Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054d2480-9c1b-499a-a0a8-05ff85781886.roa
File:                     054d2480-9c1b-499a-a0a8-05ff85781886.roa (raw, json)
Hash identifier:          wmFluzrrOdG4bEI5Cvi3B93TJibwmKL8VsfKGDrb+Xc=
Subject key identifier:   0C:7A:7E:C7:BB:27:AE:39:94:CA:80:1F:06:8E:4D:58:E4:0F:2D:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       011B3A497446641C879C77554992F78221635919
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054d2480-9c1b-499a-a0a8-05ff85781886.roa
Signing time:             Mon 04 May 2026 02:40:07 +0000
ROA not before:           Mon 04 May 2026 02:40:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:3a:49:74:46:64:1c:87:9c:77:55:49:92:f7:82:21:63:59:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 02:40:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9c7dfc6a463cad2eccaecf4035ee5d5f3401046c949b9cdd9892026e059d8575, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:7c:d5:da:36:41:8e:77:7c:6c:71:96:f4:
                    4b:8f:d8:5a:a4:17:e6:03:b8:02:f1:68:20:19:65:
                    e8:eb:0a:d8:ac:64:e6:e4:57:0c:d2:25:35:7d:34:
                    24:92:29:fd:89:bf:f2:4c:5f:a7:3f:c7:df:17:b9:
                    8a:d6:8b:a5:ba:06:f1:a3:59:e2:fb:28:60:04:23:
                    47:a8:f6:9e:46:e9:4c:8b:8e:f8:1f:a0:b5:7f:7f:
                    6e:b8:94:29:19:61:cd:62:8c:04:94:0a:86:7f:0f:
                    12:2b:e5:8f:e6:67:3b:eb:12:99:9e:0e:fa:76:eb:
                    dc:2c:12:89:49:e5:e9:21:a0:cd:d8:e3:dd:7e:38:
                    37:77:b9:48:4d:96:cc:f0:13:ec:0a:68:48:52:89:
                    ae:7c:61:bc:4a:59:3b:c2:6d:ec:3a:c6:3f:6f:e2:
                    d3:cf:06:bd:55:3a:ce:49:3a:59:7f:14:d0:1c:37:
                    d2:3c:78:8a:7e:5a:5b:e6:c9:ad:1f:2c:a2:0f:fe:
                    a7:dc:de:01:43:6e:61:cf:65:91:6c:85:ee:53:f8:
                    80:e8:23:32:79:b7:99:23:9a:11:dd:a2:46:9b:15:
                    36:64:0c:ee:76:fa:1d:53:33:c6:0b:c7:fe:db:b4:
                    c7:3b:12:62:03:ba:6e:e3:9a:08:6a:1d:4e:73:c6:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:7E:C7:BB:27:AE:39:94:CA:80:1F:06:8E:4D:58:E4:0F:2D:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054d2480-9c1b-499a-a0a8-05ff85781886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c04::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:d1:0e:f5:d6:60:2e:03:f2:29:cf:63:3f:83:72:37:a4:
         15:f6:da:4d:7d:bf:8f:7d:99:fa:4c:20:b8:fd:53:f1:51:57:
         2f:26:df:7c:24:d9:e7:33:93:a0:02:e1:83:4e:0a:bf:1f:70:
         92:6c:02:5d:84:35:2e:1d:e3:29:08:b3:b5:d3:71:58:28:cb:
         b0:90:62:12:bf:f2:86:3c:1e:0d:d2:ab:a5:8c:0d:08:06:7a:
         4c:8f:d6:e0:23:17:7a:5c:fc:ea:99:cb:5e:f7:0d:58:20:8f:
         43:f2:6f:1d:c8:3e:a1:7e:f8:c7:5f:37:86:2b:a2:14:ec:a1:
         f7:72:9e:f8:27:7d:2f:07:e8:87:e5:10:da:da:38:fc:c3:b7:
         44:98:99:78:d0:8d:75:f8:ad:4a:b7:2c:9f:43:93:79:15:8a:
         8b:e3:70:e0:b9:ca:fe:a4:d5:fe:48:ec:29:56:f3:0e:fd:8a:
         de:3b:92:f2:b0:0a:90:6c:cb:a5:ef:68:e8:2b:fd:ea:0d:6d:
         76:5e:a9:6e:55:cb:46:71:ee:4f:b0:88:1d:38:06:d7:23:10:
         76:4c:a0:12:25:d3:5a:71:37:9e:dd:85:b4:6c:8e:2f:24:d1:
         11:b7:91:da:f6:26:04:63:80:0a:a1:e6:93:bc:8b:f4:29:e9:
         2e:28:62:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:48 2026 by rpki-client