Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbd0b7e-e889-4aba-9d78-72be2d8056b8.roa
File:                     3fbd0b7e-e889-4aba-9d78-72be2d8056b8.roa (raw, json)
Hash identifier:          rbHFnYbxi5FOXvLU2CszflPEH1OP87SdTVyNxdUd8Zo=
Subject key identifier:   B0:22:72:91:E3:D6:4D:83:0B:6D:35:21:7A:97:EE:48:48:34:CE:EC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57F83D14E7A4EA855CBDEBB451AC899C6F1A704E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbd0b7e-e889-4aba-9d78-72be2d8056b8.roa
Signing time:             Mon 04 May 2026 08:10:05 +0000
ROA not before:           Mon 04 May 2026 08:10:05 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3244::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f8:3d:14:e7:a4:ea:85:5c:bd:eb:b4:51:ac:89:9c:6f:1a:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:10:05 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=49374f2c1a887c6ed29e95cb3361cf9864b1c95b27ba8528947aa8924548d58c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:ab:7a:17:d4:be:4f:be:99:21:0c:47:49:
                    05:f0:f3:ef:a4:d6:f0:fd:cf:10:a2:71:33:f3:f9:
                    4d:78:b7:25:dd:5d:07:ff:a6:a3:23:ff:71:2f:f5:
                    a8:f8:ae:79:cd:dd:7d:49:30:1d:74:ea:f6:d5:34:
                    38:04:7f:db:83:b0:93:8b:ec:06:be:07:06:ee:9f:
                    d2:01:e6:e3:ff:ad:ad:44:5c:2f:d5:12:a7:33:ca:
                    41:70:31:b3:c0:7d:62:9e:5b:37:84:20:fd:c6:2a:
                    a7:9e:ca:8d:25:56:c8:d6:7b:9a:0d:11:9c:94:7e:
                    60:b0:74:3c:f4:bc:0a:20:a6:99:ce:b1:23:92:5f:
                    92:b3:e2:f1:46:26:3d:de:3f:aa:3b:df:3b:95:a4:
                    36:8c:f6:83:72:b5:af:31:bd:b9:58:0a:28:f9:1c:
                    08:f6:94:7e:f0:f5:34:57:c3:04:9e:74:e4:66:6f:
                    f9:29:d2:73:5f:44:6d:12:af:e0:49:7b:2c:95:c2:
                    7f:ee:3e:7e:5a:c4:d2:13:4b:40:99:cf:a2:89:d6:
                    2e:cd:41:09:1f:3b:29:69:dd:d1:e1:39:21:77:30:
                    d5:b8:dc:79:74:23:d5:53:b0:a1:b4:39:6c:fc:cc:
                    6c:75:79:af:84:d6:16:31:00:92:01:28:ff:d3:20:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:22:72:91:E3:D6:4D:83:0B:6D:35:21:7A:97:EE:48:48:34:CE:EC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbd0b7e-e889-4aba-9d78-72be2d8056b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3244::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:57:e8:48:df:a3:3f:f5:5d:d3:fb:b0:f9:32:45:40:a1:
         7e:f3:13:df:6d:5b:89:75:58:af:53:f6:e1:a3:9f:e2:4d:bd:
         3c:b4:eb:9c:d1:8b:d4:5e:5d:da:45:15:a9:f8:51:f7:a6:44:
         62:b5:f4:24:7e:df:48:3b:99:6e:1e:f3:5d:aa:54:91:50:09:
         dd:f2:b4:4d:6b:78:4c:29:90:ce:5b:ba:0e:f1:dc:39:4a:f2:
         6a:b2:70:31:b0:34:97:9a:d3:fe:db:9c:20:65:33:42:66:b7:
         9a:6b:c1:5a:3e:58:e0:3c:c8:c3:88:5d:8f:04:a7:22:b1:b6:
         05:00:a9:76:94:6e:ef:23:11:89:10:89:ce:a1:dc:92:b5:ea:
         01:08:e8:8b:83:c1:d5:97:f3:c7:e7:64:cf:a3:a3:92:80:d2:
         42:42:2f:a0:8c:c5:55:93:21:ee:d9:53:31:1f:76:d8:16:3d:
         8c:a0:37:2f:ed:1f:62:f3:a4:2c:9e:4d:e0:2c:66:1a:9e:11:
         ac:46:4c:5c:69:6d:ea:b0:ad:79:f6:48:17:dc:75:32:1a:ce:
         9d:88:e5:29:1b:14:2d:fd:93:85:5b:2e:e1:fa:06:69:e5:73:
         36:10:b5:b4:05:53:34:c4:32:7f:7c:5a:1c:73:66:27:8a:cc:
         24:1a:f6:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:05:04 2026 by rpki-client