Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e38820-4c9d-4737-95f3-99ed1bd155dd.roa
File:                     d9e38820-4c9d-4737-95f3-99ed1bd155dd.roa (raw, json)
Hash identifier:          ZrNbdb/lrpdi2bGzRiLGzljLi68DBt05gMvw9vspqUc=
Subject key identifier:   58:9A:2A:B8:CC:F8:1E:95:6D:56:EC:05:1C:F7:97:7D:08:98:76:D6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       221511A831EA0C050DE220CF13CE781B82D47512
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e38820-4c9d-4737-95f3-99ed1bd155dd.roa
Signing time:             Sun 03 May 2026 01:31:25 +0000
ROA not before:           Sun 03 May 2026 01:31:25 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2baa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:15:11:a8:31:ea:0c:05:0d:e2:20:cf:13:ce:78:1b:82:d4:75:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:31:25 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=8706022bb95d66f18704825a0857276397e6aaef00d0b2c78e3959eb8ab3ebd3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:98:4f:b8:4f:5e:0a:df:aa:6c:fb:39:bd:
                    99:ec:18:fd:6d:c5:8b:0d:16:00:12:12:49:ea:5d:
                    6d:24:c7:a9:0d:83:b2:a6:28:64:d5:9a:53:aa:26:
                    2f:84:44:1b:5e:a0:b2:cd:9f:c7:7f:ca:d9:10:d9:
                    09:fb:cd:ce:7a:65:60:51:1e:a7:51:20:b9:87:ae:
                    25:8e:56:6a:6a:27:dc:0e:c6:36:83:8a:89:dc:d1:
                    6c:80:3d:d4:61:af:f4:1d:d0:e2:a4:b6:fc:cf:69:
                    9e:42:97:6c:25:93:5e:d6:72:2d:50:c6:12:3e:08:
                    2e:64:12:3d:c1:c3:be:46:99:fa:b3:00:2a:f6:0c:
                    e1:eb:db:4a:1d:91:f6:c3:b0:dc:dc:09:0d:8d:54:
                    64:24:86:2f:25:13:2a:97:1c:62:a9:25:ab:df:40:
                    69:64:27:b4:39:9c:a1:88:63:95:55:a1:54:fe:b5:
                    8f:a6:4a:dc:ce:a2:86:e5:08:1d:57:ad:10:2d:b6:
                    1d:06:cc:16:7c:bc:31:a6:a1:a7:a2:ce:19:38:5e:
                    35:f3:c9:6b:50:ed:1b:1d:41:f8:6b:2b:37:ec:7f:
                    28:8c:64:37:cb:0e:ec:2d:7a:02:73:10:c8:de:79:
                    14:f2:e4:a3:0b:2f:97:65:54:b9:11:30:6a:41:38:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:2A:B8:CC:F8:1E:95:6D:56:EC:05:1C:F7:97:7D:08:98:76:D6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9e38820-4c9d-4737-95f3-99ed1bd155dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2baa::/47

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:8f:c1:be:61:ec:54:28:ef:2c:1a:5c:ed:1a:80:ca:ad:
         ae:11:c3:22:19:46:ca:2c:56:80:50:59:6f:ff:d4:7e:e7:36:
         d2:a9:50:54:db:3b:1d:11:99:bc:87:0b:2c:75:a7:0d:f3:68:
         f3:21:a4:b5:3f:10:37:01:ee:ba:b0:58:e7:f6:77:bc:98:5d:
         fb:e0:4b:39:19:83:e4:94:57:2e:b0:01:1e:95:d7:61:65:17:
         ad:3b:09:cc:a6:8f:ec:b7:37:d4:be:9d:45:38:2b:d0:22:9d:
         e4:c1:0f:85:68:aa:74:b1:e3:1f:1c:78:48:a5:8e:e2:64:91:
         c5:b6:7a:d5:d8:e3:40:58:71:e6:04:f9:1e:59:0d:d2:fb:b5:
         80:2d:86:90:02:58:0f:1b:bf:a4:45:26:c7:9b:f2:08:2f:43:
         77:24:ee:25:1b:2d:d2:44:86:9a:b8:ea:44:ed:a6:ee:a2:da:
         7f:51:9a:6d:4f:26:d0:f9:59:98:74:4e:c4:8d:22:eb:6a:4c:
         d3:c2:fc:ac:02:dd:90:4f:fa:4d:ec:b6:e0:7d:0a:1b:70:15:
         ab:bc:f0:8e:72:93:04:11:e0:27:da:c5:68:18:9d:4b:ce:ea:
         31:88:db:71:b7:b6:7c:f8:17:bc:59:93:78:9d:c2:b6:f6:b4:
         44:dd:24:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:30:22 2026 by rpki-client