Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7996d470-d567-439a-86a1-12b6f4172d31.roa
File:                     7996d470-d567-439a-86a1-12b6f4172d31.roa (raw, json)
Hash identifier:          eupM1xCIg+6+NSwtzRU2wVayLIgkHMfoqMrxn/JXCJs=
Subject key identifier:   FD:EF:0F:90:F7:B5:5C:C5:48:60:15:01:07:32:D5:99:E9:41:5E:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A45DDC6434BC00CB3208C05B7C454AE4EA89711
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7996d470-d567-439a-86a1-12b6f4172d31.roa
Signing time:             Mon 04 May 2026 03:51:43 +0000
ROA not before:           Mon 04 May 2026 03:51:43 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3370::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:45:dd:c6:43:4b:c0:0c:b3:20:8c:05:b7:c4:54:ae:4e:a8:97:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:51:43 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a7c06c69c45c402ad0efab347684b51db576360bf95b3b56a51b1f18cb507922, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:21:9b:ae:fa:6c:ac:97:b1:6d:a6:ea:6c:
                    2a:4a:e0:26:fa:8d:68:4a:82:e3:58:42:3c:50:46:
                    76:af:68:e9:c0:35:de:a4:1e:7e:c8:d6:64:fe:3a:
                    0d:23:7b:47:bc:f0:16:2e:7f:ef:17:74:d5:e9:a1:
                    d3:f6:fd:1a:1c:38:9d:53:c9:01:6f:96:39:c9:75:
                    6c:ee:78:64:c1:a0:ff:b5:60:3f:84:2f:a6:3c:b6:
                    4a:72:b6:ab:0f:d8:7c:ea:45:f9:cf:60:d3:4e:38:
                    e1:d9:af:e9:96:bd:66:56:cf:40:19:21:00:e3:8e:
                    e3:b2:dd:2c:87:c8:cd:92:ec:3f:40:cd:59:d4:45:
                    da:2e:7c:20:4a:8c:95:fe:9a:26:56:43:34:4d:4b:
                    b0:56:65:bb:e2:4d:cb:a0:f9:08:e9:97:7b:2d:7e:
                    f3:36:a3:68:fb:64:2c:b9:9c:d7:b9:74:83:6a:b1:
                    56:60:b5:aa:95:92:65:3e:f2:67:54:f4:d7:83:a0:
                    21:da:39:e4:08:cd:b4:18:3d:95:c6:52:4c:e5:50:
                    2a:6d:f4:c8:b8:e3:8e:36:57:cb:48:c7:4b:ac:2b:
                    30:db:93:4f:5f:54:17:24:6c:4d:ed:3d:7a:8a:6b:
                    0e:32:db:1c:57:02:9e:c0:c6:b4:89:55:10:53:14:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:0F:90:F7:B5:5C:C5:48:60:15:01:07:32:D5:99:E9:41:5E:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7996d470-d567-439a-86a1-12b6f4172d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3370::/45

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:22:4a:ca:89:85:e6:78:82:74:a5:6e:69:a8:96:8c:a4:
         fb:a0:0c:89:25:a1:9b:bf:c5:a6:18:fd:a4:e7:a5:72:66:b5:
         d8:16:a7:47:09:ce:ee:2e:15:1b:a5:32:f8:7b:c1:f1:5e:6b:
         cc:5b:f4:1a:78:ec:1e:bc:f8:8e:a9:b7:ea:3a:64:37:c9:7c:
         ab:e7:f0:5e:09:bb:3f:b2:2d:7b:ca:d1:c6:a0:de:66:76:07:
         1b:c7:45:be:84:79:10:7c:92:7c:5b:20:6e:d3:13:3b:bf:e4:
         29:f0:76:a0:26:44:6f:59:79:47:44:cd:b1:a5:df:06:eb:7f:
         5c:91:bb:9a:d5:fd:e6:28:a3:39:f9:3e:83:a0:d3:5c:48:0a:
         8b:77:75:14:58:90:af:22:d5:55:34:83:d4:b2:d8:51:a9:43:
         d3:f2:07:5d:37:be:18:02:72:28:93:a3:a9:ee:be:02:ac:60:
         d2:ee:95:4a:29:bd:88:57:8d:88:c0:09:bc:71:8e:d7:50:5e:
         0d:f4:9e:95:62:c9:43:d6:3f:e8:ee:f3:ac:10:1c:e7:1e:e7:
         5c:28:05:2c:b2:9d:91:0e:6a:08:9b:3f:0c:ab:8c:80:aa:12:
         10:bd:71:40:22:2c:9b:79:22:1e:2a:dc:14:a3:fe:a4:b7:d4:
         39:d6:72:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:20:48 2026 by rpki-client