Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2738f00c-bd32-4d7d-b170-dd8ac5a75871.roa
File:                     2738f00c-bd32-4d7d-b170-dd8ac5a75871.roa (raw, json)
Hash identifier:          tCj8xOac94qFOqEUTf+NggyBPXi6CvNaN/BxgkA6TQ4=
Subject key identifier:   36:85:5E:78:C4:8A:19:A6:FC:E7:E7:A3:2C:11:14:34:05:90:AB:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03A0F00D05DDD563D545EE9004880EA5D0D181C1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2738f00c-bd32-4d7d-b170-dd8ac5a75871.roa
Signing time:             Mon 04 May 2026 07:50:54 +0000
ROA not before:           Mon 04 May 2026 07:50:54 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2900::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a0:f0:0d:05:dd:d5:63:d5:45:ee:90:04:88:0e:a5:d0:d1:81:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:50:54 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=43d755d543a8fecd6c474d1d996c9b6c93647c4cdef4d42d6f440ca85bc2ea16, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:85:22:9f:d2:7d:12:5e:16:2b:af:6c:fd:
                    bb:b0:c3:85:17:47:ff:c8:11:15:da:14:8d:74:3b:
                    21:49:4b:b9:0b:d4:e1:58:e4:ca:5a:cd:b0:74:da:
                    af:d6:d3:b3:fc:d2:a9:86:d2:f3:be:8a:db:da:bf:
                    a4:a3:64:3f:b9:02:96:b6:e0:34:a9:fc:06:ae:65:
                    05:db:99:fb:6a:fa:dc:d2:74:78:c2:b0:d5:b4:34:
                    b5:91:02:8d:9a:ba:30:9c:d3:f6:dc:3a:cf:4c:16:
                    62:36:f3:53:a6:e7:56:45:a2:9c:e0:18:40:03:96:
                    a9:ec:25:23:24:b2:8b:26:49:0a:99:ce:e4:27:d5:
                    02:25:80:24:28:bc:71:90:ba:a4:5c:e8:4c:a9:08:
                    a9:6a:cf:d9:42:d2:99:01:f1:71:b0:23:49:a0:2e:
                    80:b3:8f:f8:18:1f:c0:64:8f:44:ca:50:d1:9f:32:
                    13:db:0b:f0:96:87:b0:13:9c:d3:d7:d2:a1:e2:21:
                    97:ee:2c:08:30:ab:5d:d2:42:65:6a:9f:eb:7a:98:
                    e2:ec:f4:13:a9:02:24:a9:af:bc:5c:10:ea:07:49:
                    df:ad:d1:56:23:19:06:c2:ca:66:30:fe:57:53:8b:
                    85:a0:6e:f3:0c:a2:93:67:46:fb:f5:83:7d:d7:4d:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:85:5E:78:C4:8A:19:A6:FC:E7:E7:A3:2C:11:14:34:05:90:AB:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2738f00c-bd32-4d7d-b170-dd8ac5a75871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2900::/45

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:5e:87:8f:8a:7d:0d:0c:1c:3d:72:74:a7:bc:20:55:7f:
         8c:72:b6:11:15:9e:60:9a:c0:05:75:4a:9f:c4:c8:b6:06:28:
         81:50:fd:b6:28:0f:49:55:88:3d:70:25:55:41:5b:17:c4:66:
         38:2a:8d:ef:6f:fe:f3:6b:dc:db:0e:fa:28:29:d8:8e:5c:01:
         48:18:f9:c3:fb:29:71:9c:e4:2f:c9:ff:84:27:d4:c6:75:92:
         10:a5:6c:98:c6:de:53:f6:e3:99:da:bd:fe:83:6a:e1:26:e3:
         c1:ce:a7:9e:1b:a5:22:ff:54:77:5f:1f:03:4a:4a:91:8c:33:
         94:d9:d2:d7:d4:7a:b8:e2:3e:ff:45:f7:4e:c9:02:a9:b8:62:
         90:bc:ed:34:ac:b3:ee:ec:51:f3:f5:65:08:67:7d:6d:18:57:
         eb:60:c2:04:43:0e:80:c9:ab:90:ba:55:b9:80:06:20:ea:39:
         a3:6c:12:f9:8d:f5:a3:ae:53:0c:e1:10:e7:8b:5e:01:64:db:
         93:3d:82:e2:58:2f:6b:70:53:5d:95:81:32:38:c9:86:ed:9e:
         35:b6:d8:8d:ec:e5:ac:bd:d8:8e:b4:fe:54:2e:5f:dd:10:f9:
         42:84:80:60:e1:31:58:19:1d:9c:49:17:24:86:71:76:12:15:
         27:87:16:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:19:02 2026 by rpki-client