Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f439f04-b7db-45a7-b95f-b60f08d14565.roa
File:                     5f439f04-b7db-45a7-b95f-b60f08d14565.roa (raw, json)
Hash identifier:          gFUOOsvbTw+ktgTX68dKnsVwzfLXb5cio+TVa3W7cuc=
Subject key identifier:   6B:65:4B:3F:4A:10:4B:85:32:00:04:6B:C5:08:68:96:6F:8A:2F:F5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17DE5BEB01C74A6D0000A5AA4404355857B0BA9D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f439f04-b7db-45a7-b95f-b60f08d14565.roa
Signing time:             Mon 04 May 2026 08:41:37 +0000
ROA not before:           Mon 04 May 2026 08:41:37 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37a4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:de:5b:eb:01:c7:4a:6d:00:00:a5:aa:44:04:35:58:57:b0:ba:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:41:37 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=e828d57fca911b7bb7040327b79d1b32111b033a0b02d1c2a15ce1d25c296dc0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:bd:f8:b4:50:41:2a:c7:f2:4d:48:25:4c:
                    13:f6:d3:11:da:ad:02:d4:ca:44:12:db:44:6b:2d:
                    7e:45:0f:fa:97:97:73:26:5a:d6:27:ad:44:e9:1b:
                    9d:b7:97:64:91:36:a7:68:fb:59:46:a5:48:94:94:
                    7b:81:e4:cc:1c:bd:8c:eb:14:68:d9:c4:ec:2d:3e:
                    6c:25:51:ac:a5:d5:20:33:18:e2:9b:30:20:91:34:
                    d1:0e:3e:d7:20:6d:2f:e2:a1:ea:ac:44:c8:35:8f:
                    e5:bc:c4:9d:7a:d8:06:7a:7b:e9:85:7f:c2:68:8f:
                    e9:ca:13:12:33:53:34:c2:d6:36:2e:cd:4c:f2:46:
                    ea:e4:24:02:66:28:c6:e8:84:1a:b0:f8:24:b2:fc:
                    d0:6e:c2:36:2f:47:9a:2e:60:89:7e:97:66:d3:82:
                    d8:db:31:9e:5f:5e:40:77:83:e7:fd:0f:5b:ba:2e:
                    78:77:b9:15:92:b9:c1:cf:c8:b6:91:09:16:5d:5e:
                    2d:19:e6:01:73:fb:4a:63:e6:a5:64:c2:d2:10:62:
                    6e:7b:55:4d:68:83:25:49:9b:c8:c6:e3:37:95:19:
                    ee:a5:b4:a6:b0:ed:d1:58:00:2e:6d:b6:47:3d:cc:
                    47:e4:24:b9:f9:85:5a:0e:e8:b6:00:b6:0b:8b:4c:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:4B:3F:4A:10:4B:85:32:00:04:6B:C5:08:68:96:6F:8A:2F:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f439f04-b7db-45a7-b95f-b60f08d14565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37a4::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:13:13:8d:70:bc:02:6d:07:fe:63:ab:ab:f4:69:06:8d:d1:
         ef:5b:7b:6a:74:74:be:22:a9:65:e3:d2:63:a8:5e:2a:f1:fa:
         e5:66:a8:d0:62:6d:86:cb:12:5d:f9:3e:09:33:35:27:dc:0d:
         27:5a:be:bd:a7:a6:55:d6:b6:7b:f9:1b:f3:67:47:64:77:a4:
         e8:bc:ef:d2:7e:02:1d:92:4c:be:25:54:f2:54:ba:8b:77:1b:
         0a:10:3a:7b:29:da:91:b6:8d:b0:c7:a7:32:9c:72:85:e4:a9:
         c4:fe:a1:0d:2c:6c:9a:64:42:94:e8:df:22:c1:5c:31:2b:fe:
         03:a3:9a:cf:17:ae:d9:93:6a:48:fa:3a:2a:78:42:e6:bd:fb:
         69:4b:67:e1:c7:8a:13:35:56:f6:9a:a5:ab:19:0c:24:a3:9d:
         d7:88:e6:06:9b:6d:62:62:6d:04:9a:57:bb:81:72:64:cb:2d:
         ec:8a:05:f0:1e:9d:48:bc:04:d5:b5:86:41:b9:2e:2d:91:49:
         fc:cd:15:6d:a2:47:00:ae:5f:e1:be:04:67:e5:75:02:69:db:
         05:64:49:f0:03:c0:cb:19:24:60:c4:03:fc:6e:4d:88:ca:a0:
         6a:78:c1:84:e2:ec:01:bc:de:19:ab:b8:6d:33:ce:31:84:ee:
         b9:89:c6:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:04 2026 by rpki-client