Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/585639ec-f665-49da-bcc2-06b74e3ef706.roa
File:                     585639ec-f665-49da-bcc2-06b74e3ef706.roa (raw, json)
Hash identifier:          raM9SEDURfP3DfgpWH0znOSFTlxjSB/Uo2x3oWzEoEo=
Subject key identifier:   2F:E3:1B:7C:B2:AA:91:62:41:97:7D:9E:D2:DC:85:31:B4:41:D2:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1326EB7F8AC62083EDC6FB11E3850FFA8CDAAE56
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/585639ec-f665-49da-bcc2-06b74e3ef706.roa
Signing time:             Mon 04 May 2026 03:50:42 +0000
ROA not before:           Mon 04 May 2026 03:50:42 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:26:eb:7f:8a:c6:20:83:ed:c6:fb:11:e3:85:0f:fa:8c:da:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:50:42 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=01132516fb6e8331e6ed36d49e7badcf9aae521a61ff21b7635715a85d0724da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:82:06:d8:f5:65:b1:c7:d3:08:20:da:3c:
                    88:5d:93:a8:04:69:39:54:73:1b:ba:33:1c:cd:81:
                    16:b9:8e:7b:b8:39:4f:1a:1d:40:fe:96:cd:1e:b7:
                    e6:84:3e:12:19:eb:e2:81:4c:6f:6c:22:21:de:c8:
                    da:9b:b6:2a:91:86:cd:a9:d6:3a:15:85:42:15:4a:
                    82:c3:fa:01:27:03:c0:b0:1b:20:1c:08:1e:58:d8:
                    2c:70:e6:d1:3e:8a:02:e7:d0:f0:42:3e:02:c9:ad:
                    31:63:8a:c6:7f:07:ec:92:ce:f4:28:b7:9f:fc:e6:
                    a3:92:0b:1a:e8:52:c5:5e:ad:23:3f:f1:30:28:da:
                    51:6d:1f:6e:71:45:d7:24:f7:d6:7d:0d:10:7b:3a:
                    c6:4e:83:24:c3:d3:64:04:0f:13:6d:fa:30:67:9a:
                    aa:4c:12:46:7c:42:61:71:e6:77:86:e4:11:ba:65:
                    c0:db:0e:97:66:bd:6c:a4:51:fb:5b:57:cd:57:bc:
                    c6:2e:b1:c7:b5:52:c2:df:7b:88:10:9c:22:2a:38:
                    6c:4b:3c:cb:9c:16:a7:ba:98:25:0d:f2:9e:dc:aa:
                    ba:f9:a8:4a:ce:5a:9e:19:2e:e2:e7:c7:7e:ca:eb:
                    16:69:aa:0c:3e:9d:c5:b2:14:4d:00:6f:1e:84:50:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E3:1B:7C:B2:AA:91:62:41:97:7D:9E:D2:DC:85:31:B4:41:D2:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/585639ec-f665-49da-bcc2-06b74e3ef706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:c5:36:b4:70:80:01:b0:77:38:15:e1:e0:5c:7c:99:84:
         e4:56:d5:2b:08:35:6f:d8:3c:3c:75:cc:c2:1e:1f:f3:01:a1:
         e6:7a:48:fe:a7:5c:17:92:65:db:77:3e:e9:e9:cd:33:a7:38:
         0a:92:fe:ce:8a:e2:94:4d:d1:d2:88:a7:5b:3b:b0:72:56:21:
         f9:81:d1:83:c1:7d:e2:3e:7e:21:e6:36:8c:f4:ea:60:8a:c3:
         b0:a5:a5:a0:32:61:89:0d:21:89:6b:6e:0a:76:e6:4f:53:41:
         aa:a9:f4:41:5a:79:cb:f1:f3:29:fc:8a:88:c7:49:11:cd:dd:
         2e:e7:9d:be:ea:b6:52:4c:09:85:a1:c4:72:36:91:10:cb:6f:
         21:03:cb:ba:75:b9:86:a7:e5:2a:a8:a4:64:0c:9f:3c:fb:ea:
         d7:bb:61:e7:c7:78:7f:bb:97:ff:50:ac:f9:a8:4e:a5:b7:c2:
         5e:f7:8c:07:be:e1:8e:19:53:aa:0a:38:28:06:b9:2b:48:08:
         bd:13:da:59:0c:f2:5c:9d:1d:3a:94:00:3b:e2:c0:7b:cc:14:
         75:bf:69:ef:07:43:5b:9c:29:af:35:4e:45:d6:f1:63:ee:1e:
         a8:ba:35:42:db:2f:50:cd:aa:5a:b7:c8:2e:55:59:cb:c1:ab:
         d9:c9:ac:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:12 2026 by rpki-client