Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42f807a6-fa59-4c00-9092-4d049f219737.roa
File:                     42f807a6-fa59-4c00-9092-4d049f219737.roa (raw, json)
Hash identifier:          H7SCoASrllRzNCbM1kp+/7cXoEA1in/nNc7EpzsFPvQ=
Subject key identifier:   EA:5A:C4:65:AF:22:27:E7:D4:CA:46:9F:D3:5E:A3:2B:AB:4A:43:16
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       343B0A5A48FF345E53E35CAEFFFD02C1F68DF43D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42f807a6-fa59-4c00-9092-4d049f219737.roa
Signing time:             Mon 04 May 2026 12:00:10 +0000
ROA not before:           Mon 04 May 2026 12:00:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3450::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:0a:5a:48:ff:34:5e:53:e3:5c:ae:ff:fd:02:c1:f6:8d:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 12:00:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9c45fba10a3ea9f7432d619d911aeddccb164e5f142b3b630ecad05affba12cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:e7:eb:15:95:46:44:b0:33:34:55:6b:1c:
                    db:79:de:f1:96:51:60:be:d9:d6:fd:23:a6:61:32:
                    d4:dc:13:91:62:8d:5b:4c:60:63:91:02:31:d4:89:
                    a9:ba:98:71:10:d2:a8:41:34:a8:b3:09:9b:57:a0:
                    ce:73:86:6a:f4:3a:46:fe:cb:0d:65:8b:34:dc:8b:
                    12:f5:ed:49:47:85:63:84:79:37:0b:9a:3a:d8:b0:
                    97:29:32:db:b6:4e:b4:87:4e:66:09:60:a7:32:af:
                    c1:1f:d4:7f:58:bf:69:f3:44:0e:b3:90:74:0b:6e:
                    87:38:aa:44:56:00:a3:ff:a3:d4:ca:a7:e5:d8:99:
                    09:a1:65:f4:52:14:c1:10:87:36:b3:72:4e:ae:b2:
                    68:b2:a4:a6:08:86:3a:c9:1c:5e:79:c6:81:2e:f1:
                    3a:03:d0:16:86:ca:0e:50:77:e9:9b:16:74:eb:20:
                    97:cb:68:62:b7:ec:22:66:08:df:89:d1:1b:47:b0:
                    a6:24:2c:4b:62:2d:6d:34:98:be:16:c0:4b:d8:f3:
                    7b:3c:7e:50:d1:95:30:90:87:72:fc:e8:88:a7:18:
                    a3:fb:9e:3b:e3:83:a0:40:c7:4d:a5:11:98:09:ce:
                    0e:cf:ac:27:31:69:8d:2e:97:ed:2b:92:02:a7:b1:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5A:C4:65:AF:22:27:E7:D4:CA:46:9F:D3:5E:A3:2B:AB:4A:43:16
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42f807a6-fa59-4c00-9092-4d049f219737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3450::/46

    Signature Algorithm: sha256WithRSAEncryption
         5c:9e:1d:95:dc:60:82:ad:d6:c4:0b:dc:f8:dc:61:85:cb:a2:
         a7:4e:b4:5f:e1:fc:9a:41:d1:d6:93:11:53:f9:90:0d:e1:28:
         49:c9:18:36:f7:9b:6e:e3:48:b5:18:40:b2:f5:ab:b9:d6:32:
         68:2f:93:3a:16:ae:26:b3:bd:3f:37:5e:4a:2c:26:4b:ed:51:
         a6:bb:36:32:4a:e3:ef:43:b5:ce:ae:a1:8b:a1:83:3a:82:be:
         ba:e5:c8:70:c2:8f:fc:5a:4c:4a:1a:0a:a9:97:1f:d0:ce:53:
         91:94:a1:6b:d7:e2:fa:1d:cf:8c:05:18:b4:e0:f4:b3:cd:cb:
         b6:8f:15:c2:d3:c2:fd:ca:cb:c6:4c:77:05:0d:96:74:75:5f:
         20:5e:0f:b7:a4:46:d1:62:a6:df:fa:15:4b:42:c6:93:dc:a2:
         08:25:a8:c6:95:00:42:74:1a:5a:b2:a6:22:5f:61:5e:b5:61:
         45:37:bd:8a:39:82:45:58:7f:52:c7:42:5e:ba:d1:db:da:a3:
         ef:18:2e:79:ef:8e:ea:74:68:e3:2c:ac:c0:9c:ed:0a:f9:e8:
         56:3e:08:53:fc:81:c4:0e:8e:af:37:07:74:b6:48:85:e0:b4:
         ba:0a:cd:93:4f:c8:86:78:6a:18:cb:52:18:78:1a:de:87:33:
         ff:fc:a5:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:03:27 2026 by rpki-client