Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb2c3b02-2b6f-4714-94eb-16ef13b13419.roa
File:                     eb2c3b02-2b6f-4714-94eb-16ef13b13419.roa (raw, json)
Hash identifier:          kafwXpI0nskUpA7ExC7iS/HZ4X/tV6PISdao0pM8m1s=
Subject key identifier:   B7:4E:D2:03:DF:78:55:EB:91:E5:40:A4:D8:08:04:CC:57:FA:91:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F9372B32F4FA6323485F50398C803A6BD74C3D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb2c3b02-2b6f-4714-94eb-16ef13b13419.roa
Signing time:             Sun 03 May 2026 01:51:26 +0000
ROA not before:           Sun 03 May 2026 01:51:26 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2960::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:93:72:b3:2f:4f:a6:32:34:85:f5:03:98:c8:03:a6:bd:74:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:51:26 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=6d08ee8dc9c987b73d7b6e205c381e8b207b7d0d2463609bbeab34504f29918b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:ed:cd:25:ec:36:82:00:c6:06:30:a9:d9:
                    9b:28:a8:75:6c:43:d3:9d:3f:d1:8a:b6:57:e5:7d:
                    34:51:f7:ae:9a:31:97:b1:66:13:ef:60:05:f7:81:
                    a3:a5:b4:8e:3b:3b:fb:47:dc:c4:99:23:ac:3a:cb:
                    e1:bf:4a:34:94:bc:54:af:d6:f2:13:05:a3:9b:8e:
                    5f:c0:34:9d:62:6f:5a:96:f9:14:6e:1a:8b:f1:43:
                    3e:6c:f9:b5:98:1e:d9:95:9b:99:ab:83:c9:c4:cf:
                    2c:cd:1f:8e:eb:d6:65:10:ab:24:3d:84:2d:b4:a9:
                    67:5a:e1:ae:ac:d2:55:01:13:24:63:57:4a:b7:8f:
                    d3:32:c4:9b:fd:49:ac:10:55:3e:29:e3:cf:88:6b:
                    22:96:3b:76:fa:91:63:21:23:f5:63:dc:ad:f5:9b:
                    a9:ca:d6:99:bf:0e:ee:24:2d:98:fe:5a:d4:78:a2:
                    cf:51:ab:b6:64:7b:4f:c8:f8:dd:aa:c9:f9:df:8c:
                    84:a6:51:3c:1c:49:5a:45:49:56:78:23:35:13:6f:
                    7f:4d:1d:7f:52:6f:9f:c7:7b:72:90:f9:67:f6:bb:
                    7d:00:ac:ed:31:91:a4:40:3a:ce:c9:8c:3c:85:26:
                    6c:01:72:10:46:da:35:6b:75:7e:53:a3:73:e8:c1:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:D2:03:DF:78:55:EB:91:E5:40:A4:D8:08:04:CC:57:FA:91:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eb2c3b02-2b6f-4714-94eb-16ef13b13419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2960::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:87:79:1d:19:82:83:9f:f6:dc:01:27:d4:01:10:94:5e:b8:
         8e:2d:52:63:4a:de:a6:60:45:7c:4e:81:8a:e6:11:9d:bf:6d:
         03:2e:a1:72:0c:8b:02:fe:4f:b2:36:5e:8e:72:1e:8d:2d:a6:
         01:ec:a1:fc:e1:d9:d9:ca:25:e3:cb:ce:97:e8:68:9d:b6:b5:
         90:a7:52:25:54:3e:da:de:09:5f:b2:2d:8d:aa:3c:ca:10:7c:
         d6:62:95:3f:8c:a2:eb:13:a7:5f:b0:12:74:80:2c:af:50:b0:
         1e:b0:fa:02:fe:03:05:60:19:a2:b9:32:e8:07:96:ac:fd:c6:
         cd:4c:e1:10:75:8f:2b:b5:0b:6c:98:83:26:2e:de:36:a2:74:
         35:71:29:ee:f7:42:0d:dc:1b:ea:cb:5f:11:8a:17:de:91:7f:
         b4:d6:6c:06:a9:87:8a:3f:07:47:30:fc:7a:e5:58:43:9c:63:
         49:e9:13:9a:d0:64:e3:49:f9:d7:db:e6:1f:fb:a6:d9:e1:08:
         c3:e8:80:62:9a:c4:9f:a0:3f:d8:b7:cb:cf:5c:9e:ee:bc:4d:
         b0:fc:bf:97:a4:41:81:b5:3d:a4:3d:e5:5c:e7:13:a3:3b:c7:
         3e:68:e1:13:62:13:e8:a2:bc:c2:ce:4e:d2:7e:20:27:f9:df:
         a8:fb:95:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:11:57 2026 by rpki-client