Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa
File:                     04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa (raw, json)
Hash identifier:          JiOqEnuqOMjaDXMn/ICk7N6v1umUW0rbONnN7huHRnQ=
Subject key identifier:   AF:42:07:4C:95:C6:82:19:46:A7:2E:33:12:B2:2C:4C:AC:12:CE:AD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2216A424A1F7ED3EBDA2EB91455DD7A86489C260
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa
Signing time:             Mon 04 May 2026 12:21:50 +0000
ROA not before:           Mon 04 May 2026 12:21:50 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f92::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:16:a4:24:a1:f7:ed:3e:bd:a2:eb:91:45:5d:d7:a8:64:89:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 12:21:50 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=e6c77779c9ae0fdb08265cf47308b8d0ad38b02dc9511eb57e4feca752c58ff3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:ab:d6:87:a4:65:20:ff:5e:bc:b5:aa:12:
                    cb:05:24:21:64:df:8c:39:6e:4d:60:49:87:7e:db:
                    51:34:49:08:58:66:e6:d4:25:13:25:37:2a:e1:c8:
                    6c:aa:e9:7d:1b:8b:cb:64:ac:2a:18:ef:86:22:a1:
                    33:31:96:b4:75:8c:78:3a:5c:53:f6:cc:2f:c9:da:
                    ee:42:73:b3:c2:99:59:39:79:79:87:5f:4a:c9:f5:
                    59:ba:c2:6d:92:4f:b7:81:22:68:cb:06:aa:b3:af:
                    87:66:ea:5e:c9:b7:1f:ef:96:1e:cd:73:d4:85:3f:
                    1e:bf:2b:57:03:e1:9e:ca:a3:e4:7c:4e:17:77:c7:
                    3a:b5:4e:0c:fe:df:e8:20:ff:a6:55:fb:f3:e8:27:
                    2f:42:9c:2f:06:ce:f9:2e:5c:d3:74:40:96:33:4e:
                    6d:25:e1:5b:5f:fe:72:92:8f:46:4d:a8:97:5c:25:
                    d6:d2:2f:8e:89:58:99:94:af:39:16:85:c3:59:1f:
                    01:fe:01:19:84:36:f1:aa:85:55:b6:18:b8:fd:f1:
                    36:ff:1f:22:6a:30:38:e7:c7:82:ee:4d:b7:44:b1:
                    4c:2d:87:31:25:36:f6:6b:ab:97:65:21:18:39:33:
                    e9:11:f3:20:2b:a6:11:c9:fa:24:5f:64:89:81:9e:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:07:4C:95:C6:82:19:46:A7:2E:33:12:B2:2C:4C:AC:12:CE:AD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f92::/47

    Signature Algorithm: sha256WithRSAEncryption
         bb:31:ee:40:ac:0c:6d:ba:0c:d0:08:df:e7:21:73:42:bc:0a:
         85:62:2e:00:a7:c3:96:b4:74:7b:54:db:39:f4:78:d1:74:25:
         fd:d1:ec:5f:08:c7:57:6c:7f:35:b0:b8:de:ac:3d:68:7c:b8:
         ed:0e:d4:29:4f:19:36:f6:06:c7:49:8d:a3:b0:56:38:89:be:
         26:28:2d:5e:50:37:92:c1:3f:8e:ad:a5:cf:03:ae:67:ca:4b:
         a3:08:1f:f1:cd:a6:ee:0a:ef:27:64:90:8a:0e:81:90:c4:24:
         39:d8:94:8d:a9:ef:2b:d9:0a:0c:00:fd:f5:8f:5d:93:9b:04:
         e1:44:93:de:43:e5:83:83:d8:d4:24:19:f7:7e:47:2b:91:b7:
         12:ef:a2:1d:2c:63:f2:85:e3:b2:5d:1b:ed:2f:99:b7:5d:1c:
         56:69:dd:5a:d5:87:79:12:87:84:a7:ad:31:c6:af:e0:b9:10:
         ac:ad:80:f8:f5:d4:5f:93:40:59:bb:9d:82:6a:b4:99:73:4e:
         b2:89:1c:73:7e:4d:1c:f7:f9:44:be:bf:2a:47:88:3f:22:91:
         d6:2f:a0:76:8d:e4:69:03:52:02:c5:de:30:e2:3c:ff:0f:27:
         8b:a9:13:fe:43:cb:6b:70:2c:83:ad:79:6d:5c:ba:62:bd:ad:
         7c:fe:f8:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:29 2026 by rpki-client