Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc364e8-0c4d-491b-9707-a0ff6ccc67fb.roa
File:                     adc364e8-0c4d-491b-9707-a0ff6ccc67fb.roa (raw, json)
Hash identifier:          TFv0+CU51SujaYD00R4SK1a6VEG9LcyVdTXbe6e1KSM=
Subject key identifier:   04:A1:E0:DC:42:0C:59:37:6C:25:DF:F6:22:B9:FF:AD:2A:06:F8:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       019ACB9D0AE52359ECBB499768C190EC00F2B644
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc364e8-0c4d-491b-9707-a0ff6ccc67fb.roa
Signing time:             Sun 03 May 2026 00:10:39 +0000
ROA not before:           Sun 03 May 2026 00:10:39 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dc2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cb:9d:0a:e5:23:59:ec:bb:49:97:68:c1:90:ec:00:f2:b6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:10:39 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=8aa27ae931409efb84280bb18e6fc098750915494c22793e2789a025604bb713, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:08:95:b3:b7:f6:b0:13:8b:89:9e:18:ba:e4:
                    ad:a6:0b:8a:cf:4d:60:b1:8a:da:01:1f:52:f4:5d:
                    20:d4:49:34:d8:bf:0e:e2:79:22:a6:ca:e4:c4:e7:
                    b6:52:85:92:c9:8b:f2:06:57:1b:12:6a:85:5e:46:
                    c6:0c:64:dd:79:82:29:fb:df:6b:bc:93:7b:31:cc:
                    e0:3c:96:79:81:38:3d:e3:ef:28:29:7c:53:e4:c9:
                    dd:03:91:87:83:c3:0e:f3:26:ad:ce:02:90:e3:0b:
                    a3:cc:bb:a0:87:85:58:7b:ba:fe:31:37:df:e0:68:
                    41:50:ce:b5:04:8e:bd:51:2f:ae:31:17:2a:12:ce:
                    0a:c5:0f:4b:52:05:93:6d:44:d0:d7:ca:5c:de:1e:
                    0c:88:89:d5:31:85:42:76:1a:87:23:d3:75:70:eb:
                    be:02:f0:69:56:d0:55:35:8d:88:00:05:7b:c5:7f:
                    7a:77:4a:89:40:af:7d:ee:ef:9c:d7:86:9c:80:3a:
                    19:10:a9:80:94:ec:cf:a9:5f:91:23:8e:7d:c3:6a:
                    cb:fb:28:1a:18:f1:5b:02:39:40:88:25:ea:30:7a:
                    9d:39:08:1d:44:55:00:90:6d:b1:9d:96:0e:37:1b:
                    e0:9c:15:9a:fd:3d:b2:38:8c:ea:3e:c7:6d:88:d2:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:E0:DC:42:0C:59:37:6C:25:DF:F6:22:B9:FF:AD:2A:06:F8:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/adc364e8-0c4d-491b-9707-a0ff6ccc67fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dc2::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:23:bb:80:28:52:b7:fe:28:bc:99:cc:d5:7e:6e:7b:e5:0a:
         36:a3:8f:3e:5b:d0:44:67:5b:01:06:24:32:c0:a7:d8:91:51:
         48:35:dc:91:d2:75:f6:35:0e:37:cb:90:fb:a2:1f:24:3b:9d:
         74:37:0a:cf:76:5f:d2:61:1c:02:e7:ee:a8:db:1f:0b:fa:10:
         e8:cc:c2:cf:c4:5d:de:3a:42:f1:99:3e:cc:47:7e:b7:d7:23:
         4f:ab:46:b4:92:71:0d:58:2e:f5:8d:84:1b:13:24:42:0c:f3:
         bc:59:56:78:aa:98:d4:78:90:51:0f:cc:54:29:a9:0f:9e:2c:
         ee:9d:01:88:28:f8:53:9a:0d:3b:5c:c5:b1:50:70:00:7c:a3:
         dc:e8:2a:38:51:32:85:e2:c4:58:1b:9e:a6:39:58:8e:8d:33:
         5e:fa:76:55:18:e6:d7:9b:fb:60:13:12:65:1c:61:58:ab:e9:
         0e:fd:ab:07:25:3b:81:90:46:b0:94:7a:b2:14:5f:21:46:ed:
         48:3e:4a:73:d1:7d:76:af:24:0f:7c:55:d1:75:e4:6d:f6:77:
         84:ff:e7:27:ec:a8:21:ee:af:9f:a3:4b:1c:51:d0:83:db:89:
         30:0d:53:e4:c7:09:97:2e:4f:5e:7f:14:0d:26:fc:29:16:c1:
         c7:50:9e:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:30:21 2026 by rpki-client