Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f837332-0994-47a8-b2b0-502d51351549.roa
File:                     6f837332-0994-47a8-b2b0-502d51351549.roa (raw, json)
Hash identifier:          qWE1ZAsv1VedhV5BVAhyJy3HgAQJq92SzqCn7XA/YqA=
Subject key identifier:   83:51:BA:D2:93:3E:76:A3:6E:60:5E:F3:85:5A:AB:38:76:CF:3E:49
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77D761A07B7377953DEE84A287767026F8A1A0FC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f837332-0994-47a8-b2b0-502d51351549.roa
Signing time:             Mon 04 May 2026 05:11:40 +0000
ROA not before:           Mon 04 May 2026 05:11:40 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3380::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d7:61:a0:7b:73:77:95:3d:ee:84:a2:87:76:70:26:f8:a1:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 05:11:40 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=13a4ff8e1fb71aadfd76b9e6bfe630695d7eb4e46bf2d870dc8d3c4a84fe5474, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:b4:db:e1:f1:ba:d9:3e:f1:57:72:9b:83:
                    f9:00:36:87:26:11:d0:32:99:78:91:a4:be:24:6e:
                    7c:a0:30:e7:61:12:dc:07:d4:58:bf:b5:31:f8:96:
                    71:7f:fa:96:5b:a4:97:77:7e:85:16:ae:a4:1c:d2:
                    5b:7d:4c:5d:ce:20:c3:50:53:9a:18:8d:04:36:af:
                    83:15:38:fd:81:7c:6a:d2:ee:ab:9a:d8:7c:13:ea:
                    5a:15:6c:15:b4:ba:e3:44:34:01:bb:0d:6e:a1:9c:
                    cf:9e:cf:65:23:76:de:9e:25:47:2c:bc:2a:f4:9c:
                    e1:c3:9a:17:4c:08:c4:e0:71:4f:a7:5d:97:bb:b3:
                    a1:8c:0b:a6:de:03:12:c2:6f:b7:24:7b:f9:d9:2f:
                    be:f1:6c:4f:d7:cc:5e:b5:53:9b:87:74:41:d5:cd:
                    71:36:1f:4e:f6:06:7e:b7:cc:9b:10:ee:62:63:06:
                    54:91:3f:13:30:30:4e:68:d1:36:77:a3:fa:44:79:
                    e7:9d:2b:20:df:fe:93:d6:cb:5a:11:7f:8e:29:a5:
                    7a:62:2c:8c:10:e1:05:f1:10:8d:06:6a:9f:ba:74:
                    0a:74:35:ea:65:e4:b9:a6:88:8f:6d:84:81:f4:80:
                    7f:b5:f9:94:2e:9a:75:1d:29:19:b7:ab:09:50:a0:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:51:BA:D2:93:3E:76:A3:6E:60:5E:F3:85:5A:AB:38:76:CF:3E:49
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f837332-0994-47a8-b2b0-502d51351549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3380::/42

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:ef:fe:66:ce:21:e6:68:cb:36:19:73:12:91:82:6d:f8:
         2a:f8:69:a7:0c:20:a0:c7:2c:83:c9:74:79:db:dc:57:56:e7:
         94:6f:25:c6:13:70:36:16:a3:e6:97:9e:ad:f8:8e:d3:c9:bb:
         ce:58:48:04:64:50:a0:4c:da:e6:ca:69:c4:d7:7b:bd:67:e0:
         c0:a8:5b:ca:02:00:0d:fb:55:be:16:4d:3b:6d:50:1d:d5:dc:
         17:da:ef:b1:0b:5d:3e:71:86:32:8d:ac:a1:8d:2a:da:2b:3b:
         f3:45:c6:e5:87:d0:04:18:12:b9:f0:54:71:7b:3e:37:ec:d0:
         a5:dd:a8:d8:8f:d5:6b:0f:29:91:4f:a9:9d:45:38:ea:28:7c:
         74:30:fb:4f:7a:ce:b0:56:a8:db:ba:1b:58:a8:16:13:32:07:
         ca:97:33:86:8f:94:7c:70:cb:25:e7:14:0d:b2:5f:95:7a:3b:
         6b:14:9c:4e:1d:0e:61:68:45:df:5c:6b:c6:08:f9:b9:f5:b7:
         0f:02:fb:1d:6a:d1:46:83:08:38:bc:c3:04:a8:ac:fb:ef:74:
         31:0f:13:0c:8d:7f:b1:84:03:59:f6:48:87:36:ad:a9:b1:11:
         88:cc:e2:56:a7:00:83:42:b4:1a:20:ec:bf:6e:37:b6:81:42:
         fd:a2:64:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:04:15 2026 by rpki-client