Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/404cbd18-52a1-4323-8911-904e9472000f.roa
File:                     404cbd18-52a1-4323-8911-904e9472000f.roa (raw, json)
Hash identifier:          JAbvXWp7rEyOom9+DqZOhVNiqAdak73QF3mAuS5LO9s=
Subject key identifier:   07:C6:6A:C7:87:48:33:AA:3B:6F:39:BF:61:92:A2:AD:97:6A:B0:BD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       36355B0D4A38C8B51323A2F66B306F51CFEABD55
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/404cbd18-52a1-4323-8911-904e9472000f.roa
Signing time:             Mon 04 May 2026 06:00:42 +0000
ROA not before:           Mon 04 May 2026 06:00:42 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:334c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:35:5b:0d:4a:38:c8:b5:13:23:a2:f6:6b:30:6f:51:cf:ea:bd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:00:42 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=7c7d293ed4ebd1784a76781a5d85a683ed3f4e7a9ffa9e9a0627307efecb1e4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:6e:51:4c:57:73:ec:3a:0e:7a:09:3f:99:
                    4b:83:a0:c5:ce:9c:d4:c7:96:63:11:df:55:e9:3f:
                    e2:93:c0:92:1a:2b:8a:ec:e7:55:42:31:08:ea:4c:
                    e1:49:ea:36:38:e2:c7:ee:ac:ef:8e:05:8c:8d:a6:
                    b9:0a:45:0b:1a:1e:b6:e2:3d:15:e8:37:7a:de:0e:
                    6c:e9:2d:f1:ee:67:b9:1b:70:05:2e:16:4d:15:81:
                    fb:a5:c4:cd:23:0c:3f:78:9b:ca:61:45:f3:69:02:
                    dd:5d:55:0c:6d:dd:c2:3b:79:21:68:d5:95:5d:bf:
                    6b:c6:85:60:fa:26:30:57:c7:22:cc:1d:28:f9:04:
                    f0:11:3d:9c:a3:0f:f1:d4:da:19:b0:3d:fa:7d:5f:
                    26:ea:1f:ba:63:61:0c:ce:69:52:af:13:34:8b:11:
                    bf:35:a2:d5:42:a3:8a:1e:eb:d6:88:6c:92:b8:92:
                    3b:09:58:52:a1:2f:f2:91:c6:1a:bf:57:2e:10:d5:
                    f6:95:85:4f:b7:4d:ad:0a:b5:4b:48:72:4e:33:60:
                    32:09:26:b8:40:e0:a5:18:14:23:35:06:b5:f6:d2:
                    1d:ae:68:be:2a:96:4a:09:f5:1a:6c:e4:5c:b9:1d:
                    12:12:de:19:d1:4b:1a:54:cb:04:a9:2e:49:be:ce:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C6:6A:C7:87:48:33:AA:3B:6F:39:BF:61:92:A2:AD:97:6A:B0:BD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/404cbd18-52a1-4323-8911-904e9472000f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:334c::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:fc:5c:20:47:ba:d6:99:b2:99:3a:bb:3d:56:27:04:d1:
         b0:9d:f4:ee:b3:79:be:0c:00:12:b5:95:74:5a:17:3c:76:89:
         dc:c9:9e:66:1b:45:f6:75:c5:45:33:0d:80:61:2c:5d:8c:2a:
         d4:5b:90:2b:dd:a2:e8:da:47:20:ac:4b:1c:17:b3:c8:5c:99:
         80:d9:f7:05:24:04:bf:ca:c9:2d:26:78:21:76:4b:25:ff:ea:
         50:6a:0b:7c:91:e3:b2:49:0c:3b:d1:2d:cb:8b:40:40:80:f4:
         8c:c4:2d:af:b6:98:b6:94:24:c8:77:63:af:3c:6a:6d:8c:18:
         b6:e2:e6:9c:64:7b:b2:d1:58:4f:81:7d:16:81:2c:12:ec:76:
         af:29:1a:fa:91:a9:ae:c4:32:40:66:1a:51:71:41:fe:87:03:
         92:ba:ed:3e:56:b8:a5:db:2a:79:43:ed:e5:69:1b:fc:6a:aa:
         b5:61:42:9e:01:41:a4:27:d7:5b:e0:54:3b:2a:c2:1b:dd:64:
         d4:06:6d:86:58:7c:b1:fe:aa:e9:a1:1c:35:d8:36:2f:69:95:
         63:cd:62:16:54:fe:f0:46:ac:cc:e2:8d:a6:11:ff:c8:52:2b:
         45:35:ea:81:4a:07:95:a8:8e:cd:90:14:6f:12:9f:8d:f6:16:
         80:10:d1:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:59 2026 by rpki-client