Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76258d9b-d19c-4701-a077-24a9869d0660.roa
File:                     76258d9b-d19c-4701-a077-24a9869d0660.roa (raw, json)
Hash identifier:          g4cOz+soBFCV+POIASilmg/EKz0f4mG2YvJyT1p68m8=
Subject key identifier:   64:CC:BF:5E:52:43:11:C5:75:CC:5D:87:1F:D7:7F:6B:0E:8F:CB:EC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0A54D9EB00DA71470B3C848C1F69D9123B48BD9B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76258d9b-d19c-4701-a077-24a9869d0660.roa
Signing time:             Mon 04 May 2026 07:10:10 +0000
ROA not before:           Mon 04 May 2026 07:10:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cc4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:d9:eb:00:da:71:47:0b:3c:84:8c:1f:69:d9:12:3b:48:bd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:10:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=96573eb108f97df72a164f320172eab60ecff764246eaa1b8c6b277087d4f5bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:af:88:6c:db:d2:a9:48:be:af:f5:bb:bf:
                    ea:8a:58:0e:70:cd:27:bb:07:42:5b:09:62:ce:c2:
                    04:ad:b3:43:d7:8f:2f:85:66:6e:5b:15:c7:6a:21:
                    62:5a:ad:49:fb:9c:3c:ea:83:07:2b:cd:63:b3:09:
                    c6:44:4c:65:8a:da:14:ec:0b:a7:d7:2a:c3:6d:2c:
                    68:d7:7a:1b:84:e9:2d:41:43:09:b0:76:da:ee:8b:
                    24:ac:34:c4:7f:52:1a:6b:dd:a9:7e:a4:98:90:d9:
                    c3:ea:fd:8f:9d:ca:33:11:27:a9:42:29:cb:57:4d:
                    b7:fb:29:61:b2:11:41:0b:88:1c:27:06:85:85:41:
                    ac:8c:45:ad:1f:36:28:8b:a5:6e:27:9d:62:1b:0f:
                    ba:bb:b9:37:01:9b:3f:ed:31:7e:5d:f4:b7:22:3c:
                    78:ad:98:44:25:c1:92:d7:11:8a:25:02:f6:74:77:
                    d3:80:d9:41:eb:d4:8d:2f:4a:26:a5:f2:c7:57:36:
                    bb:bd:77:da:0f:8f:b9:21:fd:74:ba:fd:aa:23:a4:
                    4e:62:3f:f5:f6:68:7d:19:16:83:35:91:28:6e:1b:
                    9a:ff:ae:02:bd:35:2f:27:d1:f3:0c:24:80:64:46:
                    d8:f9:6d:02:29:b3:61:05:18:90:f7:07:0b:30:43:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:BF:5E:52:43:11:C5:75:CC:5D:87:1F:D7:7F:6B:0E:8F:CB:EC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76258d9b-d19c-4701-a077-24a9869d0660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cc4::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:6f:66:05:b9:5e:ea:ed:12:c6:5b:dd:38:65:2c:c9:d8:
         e6:58:0e:cd:61:9a:c4:f0:00:ee:ce:38:74:e8:0d:47:2d:9d:
         c5:50:29:7f:cf:6a:68:1f:a3:a5:7e:8e:0d:7e:8f:07:f0:a2:
         fb:57:eb:8c:f7:03:e5:c1:4a:10:64:40:eb:1e:b2:64:8a:58:
         24:16:33:0d:f8:97:49:18:21:2e:fc:fb:f5:5d:e2:a2:03:40:
         67:59:c6:75:90:a5:57:52:02:da:11:7a:81:c7:f0:68:23:87:
         ac:9c:58:4b:0f:0c:c3:70:6c:dc:60:32:48:68:14:64:15:dc:
         c0:7b:af:f5:21:7c:4a:fa:de:3d:fa:2a:05:37:55:30:28:e3:
         01:d0:51:8b:07:5d:61:6d:86:57:aa:05:4c:41:84:28:7f:63:
         85:c6:94:60:eb:1c:87:70:d6:4a:3e:e5:31:05:8d:25:8a:38:
         d7:47:44:e4:11:20:e4:bd:a9:fb:be:b0:a3:e1:66:a1:be:0c:
         e3:d2:8f:3a:60:5b:11:3b:0d:9c:c0:2f:ce:76:a3:a7:ab:22:
         a9:95:16:23:ea:9d:0f:37:51:a7:28:b3:10:6d:4e:b2:5e:86:
         af:c1:e4:2b:cb:9c:9e:15:67:ab:ba:30:d8:6d:13:49:43:9a:
         c1:97:1f:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:19:03 2026 by rpki-client