Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa
File:                     3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa (raw, json)
Hash identifier:          ni42swM1Tp4qs3l2+iGF9TmYJF1vVv3XxvturH9US0Q=
Subject key identifier:   0D:03:E0:92:89:6F:45:F7:DE:53:40:5B:E7:74:FA:D3:9B:88:DF:FF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2349FEC4D3DEF625311018DF2102B552EA1C9752
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa
Signing time:             Mon 04 May 2026 03:50:44 +0000
ROA not before:           Mon 04 May 2026 03:50:44 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:fe:c4:d3:de:f6:25:31:10:18:df:21:02:b5:52:ea:1c:97:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:50:44 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=4164456c51e8b6919c7c3efea2531426d69758d172dd2fbdbe26f91c0b2313db, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:72:98:eb:5d:21:4c:19:c5:90:c7:1e:f5:
                    75:45:1a:f6:8c:5b:ec:90:49:03:28:1b:f3:96:f9:
                    9f:9d:07:86:fc:63:b2:5f:32:af:d5:92:e6:6c:3f:
                    c1:48:23:81:1b:b3:5c:83:08:f4:96:96:2a:f4:a5:
                    ae:ad:07:94:e5:f8:cf:46:22:0a:46:7f:17:1e:5d:
                    fd:02:d1:99:24:57:e2:b6:d9:6c:83:3d:aa:ef:09:
                    dd:95:88:34:0f:12:a3:7b:ff:b4:04:24:dc:68:15:
                    49:10:f0:f1:8b:0a:0b:10:3c:0b:41:f0:54:ef:43:
                    4a:24:aa:c9:09:e9:ce:02:ea:0b:c0:16:b5:fc:13:
                    f7:92:6d:01:f1:43:c9:74:5c:39:bf:9f:0d:61:a6:
                    0f:49:7b:06:38:42:6e:0c:25:55:a0:16:7c:a7:81:
                    d9:ae:f8:53:cd:1a:12:5b:c6:0b:f7:62:40:91:dd:
                    2b:b4:a5:37:be:04:3d:4e:65:a2:18:14:4d:60:41:
                    05:ca:72:bd:21:d6:3b:99:00:a1:04:83:ab:2d:66:
                    e1:81:ec:99:4c:a7:3d:62:94:8c:ab:7e:04:a2:ef:
                    9e:62:1b:fa:0f:44:17:3e:d0:79:4d:e1:50:29:00:
                    fa:01:5e:cb:cf:79:3b:50:43:4e:96:32:cc:f8:90:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:E0:92:89:6F:45:F7:DE:53:40:5B:E7:74:FA:D3:9B:88:DF:FF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e7cd3ff-4dda-41b8-80fe-aab76d3d5edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2100::/41

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:f4:57:34:8e:9d:57:b3:34:0e:22:8d:59:db:9d:69:81:
         33:e8:54:d8:3b:ec:26:f2:86:4c:c9:3f:35:ef:d5:e1:f4:a5:
         2e:1b:45:bb:6a:12:8f:23:a9:90:62:90:51:04:03:3a:7b:94:
         6d:7e:4d:5e:6b:88:39:3a:8f:ed:d1:77:c0:d0:47:af:8e:cc:
         fb:a1:61:c7:10:37:fe:74:d7:53:a8:ac:4e:4f:95:30:f8:3b:
         bf:77:38:ca:6d:7b:b3:c9:c0:4c:56:d7:21:05:a1:94:1d:47:
         da:59:a0:4e:a9:86:9b:fc:af:bf:0a:3c:e2:81:42:5e:6a:88:
         de:a1:7f:8f:c6:18:5b:64:0e:3e:69:7b:24:28:da:f9:08:b0:
         26:5b:c5:61:4b:fd:b5:31:34:b1:ac:8e:7d:2b:4d:ee:7c:83:
         89:23:01:e1:ac:4b:fa:91:36:fd:35:61:d7:f9:0b:1c:2e:0b:
         8d:78:89:e1:db:d4:f5:56:d2:01:15:ae:91:ae:8e:a4:e6:aa:
         63:06:b3:99:38:e3:f3:03:a8:7b:04:4b:03:dc:9f:d1:be:2c:
         be:41:48:c2:f1:51:c0:b3:03:55:f6:4b:7b:40:b7:5f:d1:a4:
         9f:74:f0:5f:28:c8:a5:e4:7d:c1:f6:7f:05:07:c7:4e:0d:cd:
         a8:84:dd:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:42:20 2026 by rpki-client