Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/255128cd-28b2-47ac-a6d6-7cebe1e5ff09.roa
File:                     255128cd-28b2-47ac-a6d6-7cebe1e5ff09.roa (raw, json)
Hash identifier:          qD5hIG3efis2UZhabnKVkD054Hb3O5G6dvWwYx58+MU=
Subject key identifier:   27:3C:09:F5:97:E4:36:EB:B9:E4:58:BC:7C:67:CB:62:A8:F8:9C:F9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7DB07D29A460D94CC6191B8E9DC8505B5B3FEFA5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/255128cd-28b2-47ac-a6d6-7cebe1e5ff09.roa
Signing time:             Mon 04 May 2026 06:41:36 +0000
ROA not before:           Mon 04 May 2026 06:41:36 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3602::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:7d:29:a4:60:d9:4c:c6:19:1b:8e:9d:c8:50:5b:5b:3f:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:41:36 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9849ff4249684d3173310a5e14e73f2ca74080afe5a0c7d0b95bcd7b5d850027, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:7c:01:a8:0d:57:23:ad:44:15:dd:98:9b:
                    15:62:7b:92:50:6a:76:f6:f8:72:2c:23:3a:18:14:
                    d3:16:95:ff:86:9f:1d:11:81:2a:7e:d7:79:72:42:
                    3d:25:52:cb:5a:dc:3b:cb:71:e6:14:a0:fa:a9:1e:
                    a5:c0:7b:51:81:38:fa:53:6e:84:c5:4c:87:e2:ea:
                    e5:70:0f:55:44:41:43:d9:ab:e3:96:1f:de:70:0e:
                    13:d6:63:7c:9e:21:d8:67:7a:df:32:08:79:7c:3f:
                    8d:69:f2:1e:1f:28:66:a7:3e:ff:9b:3b:45:50:f1:
                    bf:88:14:1f:e8:7e:33:73:02:46:3e:50:f6:56:7a:
                    e8:e1:5a:0a:64:c9:e3:18:ce:ef:c4:33:08:fa:93:
                    52:16:65:f2:8a:e4:75:e2:04:1f:9b:a4:3a:ab:88:
                    23:7f:c3:9d:2d:83:98:a9:c7:be:01:a7:66:ad:d9:
                    f9:ca:aa:aa:e4:ae:f1:e0:9c:30:47:f8:67:b0:26:
                    8d:d2:5b:52:07:5b:09:8d:b5:fc:19:d1:72:1b:e5:
                    8a:5a:3d:1c:60:d2:79:29:02:03:f3:31:f8:15:71:
                    3d:40:40:52:67:24:d7:9a:8e:06:2d:1a:3f:a6:e5:
                    84:83:09:85:57:17:22:53:78:49:f4:e4:b1:ca:46:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:09:F5:97:E4:36:EB:B9:E4:58:BC:7C:67:CB:62:A8:F8:9C:F9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/255128cd-28b2-47ac-a6d6-7cebe1e5ff09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3602::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:56:17:9b:6a:64:e5:5d:59:e7:1d:a0:7d:38:de:ab:c6:f6:
         c6:a4:2f:95:00:d0:d2:de:a0:65:0f:9b:46:0d:1f:0b:1e:55:
         1b:ba:5f:35:2d:f6:0a:a9:1d:f3:4c:80:cf:69:d7:e4:01:f0:
         e8:a9:6d:44:b9:4d:96:75:df:75:5d:d6:9b:1b:7c:ed:f0:9d:
         01:b5:8f:1c:d8:2f:21:4a:6e:8b:ad:8c:36:34:97:74:21:e0:
         26:a3:b3:97:58:a0:68:c3:54:78:27:d9:ef:de:03:5e:da:3d:
         8a:95:00:49:a1:a0:96:e1:14:dd:7d:4a:19:d8:0f:2c:c9:7a:
         e6:50:5c:27:1c:c1:00:51:9d:ea:11:1d:56:cb:f5:d7:54:57:
         33:9e:63:3d:cc:97:7f:77:18:f0:b8:ae:f6:db:c7:01:36:fc:
         9a:2e:dd:05:6b:59:6f:38:f1:df:26:16:b0:b2:1a:a1:44:1f:
         0b:66:cb:80:39:b2:ee:e2:48:92:cd:30:f6:78:ea:c0:64:63:
         65:1d:22:d2:ad:79:25:05:0c:c6:18:4a:f1:26:61:ba:37:b3:
         fb:62:1e:8e:6a:39:f4:2a:48:87:5b:86:19:e4:71:54:d3:ec:
         25:27:fe:3d:dc:f9:7d:bb:99:e9:92:e8:f5:50:1d:5f:02:93:
         1f:17:5d:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:13 2026 by rpki-client