Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa
File:                     0aa6e0cc-885a-496c-872a-1580d346d3ce.roa (raw, json)
Hash identifier:          m8g5/VaF/lsEAEv3V0+rlUMflWfDecaZgwtO1K6cui4=
Subject key identifier:   F8:80:DA:D3:E5:F4:B3:12:E0:9F:37:A7:FA:93:81:4E:E0:2D:32:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FB29B5FAC4CD886654CB5F612C8F224438E695B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa
Signing time:             Mon 04 May 2026 06:01:38 +0000
ROA not before:           Mon 04 May 2026 06:01:38 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a56::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b2:9b:5f:ac:4c:d8:86:65:4c:b5:f6:12:c8:f2:24:43:8e:69:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:01:38 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3fa0fedec28279ad51b273d1e1f4658bc05c39e0a1613ac153e2711aa9848ff7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:a1:83:0e:fd:2a:47:0e:56:50:3c:d3:20:
                    8b:da:b3:5c:4a:91:8b:20:18:fe:87:46:78:50:f0:
                    44:b9:af:eb:46:53:6c:84:75:ee:53:68:e8:20:61:
                    b5:e4:69:67:df:e0:bb:09:9f:62:52:86:67:2e:41:
                    f0:56:4f:55:00:e8:10:4d:9a:3f:e7:5e:52:9e:ad:
                    15:a7:67:14:ad:34:11:f5:00:e8:bb:88:94:d0:d4:
                    2a:70:0a:cf:40:d4:82:ae:dd:45:4a:7f:26:df:ae:
                    9f:33:81:a2:67:b0:9a:72:84:5a:d4:59:59:66:f1:
                    52:fd:8e:db:96:7f:94:04:d6:fe:c6:bb:e9:87:17:
                    f9:0c:10:b2:ce:2c:c8:27:60:9b:8e:c8:9d:7d:ad:
                    a4:d6:cd:7d:47:30:bb:e1:a1:aa:d9:31:13:67:e8:
                    28:29:e5:37:e5:29:a9:a7:4e:4a:d8:a0:ae:7f:8b:
                    dd:7f:42:2a:95:7e:ec:ac:cd:34:75:ef:52:2a:ef:
                    4f:d5:a8:a7:d3:5e:a2:3b:cb:e3:c8:29:6b:79:17:
                    b3:48:dd:21:fd:97:51:65:96:59:d1:fe:7d:6b:23:
                    4e:ca:60:16:3d:f0:cb:ea:73:bc:70:16:8f:91:93:
                    b3:ce:71:eb:4b:d0:a4:f1:cd:31:89:4e:08:12:fc:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:80:DA:D3:E5:F4:B3:12:E0:9F:37:A7:FA:93:81:4E:E0:2D:32:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0aa6e0cc-885a-496c-872a-1580d346d3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a56::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:26:ef:5e:9e:1b:b7:9a:96:c5:d9:9f:ad:b9:ea:b9:a5:
         eb:af:8b:94:3b:9c:73:eb:af:0b:ca:5a:85:23:93:fd:9b:bc:
         30:c8:a4:7d:39:ee:2f:c4:4e:2a:3d:8f:6e:f7:e4:23:ea:23:
         08:ed:52:58:4d:08:e6:3d:e1:1e:c8:f7:cc:eb:7b:46:fb:7c:
         d9:33:f1:ec:25:ad:69:53:68:d0:25:00:27:32:b6:d1:93:89:
         cd:71:a8:34:15:20:92:75:1c:31:22:83:dd:4a:d0:d5:4e:6a:
         ba:16:2c:c0:52:53:83:02:aa:6b:42:64:4e:83:57:85:02:36:
         55:3b:29:4d:3f:8b:db:d0:ac:49:6a:c7:11:fc:5b:0b:a6:12:
         99:3e:2d:94:48:59:a8:93:9a:10:a9:9f:49:13:03:fc:f9:b0:
         f2:45:bd:7f:bb:39:5c:b5:50:84:cc:e0:1c:cb:da:0b:c5:b2:
         67:84:62:f8:72:25:99:4a:f3:61:6d:79:bb:67:5d:b8:f5:77:
         9a:cb:0b:9c:15:bf:ac:a2:94:62:1c:07:6e:11:bf:b9:5d:62:
         b8:b4:cb:75:5f:31:8d:50:65:b2:5a:de:7b:8d:13:84:90:b0:
         70:e2:54:a1:a7:2b:99:18:14:be:cb:9c:8b:b9:de:d6:14:f6:
         a1:b8:f8:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:55 2026 by rpki-client