Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2034530c-2716-4cb7-8eb0-dc90473ea093.roa
File:                     2034530c-2716-4cb7-8eb0-dc90473ea093.roa (raw, json)
Hash identifier:          XOQkI/b4BC41qdqAxzTpxtIh1uo6T4O9CQz7Zpiwc5M=
Subject key identifier:   C9:0B:80:48:EE:9B:E4:AF:5C:22:D8:9C:3B:C7:1D:A4:A1:23:9F:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73F8DBFF182BB6082A6FA118273BF90AD0777C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2034530c-2716-4cb7-8eb0-dc90473ea093.roa
Signing time:             Mon 04 May 2026 03:32:03 +0000
ROA not before:           Mon 04 May 2026 03:32:03 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f98::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f8:db:ff:18:2b:b6:08:2a:6f:a1:18:27:3b:f9:0a:d0:77:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:32:03 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=599f74b49a25f3c94d28d806b2a3a762911c4b7b7b0cd82279d5c0b7df5b5447, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:3f:7d:e5:05:51:89:c8:69:3c:5d:8d:97:
                    57:1b:86:c7:62:b1:d8:a0:5c:a2:ac:2d:c3:85:25:
                    d7:a5:a8:17:1b:df:3e:2f:d2:f5:4d:34:c8:c3:22:
                    f0:76:d9:6c:8f:b0:56:ce:d2:db:88:83:b1:33:15:
                    56:57:1e:5d:5e:ce:b1:6b:7a:4c:e4:b1:77:aa:0b:
                    56:a1:c2:56:a5:c1:bf:7f:98:86:54:82:5d:65:74:
                    2a:93:2d:f6:4d:3f:84:f2:eb:28:15:fd:d0:e4:dc:
                    a1:a3:9c:e3:28:17:a6:09:72:fd:96:3c:a3:a3:75:
                    f5:c7:08:78:46:49:2f:ca:a0:4d:9d:fe:3a:3e:b2:
                    cd:21:ee:17:ea:32:c9:93:62:56:c3:fa:b2:a6:bf:
                    c4:1d:59:dd:0c:da:43:12:8c:17:87:6d:da:21:eb:
                    7a:bc:90:e2:fe:90:8c:1f:b8:a7:9e:a4:c0:93:00:
                    57:54:45:4c:fd:9a:10:bd:e0:ed:b1:cd:b5:e9:72:
                    74:d4:00:1b:55:69:b0:17:c5:85:06:03:61:e0:49:
                    9c:d6:24:be:ed:66:7b:8a:d5:0f:e4:fd:92:88:6f:
                    92:c5:84:93:d1:88:2e:3c:f6:b3:f5:43:a2:11:79:
                    39:f5:ab:7a:fc:7b:df:17:bc:8a:c8:3a:84:50:1f:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:80:48:EE:9B:E4:AF:5C:22:D8:9C:3B:C7:1D:A4:A1:23:9F:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2034530c-2716-4cb7-8eb0-dc90473ea093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f98::/46

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:99:97:dc:87:2c:8e:98:c3:74:f5:00:75:51:82:d7:e0:
         b9:30:ca:2d:80:fb:8d:92:1e:1b:b3:e9:e7:8e:1c:b7:5a:3a:
         88:5b:a6:ab:96:4b:26:52:88:48:fd:19:7b:e2:13:a5:17:56:
         d8:3c:c8:a3:c8:79:f1:54:cd:10:f7:13:92:88:6c:12:04:e0:
         7b:61:93:70:c0:b1:c1:c1:70:6a:2e:9d:cb:66:40:29:46:d9:
         a7:32:59:46:87:86:f4:54:cd:99:ae:06:7c:e0:2c:c1:ca:cb:
         d8:77:3a:d0:41:bd:47:b7:d3:92:5d:72:16:4f:52:14:8c:5e:
         43:e1:03:5a:f0:d9:40:dd:b4:e9:dd:68:1d:d8:cb:e0:71:51:
         f7:98:80:6f:b1:e4:91:ce:3f:9a:b3:55:ec:b3:ca:dd:66:c8:
         61:89:32:8a:30:35:ff:ab:26:54:07:fa:7b:5e:59:bd:42:64:
         33:78:aa:3a:00:7e:3e:02:d9:c4:23:de:40:ad:08:40:ae:44:
         88:24:b4:e9:cb:85:60:f8:bb:7e:3e:d0:cc:9d:2b:fd:77:3b:
         3d:e8:14:93:c2:43:49:bb:18:7a:ee:a2:61:9d:70:b4:87:3e:
         f3:38:f7:4c:92:c2:63:b5:6d:64:a7:bd:3f:94:d9:91:df:a6:
         36:62:af:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 02:30:34 2026 by rpki-client