Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00b44387-51f2-4287-a343-7e47d77d70b7.roa
File:                     00b44387-51f2-4287-a343-7e47d77d70b7.roa (raw, json)
Hash identifier:          GedP3UpVQsqbVhABjFaruTBZrsVyVEA/wP8eFIWoTL4=
Subject key identifier:   48:09:34:48:F5:5F:1A:71:3F:DF:F9:A5:98:4D:B3:62:73:55:48:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6B20917C9C321E6F7AE91BC6941D010C0DFFC1DF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00b44387-51f2-4287-a343-7e47d77d70b7.roa
Signing time:             Mon 04 May 2026 06:20:04 +0000
ROA not before:           Mon 04 May 2026 06:20:04 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d70::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:91:7c:9c:32:1e:6f:7a:e9:1b:c6:94:1d:01:0c:0d:ff:c1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:20:04 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=77fefa6f8ce4e8c3e1148f9b4efe8f0d7052dd76f263ae99913ad2168e6128ac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:86:a1:6c:ad:47:20:36:ab:f7:16:69:bb:
                    6d:33:65:e1:2c:4b:47:83:28:9f:95:d9:a7:db:16:
                    89:c5:c1:18:3e:0a:a3:8c:72:50:88:df:d6:ee:7f:
                    e9:d3:4c:aa:df:96:92:17:3b:9c:79:9a:6d:9b:b2:
                    6f:24:ee:ea:c4:93:0d:69:2c:ef:a6:e5:a4:2f:59:
                    09:36:55:9d:2e:a9:a7:c8:e2:51:22:b6:ec:16:23:
                    8c:1b:6c:89:1c:af:46:d3:58:21:93:6c:26:a6:d1:
                    2f:aa:9b:5f:71:9f:6e:03:1e:82:12:b4:81:6c:b3:
                    0b:14:f0:ef:c6:59:70:19:f3:44:ce:a5:16:09:da:
                    d5:18:03:38:1e:ec:2f:57:d1:76:f3:a1:78:7b:cc:
                    10:da:2b:bf:83:03:fd:6b:71:b8:b5:b6:b0:1a:c0:
                    20:49:8d:af:cc:2c:5b:ea:e1:51:04:95:f0:6b:b5:
                    64:0c:52:8f:b8:5c:5d:59:f0:42:57:d8:40:e3:a3:
                    30:71:cd:2d:73:e5:c5:2d:13:76:13:ea:df:56:a0:
                    5d:04:c4:50:38:04:76:f1:4c:cc:e5:4b:f5:ac:88:
                    84:fe:5d:16:ae:07:27:0b:e1:76:be:b6:ce:9e:7f:
                    06:26:3b:3e:c3:0a:f4:e6:79:ab:a5:c2:d9:a9:4e:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:34:48:F5:5F:1A:71:3F:DF:F9:A5:98:4D:B3:62:73:55:48:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00b44387-51f2-4287-a343-7e47d77d70b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d70::/45

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:95:f4:97:19:a7:63:02:98:39:17:d6:6b:34:4e:9b:af:
         36:37:df:41:9a:48:32:53:93:1f:a9:50:d3:41:2f:d9:23:db:
         21:36:0a:92:b4:6f:f5:0b:59:1c:ad:04:da:54:98:d4:7b:a0:
         61:ee:df:d8:be:f1:67:e0:6a:6c:9e:3a:68:22:e5:57:dc:8b:
         2c:35:5f:61:16:cc:af:b5:c7:9a:bf:0e:9e:5e:f3:79:b3:99:
         2f:0b:fd:49:d5:22:6c:cc:dc:76:67:86:e0:2c:8d:4a:ae:7d:
         3b:ba:d7:8f:d5:82:34:cd:fb:a4:99:38:17:83:4d:a4:f5:7c:
         84:66:70:a4:d6:65:bb:48:1f:a9:26:3b:bf:f3:ee:8d:59:38:
         90:8d:75:3a:9d:0b:6e:77:d4:1a:e2:6f:02:03:83:37:0b:2c:
         d5:12:64:f6:b5:b3:a3:92:12:b5:ae:49:48:2c:e6:aa:11:35:
         2d:43:2a:d2:bd:7d:e0:8b:8f:ed:dc:d7:6e:68:a1:6f:e7:b9:
         aa:25:71:4a:ab:21:c1:0b:e2:21:bf:48:22:70:ca:f8:d4:9f:
         d5:5a:69:14:53:72:83:ab:10:a6:ad:58:17:1d:41:57:9f:57:
         2e:35:cc:b5:81:74:3e:61:27:f5:fa:d6:94:43:27:5b:44:73:
         9a:71:57:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:09 2026 by rpki-client