Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/176a8d2b-871a-4ed6-b124-00592234238b.roa
File:                     176a8d2b-871a-4ed6-b124-00592234238b.roa (raw, json)
Hash identifier:          7Mehs+V/SJ/ysKBpFUzM8sGeGqM8Ok6phx38a7lDIj8=
Subject key identifier:   3F:67:D1:8C:1E:0C:E1:E0:32:B0:F2:16:DB:53:08:C6:05:17:81:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       24D34889B1EF95CAAC4B9959B1222FF129CD828C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/176a8d2b-871a-4ed6-b124-00592234238b.roa
Signing time:             Mon 04 May 2026 06:00:09 +0000
ROA not before:           Mon 04 May 2026 06:00:09 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:48:89:b1:ef:95:ca:ac:4b:99:59:b1:22:2f:f1:29:cd:82:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:00:09 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9a777dfe80f39063a40a88875ca127113dbc29d362f9ae11cf4fbf37273e9925, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:5b:81:02:7a:6b:02:c9:86:34:2f:3d:c8:
                    ca:b7:49:bf:18:d0:0d:6d:8d:75:b0:8a:58:4c:84:
                    6c:48:a7:82:21:6f:11:93:46:07:cf:d2:16:f2:4f:
                    f0:60:f9:0a:08:93:9c:6a:35:b8:84:05:eb:ef:d5:
                    ab:72:b3:31:0e:0a:15:42:56:dd:86:2c:cf:f8:eb:
                    44:c0:4b:0f:f2:5c:2a:32:89:44:80:b6:d6:61:93:
                    4a:72:55:50:aa:a5:20:2a:7d:a7:6d:ab:ce:85:f2:
                    fc:51:57:f2:f7:ea:19:9e:44:20:a4:72:e0:5a:9d:
                    17:76:a3:94:0a:fa:29:f7:32:94:da:39:77:15:79:
                    17:74:de:42:3a:62:b0:fd:2e:14:6d:e2:24:dc:72:
                    7d:10:c3:c0:04:9c:09:bb:ca:ea:fa:fa:0a:5b:1a:
                    71:a4:3b:40:fa:a5:a7:11:11:48:30:72:8b:fd:fa:
                    70:c5:a3:e2:ff:d1:be:54:86:5d:91:65:42:87:91:
                    e2:35:b9:56:f7:1a:1a:d4:ba:03:a7:9e:42:f0:c1:
                    12:dd:39:dd:f1:03:73:a0:78:70:5d:44:5b:4b:9c:
                    66:e4:ba:f2:7b:1a:d9:d3:19:9b:2d:c5:10:8a:e5:
                    f7:a4:e8:e1:fc:df:f1:06:50:ab:c2:18:22:3c:1a:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:D1:8C:1E:0C:E1:E0:32:B0:F2:16:DB:53:08:C6:05:17:81:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/176a8d2b-871a-4ed6-b124-00592234238b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f00::/42

    Signature Algorithm: sha256WithRSAEncryption
         02:64:1c:d5:c5:1a:d9:15:95:f8:cd:a6:89:82:23:7a:c2:51:
         04:c4:9f:44:05:62:51:c6:e1:ee:20:41:2b:bc:3b:b2:c0:5b:
         67:ff:42:ae:3f:05:48:da:2a:e1:ad:5f:be:0f:98:f8:2e:ed:
         83:7f:43:5b:a0:d9:dd:85:bc:a7:20:7f:4a:76:ca:c9:f6:1f:
         21:8f:ad:9a:5e:7a:1e:d7:91:4b:72:40:ff:1d:a5:c8:27:8b:
         fe:93:cf:de:1e:cb:38:9e:3d:fe:87:27:e3:27:1f:66:ca:28:
         cd:93:0f:9c:a1:63:3c:cd:54:9d:c8:2a:ab:a4:5b:dd:c9:c3:
         c0:9f:2b:e2:bb:1b:00:6a:52:09:ed:d9:86:6b:5f:f1:12:03:
         ba:75:76:34:8c:80:6c:03:45:8b:f6:55:b6:f2:eb:7e:79:79:
         2e:d8:5c:14:eb:69:af:ce:9b:90:51:39:3c:d4:a8:0b:a5:a8:
         d9:31:8e:60:a4:d3:88:77:1d:e6:43:0a:ed:a4:9f:1d:75:92:
         58:77:b2:05:28:6d:17:3c:28:03:b8:71:56:33:38:50:b8:82:
         58:ea:1b:93:7b:46:c4:04:ba:70:bc:97:ae:cf:8f:ce:00:da:
         39:e6:99:85:2d:06:03:5e:58:2f:ca:8e:9f:b3:d8:03:7a:a8:
         83:75:e0:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:17:40 2026 by rpki-client