Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14da23be-02ad-488a-968e-846626d95cb4.roa
File:                     14da23be-02ad-488a-968e-846626d95cb4.roa (raw, json)
Hash identifier:          fnHcMlWYRPfbj9CDrsFBC6A5QFQURiTmkHT5gCSUmho=
Subject key identifier:   E7:45:A0:B4:54:EF:54:46:38:D9:E6:2F:B3:78:B9:39:CB:54:D0:4A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C21470DD6A183D9E9D903F6621613A2E0E4CE59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14da23be-02ad-488a-968e-846626d95cb4.roa
Signing time:             Mon 04 May 2026 08:51:22 +0000
ROA not before:           Mon 04 May 2026 08:51:22 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3650::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:21:47:0d:d6:a1:83:d9:e9:d9:03:f6:62:16:13:a2:e0:e4:ce:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:51:22 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=bcaa844416fd2a66e544f0035025a3b5fd217ef3bf030cf1e2a2ed24287e70fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:1e:40:04:d7:99:b9:06:32:92:1a:54:82:
                    8b:2f:7d:72:84:67:73:f8:fa:ab:00:f7:41:1b:c0:
                    56:e3:12:45:4c:1e:21:07:7f:c5:87:d6:87:3c:ba:
                    6e:fb:1e:df:c5:73:e3:9c:5b:77:34:3d:1f:34:e4:
                    44:df:aa:46:74:4e:83:a0:81:08:69:87:45:94:a9:
                    8f:54:a9:a2:5d:19:18:bd:45:34:e4:18:21:14:54:
                    be:f1:06:99:4d:b3:d4:a2:36:6e:32:ab:05:b4:2b:
                    4c:41:75:50:10:9d:3d:93:f0:f4:7a:b4:18:92:7d:
                    ff:bb:e5:58:1d:15:7e:06:f6:56:59:42:78:24:eb:
                    a3:69:12:b6:2a:66:ff:00:b1:3b:45:ce:3a:be:c0:
                    fe:15:6c:17:66:f3:9c:75:c3:79:23:18:02:88:a1:
                    ba:47:82:19:8d:e2:a9:79:3f:7a:04:89:3f:d8:60:
                    e0:90:73:e2:84:13:20:22:8f:33:75:e9:88:3c:81:
                    94:24:5b:d3:f5:62:5a:6d:41:2f:98:52:31:ec:88:
                    86:f5:ec:ed:97:ed:22:70:4f:ea:90:e4:93:d6:d9:
                    1b:00:cd:29:d6:a6:33:7c:26:4e:a8:15:54:21:d0:
                    1e:a9:6e:82:60:60:45:49:0c:2a:f8:99:f6:fb:d8:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:45:A0:B4:54:EF:54:46:38:D9:E6:2F:B3:78:B9:39:CB:54:D0:4A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14da23be-02ad-488a-968e-846626d95cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3650::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:4b:a6:81:2d:61:24:2b:70:87:f4:fc:b1:1e:73:44:a2:
         0e:4b:b7:00:41:52:3a:31:b2:46:85:4f:3c:ee:2a:9a:32:db:
         77:e0:0b:61:22:11:88:04:c4:f3:5f:62:97:b4:64:d1:95:1a:
         70:16:4d:87:6b:e9:63:3e:54:3f:fa:21:9e:12:5d:cb:ca:f0:
         36:2c:c3:36:46:01:8a:1c:c7:a6:ce:41:f8:d8:a5:b6:46:27:
         1e:11:c2:29:3a:5d:61:d4:6a:f2:fd:a3:1f:dd:b5:a2:1e:b0:
         0d:49:b6:ca:cc:f2:6c:96:64:cd:30:d0:45:23:f3:20:59:41:
         f2:f3:ec:86:42:11:86:44:a8:eb:b2:df:bf:b6:69:d9:bc:66:
         6a:be:06:99:43:d2:4c:97:3c:d7:1a:d2:c3:84:99:e1:f3:b6:
         f3:27:8e:9b:2e:7f:af:55:83:0e:ae:a7:5d:21:d4:42:7e:96:
         12:0f:67:e3:26:19:f1:e1:5e:e9:a8:05:5e:08:4d:81:10:ff:
         61:73:e6:4d:17:39:24:71:f6:53:b7:0b:59:ce:38:4d:86:44:
         7f:8f:52:9f:ac:da:77:5c:42:f0:f7:34:11:a2:45:05:f5:fa:
         a6:8a:0c:af:2d:69:d0:a5:61:06:d3:65:e2:85:64:50:80:6d:
         a5:58:07:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:44 2026 by rpki-client