Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0dc73c0d-8a13-444f-ab7a-2bf4c6e1b25a.roa
File:                     0dc73c0d-8a13-444f-ab7a-2bf4c6e1b25a.roa (raw, json)
Hash identifier:          BZ5gW1/6oU2ea9qyusglSYvQ31+ZlJ0uDYeU3WSncwA=
Subject key identifier:   DF:F9:89:AC:ED:D4:60:35:8C:4F:CC:ED:A6:8D:66:88:66:3B:B7:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0664BB01C868AACCBFB89A1D6A2FC2E576C49E61
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0dc73c0d-8a13-444f-ab7a-2bf4c6e1b25a.roa
Signing time:             Mon 04 May 2026 06:40:12 +0000
ROA not before:           Mon 04 May 2026 06:40:12 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ff0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:bb:01:c8:68:aa:cc:bf:b8:9a:1d:6a:2f:c2:e5:76:c4:9e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:40:12 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a675e5899aa2c3c3d97602be6d5696fa51e86a70e237dc25d4c397e934193735, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:e5:67:17:a4:af:55:de:b7:ef:6f:24:93:
                    61:2e:49:4d:47:35:ff:f0:42:d6:ac:47:37:7e:0f:
                    61:0b:b0:96:8f:0a:f3:f1:42:a8:11:d7:07:19:dd:
                    91:3c:45:63:c9:e8:80:fe:c9:3e:f3:15:94:80:d7:
                    cc:ba:a7:30:43:bb:5f:02:31:49:fc:4c:60:42:17:
                    2f:89:04:ab:31:33:cc:ef:e8:75:da:c3:77:a4:c4:
                    9c:a9:5f:e6:78:6a:27:6a:3e:e7:49:9b:df:f7:52:
                    55:85:da:06:b3:a1:52:2d:23:ef:f9:90:aa:e2:99:
                    69:81:c1:58:9c:54:ae:e9:53:44:8f:32:e0:ee:36:
                    66:13:8d:a8:9a:63:0b:50:45:68:98:4c:b8:a2:d8:
                    d5:fc:64:7e:72:44:50:ee:6a:4d:3c:ba:a7:6d:e5:
                    71:6d:44:0f:f1:1f:a1:98:a6:90:bb:62:d4:c5:2c:
                    28:5e:48:1c:48:a7:ba:f8:45:14:1b:96:cf:a0:7b:
                    a2:af:5d:01:69:09:67:f7:ba:43:1a:a8:1f:4c:c4:
                    5d:c2:58:c5:cc:7d:28:8b:6b:ea:22:ae:fe:82:d9:
                    c3:92:12:3a:5d:7c:b7:76:93:a5:6c:27:9f:1e:23:
                    75:b0:4c:77:7e:83:9b:09:e9:15:f4:1d:f0:86:4c:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:89:AC:ED:D4:60:35:8C:4F:CC:ED:A6:8D:66:88:66:3B:B7:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0dc73c0d-8a13-444f-ab7a-2bf4c6e1b25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ff0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b4:82:82:bd:22:87:ca:b6:fb:af:b9:31:9d:97:2b:3f:c3:5e:
         4e:cf:51:7a:6d:57:96:bf:07:f9:e4:49:c0:10:86:70:e3:00:
         01:d6:ab:a6:e4:3b:cc:4d:7c:f4:58:24:8e:42:e1:88:e0:d0:
         26:6b:06:8d:4b:ed:ff:3c:99:03:bd:df:fc:e5:71:8c:60:8b:
         3a:42:99:de:3d:54:ec:05:d3:b6:e2:14:b9:d6:67:61:b0:12:
         1a:80:e6:be:3a:ac:83:80:ea:88:68:38:3e:79:6b:23:3b:12:
         69:4e:80:d1:9a:79:5d:a3:46:2c:24:00:56:ca:bb:99:a1:bd:
         e2:f4:39:ca:0b:cc:67:08:b9:f1:c4:c2:5b:84:08:7b:a9:09:
         95:27:e1:f7:25:11:40:ab:32:81:9b:4c:b4:81:93:30:97:4f:
         9b:b1:0a:92:d3:9f:ca:03:3f:76:6f:35:bc:d1:27:8d:fa:b9:
         fa:f3:02:d6:0e:71:12:ee:3c:0a:7c:f9:ad:b0:80:d3:f0:51:
         83:99:a1:1b:3d:63:86:1e:f6:0f:fc:b5:71:e0:f2:a7:e4:03:
         bf:cf:2b:03:6e:74:8a:e8:21:30:06:87:eb:f2:34:92:ab:77:
         20:34:f9:2c:c0:90:56:a4:8c:23:0d:ad:5b:66:c8:38:4d:31:
         c0:6a:7a:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:22 2026 by rpki-client