Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c99ac2-d3fd-47ef-a1b7-71f7c392ff3c.roa
File:                     f3c99ac2-d3fd-47ef-a1b7-71f7c392ff3c.roa (raw, json)
Hash identifier:          GrNxotgVFdErM46sNPX9tJJLiq1d4HTc95hkzW9Yqwk=
Subject key identifier:   A7:B6:B0:06:55:27:93:AD:90:B8:2D:81:6F:5D:F0:9B:86:60:3A:D3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       228C7E57AFD73E80FEA3325E55CB54E04A870E49
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c99ac2-d3fd-47ef-a1b7-71f7c392ff3c.roa
Signing time:             Sun 03 May 2026 01:41:37 +0000
ROA not before:           Sun 03 May 2026 01:41:37 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a24::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8c:7e:57:af:d7:3e:80:fe:a3:32:5e:55:cb:54:e0:4a:87:0e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 01:41:37 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=1721ccf17eb4c651f2ea1d20236826173e26bad46058afa37c87dec8040cac8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:6c:3e:2a:71:23:35:cf:ae:6d:34:66:0b:
                    35:9b:8d:f5:c7:27:dd:cb:14:7c:0f:8b:41:c9:6f:
                    e2:17:c7:2b:1a:e0:d2:00:1d:db:68:7d:82:56:70:
                    2c:aa:8a:46:4e:ac:08:f1:e1:a2:f7:f3:28:12:c9:
                    10:8f:a7:0b:6b:15:07:ce:d1:82:50:9f:1a:39:14:
                    9e:3f:69:bf:21:71:af:e4:da:71:43:81:f6:6c:32:
                    88:62:ee:a0:bf:7f:29:f4:41:e7:26:b8:c1:66:03:
                    ac:52:cf:32:45:63:22:9a:2c:08:63:04:bd:1a:84:
                    fb:85:10:0b:56:65:16:19:d0:4b:8f:f8:ad:85:18:
                    1f:92:58:fd:83:87:44:1b:dc:94:ca:f2:86:9a:67:
                    70:85:1b:5e:27:80:4d:1c:f6:28:6a:b1:bf:78:9b:
                    79:5d:da:20:40:a9:2b:1a:dd:ee:79:bf:c0:0f:d3:
                    2c:69:6d:ac:27:f7:3b:15:9c:74:47:78:41:fc:f5:
                    bf:c8:5d:f1:71:a8:ad:1c:7e:8c:ee:04:ee:f0:44:
                    b7:46:5d:0e:f4:90:35:c9:13:dd:d8:5c:00:6b:ce:
                    ff:ff:f6:a7:47:29:21:4a:b6:19:5c:f2:5d:a2:20:
                    39:4b:22:03:5d:2c:88:37:f2:3e:7c:d3:cb:24:9a:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:B0:06:55:27:93:AD:90:B8:2D:81:6F:5D:F0:9B:86:60:3A:D3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c99ac2-d3fd-47ef-a1b7-71f7c392ff3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a24::/47

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:79:b9:35:ff:5a:99:d4:1e:b7:f3:6c:61:cc:a9:40:21:
         d0:17:66:62:55:d1:0e:05:ff:47:ad:20:f6:69:d7:59:0a:6c:
         a5:75:2f:a2:4b:d9:92:2c:23:c1:2d:07:22:fd:57:ac:be:63:
         eb:1c:b4:6c:b6:70:b7:e8:16:06:ce:a6:b8:ff:e4:40:09:16:
         e6:64:69:c5:61:41:40:1b:86:d0:85:7f:02:03:df:02:d3:c9:
         a9:ba:f6:b4:e6:3c:6c:ea:92:bc:17:5c:33:ef:8b:d2:be:1c:
         12:cd:d9:ec:20:1e:d8:84:7b:54:b3:0e:70:97:9a:90:a9:c0:
         fc:8a:54:c2:d3:a0:2f:a9:ca:9f:ba:f9:aa:64:70:46:91:fb:
         7c:1a:48:b9:1f:5c:b3:3e:6f:22:ff:89:36:1a:1a:f8:b6:f7:
         e5:e2:c1:3c:8a:15:c5:99:99:5e:03:e3:73:f7:6f:1c:73:be:
         47:dd:ab:69:47:c0:53:fc:7a:c9:2c:77:03:e0:43:5e:20:fa:
         91:7f:d4:3c:b6:49:ac:d2:7c:f5:bd:55:a5:b9:9b:d0:03:fa:
         ed:45:34:4c:1b:98:49:13:f4:11:69:13:8c:e1:a5:54:3c:70:
         49:00:8c:50:9e:f9:30:95:7c:6a:36:eb:9c:b0:cb:5e:24:60:
         07:80:8e:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:11:51 2026 by rpki-client