Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/340bcd92-ba58-46dc-9f98-76477433af46.roa
File:                     340bcd92-ba58-46dc-9f98-76477433af46.roa (raw, json)
Hash identifier:          mevCH9WADbE2pzE6P14ilkiucfmKtpjfp8mlv05BS5w=
Subject key identifier:   18:AF:1B:E6:7C:38:EE:CA:BF:B0:27:2F:63:C6:53:6D:E1:F2:83:D1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79D85993624698661BC645825AED8554485E01DA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/340bcd92-ba58-46dc-9f98-76477433af46.roa
Signing time:             Mon 04 May 2026 10:50:10 +0000
ROA not before:           Mon 04 May 2026 10:50:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36fc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:59:93:62:46:98:66:1b:c6:45:82:5a:ed:85:54:48:5e:01:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:50:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=47bdfc257731ebcf2a585fad24ce2163e03cdff2f9dd271434c2370ce89b5ff8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:b9:80:67:8b:44:83:33:db:d6:95:13:cd:
                    c8:f7:d2:76:62:13:8a:0f:d9:17:0c:11:e5:c2:23:
                    ec:3b:38:da:c3:69:a0:ac:37:21:35:62:48:c8:33:
                    5c:aa:1e:2d:be:99:06:4e:0a:6e:13:2d:69:21:ef:
                    d5:43:d4:56:e7:44:48:e1:a6:26:1c:be:77:98:6e:
                    34:cf:ce:27:f3:9b:a8:6e:6e:31:9e:fb:38:97:10:
                    e1:15:46:86:09:5d:85:18:c1:09:2f:55:a9:ac:a7:
                    d3:3d:0a:ab:3b:22:1c:d8:91:fe:ae:05:1b:cb:54:
                    3e:39:d4:e4:8a:d8:1b:b5:3e:47:bd:00:3d:a8:72:
                    30:3f:0f:8a:16:15:19:64:0a:2e:31:64:84:a1:0f:
                    0b:1a:c3:2f:54:92:ce:c2:ad:52:d5:62:72:5c:8d:
                    56:cd:93:4f:59:43:67:de:23:98:1f:0d:4d:f1:4d:
                    03:d5:cc:2f:c2:2f:b6:34:c6:5d:85:e8:e8:33:e3:
                    56:4c:12:21:a2:cd:d9:09:04:40:99:9f:5b:60:d6:
                    a6:5e:d2:e8:2f:75:af:c8:b9:54:d7:ab:4d:8c:cc:
                    b7:a9:41:6e:c7:7b:cd:bf:8d:ea:0e:73:2f:06:fc:
                    73:28:e1:c3:49:44:b6:fc:c4:d2:4f:3c:1b:f5:6c:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AF:1B:E6:7C:38:EE:CA:BF:B0:27:2F:63:C6:53:6D:E1:F2:83:D1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/340bcd92-ba58-46dc-9f98-76477433af46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36fc::/46

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:26:8e:4d:61:0c:5f:36:d7:45:b5:63:03:27:16:ef:4c:
         43:e6:22:c7:2d:63:a1:03:93:21:55:63:64:66:cf:be:56:73:
         1b:13:a3:a8:18:06:9f:68:fb:c3:ce:86:26:7e:26:e8:2d:c0:
         c5:f4:be:93:da:e7:b0:3e:00:90:50:ed:1e:37:68:ab:06:47:
         9a:e5:21:e0:34:d1:a9:ed:a1:45:ed:c6:f8:df:4d:10:4e:78:
         73:da:db:f2:b3:73:08:84:43:ff:9a:e1:b2:dc:85:fb:24:af:
         1d:19:68:f0:12:de:4d:bf:55:e7:d8:52:a1:89:1b:26:1f:21:
         a0:eb:6c:c0:23:c5:db:92:13:6d:ab:c6:9e:c4:d1:22:ff:ce:
         ba:b8:89:9f:87:00:12:06:c2:c3:01:7d:cd:d9:63:44:3a:d7:
         de:4c:22:93:b8:08:58:1a:f5:22:0a:83:8f:d7:22:33:20:c1:
         15:4c:d6:0e:b1:0f:af:51:85:10:27:ba:22:14:3a:e0:bd:b9:
         6c:d5:2e:17:6f:f8:bb:b2:b6:e3:41:c9:80:59:9d:c4:09:35:
         a1:15:4c:ed:ec:bb:e4:f3:bf:97:1c:59:d2:5c:fb:f5:d5:95:
         12:19:73:2d:c4:f7:70:b2:63:00:f1:d1:ca:b6:e2:38:0e:72:
         0b:00:a5:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:17 2026 by rpki-client