Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/020a7ea8-7646-4b51-bf60-754bd4ccdc11.roa
File:                     020a7ea8-7646-4b51-bf60-754bd4ccdc11.roa (raw, json)
Hash identifier:          9+zN8uxvIQE/MqEuqsUTKjHmQ2JntV+cXLx322/DoCQ=
Subject key identifier:   61:46:D7:D8:4A:CF:D8:AB:F4:5B:D4:3C:C6:29:89:0A:ED:CA:9D:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       19C017451D4BBD837B19E99F12717FB8FF45E1AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/020a7ea8-7646-4b51-bf60-754bd4ccdc11.roa
Signing time:             Mon 04 May 2026 02:30:40 +0000
ROA not before:           Mon 04 May 2026 02:30:40 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a58::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c0:17:45:1d:4b:bd:83:7b:19:e9:9f:12:71:7f:b8:ff:45:e1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 02:30:40 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=607ff309d4df0e6cf9687627cddc18b84785661d2e78f127aa8e23479c3c4f2d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:9e:b0:fd:0a:dc:b0:dc:a4:e7:ad:7d:5b:
                    40:da:7f:59:b8:a9:92:1c:52:fc:4c:e4:bf:59:b5:
                    2c:62:31:2a:7a:45:30:64:04:5d:26:f0:43:50:59:
                    6c:4f:e7:e7:cd:fa:59:47:3d:75:6f:fe:34:94:7b:
                    30:6a:8d:cb:dc:2b:60:95:cd:70:8d:e3:d0:7b:8b:
                    4e:0e:d8:9b:69:b4:1d:19:4a:1a:fc:78:4d:83:cc:
                    06:19:98:30:44:2d:27:a2:f3:f7:79:16:e4:90:28:
                    4d:1c:cc:5d:a6:a5:83:2d:30:76:4a:42:aa:6d:8d:
                    6d:d4:09:be:5e:8a:a1:16:e1:7b:10:39:1c:38:45:
                    9f:b7:93:ac:94:bb:5d:80:9b:d4:9e:64:f6:b9:7b:
                    0a:42:68:61:1a:43:43:97:8c:23:1a:55:ab:c3:34:
                    51:85:4d:0d:09:12:74:1b:7c:8d:51:c2:6c:06:fd:
                    59:6c:09:06:3d:9f:06:f2:0c:34:84:96:63:63:5f:
                    b6:86:6e:f3:53:da:85:57:ac:f9:ae:48:0e:72:7b:
                    f3:ea:8c:a9:8a:ce:4f:8b:44:a0:e8:da:5a:8a:e1:
                    c2:dc:a5:e7:42:d6:f1:f6:d1:66:4c:e0:25:68:f0:
                    7d:5c:30:22:e9:43:d1:19:34:ca:9c:29:8c:1d:3f:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:46:D7:D8:4A:CF:D8:AB:F4:5B:D4:3C:C6:29:89:0A:ED:CA:9D:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/020a7ea8-7646-4b51-bf60-754bd4ccdc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a58::/46

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:db:cd:e5:c0:ca:36:f5:c1:5d:d4:c2:21:1e:a7:d1:68:
         b1:fa:43:eb:06:7a:dc:04:ce:cf:4b:88:92:3d:be:97:37:e9:
         a3:bc:63:ae:e7:1c:ea:8f:a3:50:87:7e:dd:24:53:9b:d9:03:
         3a:64:16:11:49:26:23:c1:40:c5:53:0c:87:72:db:99:9e:fb:
         65:fa:c0:db:19:f8:9b:52:5f:a9:fd:ea:03:1e:76:51:e5:af:
         68:a6:fa:ad:00:6b:76:2c:95:6f:54:f7:30:3d:68:3d:4a:53:
         f3:f4:b7:ab:0f:50:98:d8:00:b3:95:8d:6f:6c:9b:a7:bf:77:
         6e:a0:8e:6c:75:d3:81:c2:7e:eb:75:b0:f8:da:bf:8c:c4:ed:
         c7:39:01:33:09:a0:9a:21:a5:dd:9c:49:5a:bb:15:cf:97:97:
         f6:c3:a5:28:66:0c:60:a9:46:36:bb:42:25:67:ea:6e:f1:76:
         a3:ea:d9:68:c8:1c:e8:d6:fd:36:d3:05:ff:e0:79:85:51:89:
         bf:fc:5c:68:8c:35:e2:e8:3f:30:bb:a4:65:c8:28:a0:a0:b8:
         cb:63:dd:ad:74:81:9f:2c:c6:a0:2c:a4:b5:ad:90:21:2c:bc:
         64:4f:08:db:81:6e:03:5a:cb:c6:10:10:3f:2b:0c:05:81:37:
         7d:1c:1b:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:39:23 2026 by rpki-client