Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f158fae-5084-4ae1-bff0-bf2e21f9f4b9.roa
File:                     5f158fae-5084-4ae1-bff0-bf2e21f9f4b9.roa (raw, json)
Hash identifier:          7NxMKJnp8qFAcMQCItB6DcVk657vZmcP9KJ1QGBIGBs=
Subject key identifier:   CA:B8:09:3A:58:A5:0F:A6:76:B3:CC:99:A6:F8:EB:64:0A:7C:B5:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6E949201595F515DDE721E7B0BF51931BB8920C2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f158fae-5084-4ae1-bff0-bf2e21f9f4b9.roa
Signing time:             Mon 04 May 2026 13:00:51 +0000
ROA not before:           Mon 04 May 2026 13:00:51 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:92:01:59:5f:51:5d:de:72:1e:7b:0b:f5:19:31:bb:89:20:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:00:51 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=52ffde66b50820eef5b95a5ecd77915ad3724130a19a687955d86d482fb6a6ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:56:65:46:77:35:45:ef:0d:ca:5b:59:2a:
                    b9:fa:ea:22:ed:48:64:ad:d7:c3:ba:53:07:7d:7e:
                    26:9e:e0:8a:a7:b0:41:31:3f:d8:91:14:c4:ba:8e:
                    ae:7c:15:1a:80:7e:57:ed:13:c0:34:0f:90:79:2c:
                    5f:01:e2:38:be:94:57:d8:45:c2:18:6b:5c:63:13:
                    d6:ac:5c:d6:a2:28:0e:b5:52:d4:80:42:8d:af:e5:
                    1d:c1:f5:44:df:55:8b:b2:5f:33:6f:63:a0:60:e9:
                    39:10:a4:44:8b:4d:91:1e:31:9a:10:7f:9a:37:64:
                    4e:a1:43:3f:fa:f8:63:a9:d3:f0:f5:63:13:02:ee:
                    11:62:0b:0f:c7:31:2d:e4:c1:3b:26:e5:f6:6e:2e:
                    18:91:cb:5c:1f:0c:13:bb:c7:90:30:3b:73:15:3a:
                    05:e3:d9:6b:39:5a:66:3e:53:fa:f5:a8:aa:9d:14:
                    de:2c:44:f7:08:25:58:c0:51:1f:61:4c:9f:08:c3:
                    f4:b3:a9:3b:86:5e:01:11:87:9e:45:72:f9:15:81:
                    8c:50:d7:1f:dc:f5:6c:99:8a:c8:56:5c:57:b4:0b:
                    31:62:77:a3:5a:da:6d:81:98:1c:17:84:3a:98:82:
                    ba:e1:cf:75:3a:86:9f:eb:f4:66:5e:bf:42:0a:dc:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B8:09:3A:58:A5:0F:A6:76:B3:CC:99:A6:F8:EB:64:0A:7C:B5:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f158fae-5084-4ae1-bff0-bf2e21f9f4b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:9f:3c:25:7b:09:9f:09:1e:6b:54:15:70:90:33:3b:a5:
         cd:48:15:36:4a:55:22:3f:76:a4:47:fe:d7:db:83:be:dc:da:
         a4:d6:67:bf:88:aa:b7:2a:48:37:ac:17:f2:fc:02:23:e6:35:
         cd:97:fe:cd:6a:68:04:0b:fd:f6:0c:83:85:1a:01:48:84:84:
         ed:7f:b6:35:24:1b:23:dd:06:b6:19:89:5a:b7:6e:f3:63:3a:
         cd:e3:7c:1e:e4:a2:22:e1:88:2b:e8:a6:ad:54:8f:9f:eb:42:
         e9:ee:e7:8f:b5:04:88:9c:21:c1:e6:fa:50:b8:12:3a:29:0a:
         a2:5c:ab:5c:01:c6:d6:a7:54:4f:11:17:dc:52:04:a9:56:08:
         e1:ba:c1:94:db:df:4d:ed:ba:4d:55:db:94:9e:82:b2:08:db:
         93:ab:ac:e0:fb:09:65:4c:9b:c4:3b:ec:53:66:0d:d0:9c:e3:
         69:ff:61:f8:28:13:72:a5:fc:ac:bd:5b:3d:f3:29:6e:7d:02:
         d4:31:f2:e8:65:72:5b:48:7d:4b:a3:dd:89:13:af:28:b8:bd:
         6d:8c:af:22:1a:79:c8:e8:c0:ba:fa:e1:8d:85:15:c8:8c:b3:
         57:ed:4e:96:5c:80:48:63:3c:57:d1:07:fc:8c:4d:d5:1e:00:
         40:d7:6a:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:41:17 2026 by rpki-client