Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/583ae14f-f6d8-4ae9-89d2-652d32b4ef6d.roa
File:                     583ae14f-f6d8-4ae9-89d2-652d32b4ef6d.roa (raw, json)
Hash identifier:          GplCFCAWu0GfJCx+kDFbyuPUChKWDmirnL1otYRi6OI=
Subject key identifier:   CA:6D:EA:55:68:9B:EA:49:B3:7C:2D:32:C8:A9:58:7C:8D:60:E2:DE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D3F071224F59A794BE6F361E830B3AADB087579
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/583ae14f-f6d8-4ae9-89d2-652d32b4ef6d.roa
Signing time:             Mon 04 May 2026 12:40:55 +0000
ROA not before:           Mon 04 May 2026 12:40:55 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:07:12:24:f5:9a:79:4b:e6:f3:61:e8:30:b3:aa:db:08:75:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 12:40:55 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9bd447c074d434954046a481ff012690ab51ed565be750792236245bc6fc744d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:fb:9f:2f:98:cc:f4:9a:3f:12:e6:1a:fa:
                    74:cd:0a:b5:1a:76:a8:41:7a:17:6a:e0:6a:6f:c3:
                    db:f1:ff:05:cf:ce:a7:d3:08:02:f1:08:93:48:17:
                    51:37:37:3e:af:a8:9c:5b:42:0a:3d:1c:d5:c2:3f:
                    80:00:5c:88:d6:94:1f:e1:4b:fb:59:fd:fc:4c:3a:
                    40:bb:30:5a:84:5e:e6:43:9f:7b:09:fd:89:42:0e:
                    b9:ce:bd:28:1d:e9:50:73:bc:bd:ee:b7:fc:98:93:
                    b2:bc:74:a8:bf:a6:ba:4d:54:60:9c:a1:2f:40:e9:
                    8c:22:4b:13:e8:61:a8:a5:d1:af:96:40:5c:39:d8:
                    48:75:ce:64:89:40:1f:af:9d:4d:d7:4d:25:04:89:
                    bd:3c:0f:27:b8:5c:e0:c0:30:86:2e:53:2e:7d:fe:
                    a6:3e:6e:87:04:1b:3a:29:cc:4b:09:e0:59:ff:e8:
                    d2:2a:2d:7c:2a:5b:c1:3e:df:d5:14:70:9d:4b:ac:
                    9c:81:67:00:cb:a0:86:a5:5f:1b:3f:68:a5:43:2d:
                    15:be:e9:9e:83:e4:00:b4:df:2b:a3:94:69:18:25:
                    03:ed:e5:2e:75:0c:7c:c7:85:68:74:7d:8b:d7:e1:
                    e3:3c:27:fc:d4:27:44:49:ba:32:d3:08:d0:dc:a6:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:EA:55:68:9B:EA:49:B3:7C:2D:32:C8:A9:58:7C:8D:60:E2:DE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/583ae14f-f6d8-4ae9-89d2-652d32b4ef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:fc:13:ad:dd:bd:2f:e5:81:10:5a:65:bb:e3:0b:8a:a1:
         71:4f:d2:e0:bd:a2:e5:45:ee:be:1e:f1:52:ce:37:70:9b:ed:
         67:a6:0a:bf:bc:34:3c:00:e8:f7:e9:69:f3:db:d0:1f:3d:56:
         60:0c:71:22:76:f6:2f:6f:37:14:ac:ac:e0:9c:8c:2d:36:a2:
         69:1a:71:f6:97:ed:58:da:8d:30:8e:2c:49:cd:e9:fb:00:e7:
         f6:1e:7c:0f:25:4d:fb:61:c4:41:8b:9e:e3:00:ca:25:1c:7f:
         4f:d7:ff:66:ef:f2:6a:e0:90:23:00:0c:e9:95:28:33:1a:78:
         64:7c:f2:be:24:f8:04:3c:ac:a2:67:98:86:f7:1e:8f:45:60:
         8b:19:fb:f8:0d:c3:8a:c7:9f:c3:fc:a2:70:d6:2d:38:03:47:
         1d:32:08:8e:6e:b0:3a:cf:3a:be:40:66:ce:12:73:0b:a3:d2:
         58:79:42:f0:46:b1:05:86:2f:cf:81:75:d2:77:71:8a:1d:0c:
         e8:ac:c0:87:84:4c:63:8c:c8:14:16:b9:dc:31:29:10:9c:7b:
         3e:cb:ee:88:d2:98:f6:a3:c8:0c:b9:eb:b5:c9:3e:f4:cc:e5:
         f2:f6:54:9c:ce:c7:29:b3:21:a9:70:cd:2c:12:5c:9f:40:21:
         73:de:47:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:10 2026 by rpki-client