Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475f1c79-86a1-4939-a6f7-78defa1214a3.roa
File:                     475f1c79-86a1-4939-a6f7-78defa1214a3.roa (raw, json)
Hash identifier:          Hw3ebEOC8kVuIwQn+GdLjgr+J0YT8OJslXFfJ1i7sbs=
Subject key identifier:   A3:E6:8F:42:9C:82:68:C4:0E:5E:03:66:A8:5C:E6:CA:7B:28:DB:A6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5865412371085C3503332C311ED5038CD0BC6C35
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475f1c79-86a1-4939-a6f7-78defa1214a3.roa
Signing time:             Mon 04 May 2026 14:00:05 +0000
ROA not before:           Mon 04 May 2026 14:00:05 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:41:23:71:08:5c:35:03:33:2c:31:1e:d5:03:8c:d0:bc:6c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 14:00:05 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=77b468da3954eefb66a05f32317db2e0df661b60a18457a56bfa0af8ae55eb7b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:f9:55:a7:7f:b6:13:e5:88:8b:fb:58:3f:
                    eb:07:57:ce:ee:8a:46:b9:41:7e:a9:a7:93:56:ff:
                    77:63:c2:12:9a:b9:d0:c2:0d:57:ea:3a:86:a1:cd:
                    4f:5a:a6:3e:2b:85:d0:6d:94:69:af:a8:a3:a0:6f:
                    9c:c0:59:31:1e:9d:f6:df:0a:ef:06:d4:3f:0b:0d:
                    54:e1:e7:f0:3f:d2:25:bd:9f:48:35:48:7f:86:8d:
                    43:dc:e1:42:66:4b:1c:21:1a:b4:09:91:97:02:dd:
                    96:49:22:c4:42:4b:8b:a9:ce:10:2b:1a:68:91:53:
                    80:a4:20:14:80:4d:0d:39:d0:d8:d6:a3:c1:06:d9:
                    37:b0:57:fc:53:a4:36:1b:53:dc:06:b9:45:b2:54:
                    b9:99:60:77:66:8e:0f:aa:04:3d:af:c2:74:92:bc:
                    4d:e4:b7:d2:30:64:54:ec:1c:81:bf:c0:24:bc:4a:
                    b0:a5:ec:54:0c:d5:3e:5f:50:26:78:75:53:62:ac:
                    39:df:11:90:e8:01:06:ec:5c:b7:9a:48:18:d0:4f:
                    e5:d9:07:e4:38:a8:cf:00:ff:c0:90:63:b4:fb:42:
                    c1:38:68:a4:f1:42:4f:0a:f3:89:d4:ce:30:b6:91:
                    39:6e:e7:3c:91:7f:0c:bf:f6:e0:8f:2a:9c:0d:a7:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:8F:42:9C:82:68:C4:0E:5E:03:66:A8:5C:E6:CA:7B:28:DB:A6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475f1c79-86a1-4939-a6f7-78defa1214a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e80::/41

    Signature Algorithm: sha256WithRSAEncryption
         be:79:64:4f:46:51:dc:46:cb:dc:51:9a:2c:b2:52:69:49:71:
         29:66:ca:60:22:20:a7:59:9c:05:7b:fa:53:a5:22:4b:aa:1d:
         29:82:33:3b:25:cb:a4:a9:90:d2:1a:af:55:8d:bc:e2:68:5b:
         42:e8:1a:02:89:da:2c:d8:2d:25:ab:29:7e:29:41:2e:12:c2:
         31:67:20:9b:a2:e4:44:71:74:1b:b9:7c:59:84:a3:bb:ff:f0:
         58:0a:74:a5:de:ac:6f:27:b4:3b:5d:2c:cf:65:40:6b:22:02:
         3d:1a:df:24:42:dd:fc:be:fd:72:d7:03:0e:e9:ae:77:21:a6:
         38:83:64:29:00:30:59:ee:ff:fa:da:c2:ca:6e:85:9c:57:c7:
         4a:be:f9:62:fc:ac:18:66:bb:2e:94:5a:f6:9f:e7:c4:a4:7b:
         6b:03:08:6b:a8:0c:82:11:a9:2d:ce:e6:d0:7c:60:36:cd:61:
         f2:4f:67:f0:8d:a1:82:c9:14:90:a6:94:1e:66:c8:a3:8d:2a:
         19:93:71:1c:c4:7d:82:e4:1a:0c:b7:91:c0:87:8f:60:b0:59:
         92:2e:56:d5:67:66:e5:78:c4:18:89:84:0b:37:48:dc:d7:45:
         ea:72:1a:78:43:84:ce:53:c3:75:6e:d2:8f:2f:15:be:d6:99:
         6d:0a:1b:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:51 2026 by rpki-client