Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d2e6dee-b2c7-4ca6-a1d3-acc5cb8eaa5d.roa
File:                     2d2e6dee-b2c7-4ca6-a1d3-acc5cb8eaa5d.roa (raw, json)
Hash identifier:          afwDPlMqLdwRx+OIV2r/7qv/xSQiGaz1/ni9muS9d8M=
Subject key identifier:   F9:6E:0C:79:AA:B8:10:13:EE:D8:66:5A:90:B9:8A:D4:5A:8D:36:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2B157472509A7D5FB3DB18E975D97BD9B6E0F7C5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d2e6dee-b2c7-4ca6-a1d3-acc5cb8eaa5d.roa
Signing time:             Mon 04 May 2026 05:21:40 +0000
ROA not before:           Mon 04 May 2026 05:21:40 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b08::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:74:72:50:9a:7d:5f:b3:db:18:e9:75:d9:7b:d9:b6:e0:f7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 05:21:40 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a03e5bd1a6c391a771c51d93e4881293b74963f92e523a313497a44d054344b8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:ea:2a:d4:0f:9b:fc:7f:f8:45:fb:f7:62:
                    4b:4d:53:b4:35:74:36:00:30:a9:36:31:38:51:42:
                    0c:0f:29:09:a6:3c:49:e9:8e:fe:1c:82:77:64:d8:
                    8f:20:a8:8f:3e:9d:59:4a:8e:86:b1:cb:de:08:1f:
                    ba:e0:57:85:2e:8c:21:1a:bf:1f:95:ee:86:55:d8:
                    0c:10:60:7f:95:4b:1f:d0:1d:28:0e:06:0a:84:7a:
                    15:97:7c:b6:52:70:f4:90:d2:a6:68:a2:91:c0:b2:
                    2d:ba:b6:9c:b7:9d:a2:da:7b:35:73:26:a0:7a:d4:
                    b2:c2:f3:a5:b7:45:09:1b:ce:b0:71:06:db:16:85:
                    8c:30:c3:35:be:9d:ff:7f:4f:7e:a7:63:fe:6c:5d:
                    de:25:f0:80:61:3e:72:3e:b8:66:cc:c1:02:96:ac:
                    2e:fa:da:9f:41:1d:0e:3d:d8:fa:3a:30:d4:03:2e:
                    ab:9a:12:5a:93:36:c0:ed:17:2b:64:7b:0d:52:b3:
                    28:c2:fe:81:6e:5a:d7:8a:49:4b:96:d8:bc:ae:54:
                    df:d6:eb:a0:89:87:f6:94:05:5e:fe:86:7d:fd:7f:
                    bb:9c:d9:38:db:ae:e3:47:0a:06:68:f4:23:77:bb:
                    a9:bd:bd:6f:64:20:bd:aa:a3:5e:20:18:d4:f8:d8:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6E:0C:79:AA:B8:10:13:EE:D8:66:5A:90:B9:8A:D4:5A:8D:36:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d2e6dee-b2c7-4ca6-a1d3-acc5cb8eaa5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b08::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:2c:38:fb:9d:f9:32:43:b9:07:d1:a1:82:20:f1:1a:75:
         b4:41:af:84:d0:a9:80:fa:af:96:f1:19:dd:91:bf:74:44:9b:
         ba:9e:00:49:f5:89:e0:15:2e:b6:04:a1:86:8c:2f:07:de:91:
         66:c2:70:f5:2d:27:96:28:d7:66:18:24:20:03:68:37:5c:94:
         68:14:71:a1:92:0a:d1:11:3c:da:32:f6:0d:21:fb:ec:49:90:
         6a:f0:77:37:e3:6f:34:d6:ba:04:b3:e5:77:fd:1c:ef:ff:d5:
         9a:68:9f:74:6c:c0:22:66:1f:cc:08:32:61:7e:2a:28:b5:09:
         51:9e:99:a3:8e:63:06:e4:60:1f:6b:e6:1c:80:20:45:d8:07:
         cb:35:4a:5b:6b:86:98:65:c1:89:4d:ab:bb:d1:96:ea:5d:63:
         3c:35:11:41:7f:8c:5d:bb:67:de:5d:21:b8:22:77:2c:3b:e3:
         8a:78:cc:b8:ea:ae:e7:11:53:4b:08:4a:58:5c:cc:f7:1c:dd:
         45:a2:7b:a1:f9:34:4e:c7:dc:9f:ab:01:e3:36:d9:b5:3c:cb:
         44:8b:e6:bc:b4:69:c7:a3:69:24:bd:8c:73:eb:1c:f5:5a:6a:
         9f:f6:da:1b:09:17:86:21:06:b8:18:68:b5:30:69:ca:b1:d1:
         ec:40:3e:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:05:01 2026 by rpki-client