Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/432912ef-195d-434d-b23d-363e0c01cd26.roa
File:                     432912ef-195d-434d-b23d-363e0c01cd26.roa (raw, json)
Hash identifier:          UWJUCNiHQCjwvptqH8dN2dj3FFtEMxCcFckRaLVkHXE=
Subject key identifier:   F1:2C:5F:7A:3F:7A:40:7E:E1:FC:C8:34:2D:9A:78:B8:DE:97:BE:D4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77FDF332EFF54A4A91C6608A837D5B69790DA081
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/432912ef-195d-434d-b23d-363e0c01cd26.roa
Signing time:             Mon 04 May 2026 06:20:52 +0000
ROA not before:           Mon 04 May 2026 06:20:52 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3680::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:f3:32:ef:f5:4a:4a:91:c6:60:8a:83:7d:5b:69:79:0d:a0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:20:52 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=4b2f0ea313445d72991d451f23df946b8bce5d0d220b66602172cd1bf6eb6b46, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:e0:97:ad:1f:93:57:ce:14:b7:fb:2f:79:
                    4a:44:c0:e8:71:0b:e8:74:b1:81:93:ca:89:f1:f2:
                    09:9e:79:ec:3e:12:b4:20:bd:ef:9d:c5:0d:03:db:
                    fc:2b:8e:0b:54:13:0f:d3:f0:b5:b7:fe:b0:79:18:
                    57:7a:c3:f7:8f:79:ac:76:24:fe:5b:ce:9a:4f:4c:
                    03:d4:98:80:53:e5:f7:db:24:6c:03:0f:72:c8:4f:
                    8a:7b:bf:6c:3d:dc:8e:5e:0b:44:bf:d2:4b:19:0e:
                    84:86:40:49:5c:1a:c9:48:8c:b2:fd:64:38:86:fb:
                    84:c5:b4:e0:e2:47:be:af:23:b2:f2:70:f9:04:0e:
                    6b:23:f4:ff:44:de:6a:4e:b4:21:fb:bd:8f:e6:eb:
                    1e:38:9e:14:fa:19:ac:61:d5:c6:ea:2e:b7:92:85:
                    d3:7b:16:05:90:2e:f5:7f:c5:6a:ce:b4:95:b0:72:
                    c3:b8:4b:71:3d:20:fa:20:74:49:bc:fa:40:14:f7:
                    c8:54:68:b9:e2:41:13:60:78:bb:c0:21:94:c9:e0:
                    15:2b:e7:5b:99:c2:96:f5:00:d5:5b:f7:84:3e:09:
                    8f:37:f7:bc:c4:95:6d:14:79:59:e5:ef:58:bf:97:
                    00:86:4d:c9:43:db:c5:05:b1:19:04:09:0f:27:ca:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:5F:7A:3F:7A:40:7E:E1:FC:C8:34:2D:9A:78:B8:DE:97:BE:D4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/432912ef-195d-434d-b23d-363e0c01cd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3680::/43

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:a6:4a:c3:cf:33:50:a9:eb:b5:ee:33:e5:41:09:9f:bd:
         86:87:33:f4:b5:ee:1e:14:91:96:e2:d6:c4:0e:a5:7c:bf:4a:
         9b:72:ff:a8:74:b5:50:1d:68:cc:98:76:83:bc:92:e1:7f:83:
         4b:55:35:ca:1e:fe:32:e6:a0:78:0c:c6:9f:c8:1b:42:59:19:
         58:28:0b:4a:d9:da:f5:17:22:f2:c8:2c:15:4b:43:79:02:75:
         54:df:9a:42:36:51:16:58:5e:d7:5c:9a:3a:96:8c:f1:07:91:
         33:ce:c5:e6:48:b4:8e:71:75:5b:35:13:70:a2:cd:21:ab:8a:
         13:43:a3:c6:a7:6b:d3:ae:7f:fe:31:e7:dc:d1:b4:51:e7:6b:
         c4:3f:26:d6:52:c0:5b:f5:3b:37:9d:53:10:f5:1e:5e:15:38:
         9c:04:64:4f:3c:29:fc:37:68:af:66:11:71:f8:01:36:7a:0b:
         53:f7:1d:10:79:73:ca:3c:a8:8d:88:74:9b:75:3a:a7:ec:55:
         69:6d:a5:14:44:9d:94:53:06:d3:b6:4c:56:af:20:ac:d2:0f:
         f8:ec:1e:02:72:e5:7e:e9:1a:b1:77:e2:6d:68:a1:b5:03:10:
         9e:57:3f:02:74:11:84:4c:68:2c:e0:c1:f1:6c:ed:b5:da:f9:
         6e:57:77:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:46:17 2026 by rpki-client