Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa
File:                     427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa (raw, json)
Hash identifier:          wD511SIl4djZyASww/M5YKi+cEIjWNQAhJIg8o7uBcw=
Subject key identifier:   D1:C7:BF:D6:87:2B:5C:3B:32:55:69:34:7B:08:F1:A8:9D:0A:4A:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B96DD9EC5EF81B28A8AFADC3BE2F95F262EE6A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa
Signing time:             Mon 04 May 2026 07:30:52 +0000
ROA not before:           Mon 04 May 2026 07:30:52 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:dd:9e:c5:ef:81:b2:8a:8a:fa:dc:3b:e2:f9:5f:26:2e:e6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:30:52 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3a3e20e89b818ea62b0efdd34e056433ad169b4c7befd225b5cd22be682720a8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:95:85:d5:9d:4c:83:83:9f:7e:fd:f4:9d:
                    03:88:bb:c8:d3:52:84:4c:d1:fd:63:82:01:ad:88:
                    1f:2f:a7:25:b1:31:05:0a:22:99:32:e7:44:df:aa:
                    b2:d0:48:bd:34:aa:a0:ee:26:be:34:af:99:96:19:
                    28:c3:32:24:79:a2:e7:f1:ab:57:2f:95:21:5b:b0:
                    03:0e:ab:f3:d1:e8:19:c0:24:7e:5c:d2:33:4e:ad:
                    4b:cc:62:b6:00:c4:bc:75:53:6c:db:98:47:4e:d1:
                    d2:3b:bb:99:18:5a:cb:a5:98:c7:41:f6:5f:55:37:
                    a7:f8:2f:ea:49:f5:e7:d6:db:55:d3:f9:fc:a7:63:
                    0c:3f:11:a6:19:3c:08:6a:5a:55:de:d8:61:c8:62:
                    22:3b:70:59:65:91:96:f0:ce:da:a9:f7:31:71:67:
                    96:cc:e4:d6:31:02:59:65:31:42:a2:ca:8e:b9:6a:
                    ee:b5:1e:c6:a7:7c:3c:4b:0e:c2:68:9b:8f:57:31:
                    b9:5a:c0:72:d7:14:59:8d:02:e7:9a:72:88:e1:a7:
                    b4:e5:4c:ed:68:e6:f2:b6:c9:d3:f7:03:a7:00:fa:
                    4f:c1:18:b5:d0:16:c7:f4:63:61:da:94:a8:7a:15:
                    87:5c:63:37:bd:bc:c9:b8:d6:7c:29:d8:6b:69:ce:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C7:BF:D6:87:2B:5C:3B:32:55:69:34:7B:08:F1:A8:9D:0A:4A:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d3a13-d174-4ac5-bfeb-460c38bfd0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3248::/45

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:b8:e6:e3:3c:0a:ba:f6:dd:0b:49:cf:47:c9:5b:ae:ee:
         f8:c4:cd:50:8e:01:1d:96:66:b0:df:66:dc:8b:bb:de:53:49:
         9b:ed:5b:c2:6f:ca:eb:fb:7a:3e:a0:42:4a:cf:ee:17:f5:77:
         da:4a:da:cc:f4:1b:e2:18:cb:ab:0d:0d:d0:31:f3:35:04:a3:
         94:e9:b3:3f:0f:81:2e:12:32:c3:9b:c5:fe:95:3f:b9:23:eb:
         d3:64:6b:ae:48:18:c9:71:6f:81:0b:62:da:9c:3c:37:bc:c7:
         97:2c:2b:10:a5:5b:6f:c3:3d:91:48:7f:93:37:02:b0:a8:8b:
         69:f1:54:47:2a:96:97:ff:13:ea:b6:f5:b6:ef:d3:74:e3:f2:
         09:b4:ff:2b:32:74:2d:f9:de:d1:88:41:76:47:65:19:6a:53:
         d6:1e:2b:a6:66:e6:93:fa:f8:17:b7:ec:f1:b1:69:86:ad:df:
         fb:cd:50:36:9a:31:7e:0b:95:dd:e7:a7:14:a1:34:f0:7b:58:
         09:31:0b:ef:3a:0e:82:e8:9c:7d:9f:a5:c2:21:4c:80:97:15:
         ae:d1:17:25:9c:7c:54:9a:32:f0:28:90:ab:32:95:6c:77:ee:
         9e:f7:5f:2f:35:64:28:e7:45:4a:54:8b:a9:3c:63:19:23:7a:
         f0:af:88:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:39 2026 by rpki-client