37:b0:aa:af:e3:4f:a1:7a:fc:
         de:7d:01:79:0a:95:1b:aa:bb:74:39:8f:ec:1b:7a:e0:98:0a:
         50:e8:9f:4f:41:20:86:5e:a9:8f:b8:2b:61:cb:3a:7a:ca:54:
         15:39:43:9e:db:50:0d:bb:f6:59:2d:2b:53:24:2a:fb:0c:98:
         84:50:26:6f:78:40:42:4c:80:2d:10:67:1a:02:50:b0:dd:07:
         0f:79:84:85:d1:19:84:5d:9e:1e:e7:b9:f2:5c:43:2f:7f:c4:
         a4:35:af:ca:de:2a:cb:92:4d:7c:e9:c4:da:41:d6:16:27:1b:
         68:b4:da:c3:49:a9:1a:6c:bd:d2:f9:bc:b1:23:3c:bb:2d:ac:
         cd:f7:6f:12:93:56:c0:9b:f3:0b:29:db:9f:7e:6e:62:e6:ed:
         d6:8f:cf:3e:9e:84:9e:c1:8b:34:40:19:20:64:05:12:3e:c5:
         99:23:15:9e:7b:9b:b1:24:88:30:c3:9b:49:04:93:8c:db:7c:
         49:cf:61:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:57 2026 by rpki-client