Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d864c3bc-5b8b-4908-89b4-bb95f331d3af.roa
File:                     d864c3bc-5b8b-4908-89b4-bb95f331d3af.roa (raw, json)
Hash identifier:          jW3YwI6bQJUhUPUgFRyHK2lpugTYbflppGu/nLEF2Fc=
Subject key identifier:   4B:53:8B:D8:22:8A:16:8F:83:A3:0D:9C:4C:53:BE:E7:E5:C7:2A:BD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1A92F32DF65BF6250737A886551E4392F05B1EAD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d864c3bc-5b8b-4908-89b4-bb95f331d3af.roa
Signing time:             Sun 03 May 2026 03:30:07 +0000
ROA not before:           Sun 03 May 2026 03:30:07 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:244f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:92:f3:2d:f6:5b:f6:25:07:37:a8:86:55:1e:43:92:f0:5b:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:30:07 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=c3c9169d778a71de48ac6b71af8cfa4e508e81924e3f94b884106e7db7efb50b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:33:a1:25:3d:14:f8:a1:37:63:2b:70:57:
                    d2:67:76:c9:e5:ed:1c:52:f4:58:2d:3a:51:0b:07:
                    cf:37:6f:69:76:95:9c:41:6a:8b:6c:c6:14:55:dd:
                    3b:78:53:52:1a:ec:3b:c1:42:42:30:72:fa:df:fe:
                    96:6b:23:05:ac:e2:53:ce:87:87:95:5d:42:58:d3:
                    b6:ce:c9:1e:fa:05:1c:d1:c3:23:97:a4:bc:7a:7a:
                    53:86:bd:ff:59:be:0c:34:3d:3c:1c:f2:5e:13:cd:
                    a9:b5:67:0f:5e:11:ba:37:d1:d8:1c:51:3a:ee:db:
                    44:57:59:ec:70:59:1d:10:e6:a3:9a:8d:e2:fe:e9:
                    a7:95:75:e2:8c:43:0c:89:97:f0:34:d2:9b:4b:20:
                    23:f0:da:a5:6c:8a:77:69:7e:46:9c:2c:5e:0b:0f:
                    7b:a6:d2:36:9b:11:2a:90:92:a9:6f:91:55:b1:e6:
                    b1:33:e4:c6:e8:93:83:d0:e3:13:81:36:b6:48:a7:
                    a2:91:9e:65:fd:27:f7:f5:43:63:fd:d8:5a:fe:9f:
                    27:f6:26:2b:b8:75:b8:59:e2:bb:91:d7:e6:7f:75:
                    c1:37:4d:af:a2:dc:50:1e:cf:c2:6f:ac:cf:db:89:
                    d3:ad:b8:de:a3:df:d0:be:bb:da:eb:7b:62:64:5f:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:8B:D8:22:8A:16:8F:83:A3:0D:9C:4C:53:BE:E7:E5:C7:2A:BD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d864c3bc-5b8b-4908-89b4-bb95f331d3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:244f::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:27:47:ba:fd:25:5b:06:32:2b:61:31:05:50:15:eb:b9:
         ca:e0:57:9e:f5:5b:80:ed:06:cd:11:c2:2c:27:e8:ab:94:7b:
         1a:da:02:d0:de:c2:53:87:ba:72:61:49:db:30:b7:54:e4:19:
         9c:9b:37:18:2b:f2:38:8f:b4:ec:43:d2:97:b6:43:fe:4f:9b:
         37:f0:40:ac:e5:b9:e2:be:04:3a:41:98:cd:4a:8f:e0:79:3b:
         b3:3e:44:91:69:fc:76:56:b3:5a:52:83:86:a3:d1:3a:0d:cd:
         e4:67:e0:ad:09:97:03:c9:20:6f:88:14:6c:61:60:e4:9e:d4:
         0c:1a:9a:36:3b:a2:bf:44:4e:67:61:9f:76:3a:fd:13:aa:52:
         74:be:da:8e:c9:1b:7b:f8:62:71:07:55:29:d9:af:47:e2:b0:
         ef:09:3d:83:1c:83:68:35:a1:b3:69:ac:06:68:88:62:cb:b9:
         ac:74:65:f5:07:17:48:ad:a4:bf:83:f6:c1:2b:01:d2:5b:08:
         96:a5:b5:79:46:ea:e5:85:26:5a:65:57:63:6e:ed:32:c5:c6:
         f3:cd:a1:30:3c:09:a7:87:54:39:22:61:89:22:c8:10:ef:54:
         4d:a6:b1:3c:eb:af:22:d9:6c:55:09:54:38:27:c6:e3:2b:ff:
         24:99:fe:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:59:37 2026 by rpki-client