Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a283350-14f8-4e59-9bd9-99e9e7dc08e2.roa
File:                     3a283350-14f8-4e59-9bd9-99e9e7dc08e2.roa (raw, json)
Hash identifier:          dzkEJEhB0cxL9Wd0dOr4BjQRgpYvXY4lGdkC4p1upLo=
Subject key identifier:   E1:D8:46:C8:10:51:B8:12:FB:7F:27:B3:32:56:CE:AD:F2:FF:CD:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3C01C6F834A20494849BF95A76F2B49B74F575B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a283350-14f8-4e59-9bd9-99e9e7dc08e2.roa
Signing time:             Mon 04 May 2026 05:00:38 +0000
ROA not before:           Mon 04 May 2026 05:00:38 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fdc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:01:c6:f8:34:a2:04:94:84:9b:f9:5a:76:f2:b4:9b:74:f5:75:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 05:00:38 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=8fd2090c2a4dda224d69aaefc862fde41bebc3049a9df7c11e73566c4826bc53, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:0f:89:44:c4:96:dd:11:97:3c:67:69:a7:
                    17:ef:4b:8b:32:18:06:9c:d1:f3:9c:63:a9:bb:f9:
                    b8:4a:71:bd:d3:27:11:be:32:d1:09:3f:44:d8:bb:
                    04:c1:99:51:60:e2:1c:56:ef:97:f0:61:db:c2:c2:
                    88:f4:db:1f:69:3e:fe:b1:6e:1c:fd:4f:28:48:c4:
                    7f:d6:56:b0:8a:7b:14:e3:9a:90:f9:f0:ad:36:c5:
                    cc:99:40:ff:ae:b3:0c:82:28:a3:10:9d:83:57:d9:
                    c2:35:1c:d0:89:46:85:eb:e6:87:44:1b:b2:5c:fd:
                    bc:29:ab:14:26:72:32:59:de:e7:c8:4b:90:93:4d:
                    77:bd:f1:69:89:4d:ed:e2:01:5a:16:1b:c2:8c:ba:
                    98:1a:aa:be:63:ed:26:94:21:0f:c7:f9:ed:4f:3d:
                    38:34:df:09:8e:0f:1b:f0:44:c0:eb:c4:e5:63:7f:
                    98:41:3a:e0:46:84:f2:3f:ee:a8:0b:20:9e:4e:a3:
                    f7:87:f8:54:98:a1:ee:6a:87:b4:92:ae:ea:87:71:
                    0c:34:ba:0e:ba:f8:9e:fb:50:be:83:be:1e:97:35:
                    b6:40:d5:0b:c6:46:d7:6e:24:fa:81:7e:ed:0a:91:
                    06:f1:c7:62:a7:48:de:08:58:23:ba:6e:73:f5:35:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D8:46:C8:10:51:B8:12:FB:7F:27:B3:32:56:CE:AD:F2:FF:CD:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a283350-14f8-4e59-9bd9-99e9e7dc08e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fdc::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:10:c0:43:fd:70:97:1a:18:6b:09:58:fa:4c:ad:32:68:62:
         36:45:68:bb:80:10:da:a6:a4:17:ad:ef:1a:5e:79:a2:36:87:
         65:9e:3f:00:7f:24:28:97:02:bd:a7:31:25:d2:97:a4:15:55:
         07:9a:a9:e1:7d:4e:f5:03:8d:34:a8:55:31:d3:19:98:f5:cc:
         44:1e:d0:0b:4d:ab:e2:3d:9c:0c:98:02:dc:64:03:88:b1:fa:
         b4:7e:72:83:12:2f:d7:10:20:1d:db:04:2b:94:c0:5f:c3:90:
         1d:64:b4:e0:8c:89:ec:70:f6:ba:25:71:cf:70:f2:a8:b8:07:
         76:bf:b1:9e:aa:12:35:de:ee:83:99:f7:18:d1:11:99:9e:64:
         2b:01:ce:a1:7c:60:ba:a0:1b:f1:aa:f0:b3:3b:54:b1:8f:6d:
         ce:fb:7f:2c:b8:17:a2:c8:da:87:1c:07:8e:34:53:9e:be:e7:
         44:f3:e3:8d:9a:f9:4d:f9:08:82:89:e1:1d:db:24:7d:80:e6:
         e1:6d:c6:2e:d9:18:73:f2:3f:f2:43:e5:c0:66:82:d1:8e:f5:
         90:ec:a1:db:17:93:ca:2f:1a:5d:51:de:d5:b3:a9:0c:60:26:
         d0:a2:d2:88:07:41:9e:3f:7d:1f:ac:ac:e3:a3:b4:21:fc:b6:
         ee:ce:b0:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:57 2026 by rpki-client