Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
File:                     7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa (raw, json)
Hash identifier:          gE4XSw2AZs5rEvmxbn0jCaOlfr4jSWKAuxhoDS445KE=
Subject key identifier:   09:DE:82:41:41:8F:99:49:05:41:60:DB:F3:0E:73:8F:83:0D:5D:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2850DD3A111A44AF30F928290B31F819BC410ECD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
Signing time:             Mon 04 May 2026 03:32:06 +0000
ROA not before:           Mon 04 May 2026 03:32:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3376::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:50:dd:3a:11:1a:44:af:30:f9:28:29:0b:31:f8:19:bc:41:0e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 03:32:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=dd6672865dc8dd62303e1372defc55221f517bfb1c6fc08fc60ca498f05ac1f7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:2a:11:ef:0b:eb:54:94:ce:1e:86:a1:e4:
                    42:c7:55:62:76:50:db:99:bf:75:08:ea:61:46:08:
                    8e:59:a0:47:51:25:94:b9:d6:04:22:fa:96:ea:71:
                    39:73:bb:b2:80:47:56:9c:88:d2:61:cf:34:c0:c9:
                    f7:74:ac:d7:87:34:5e:91:81:3d:3b:d7:41:41:70:
                    99:e6:4d:cd:25:20:fe:41:d1:3f:19:54:fd:82:82:
                    e3:da:36:f2:4c:f4:49:c5:75:ab:53:2f:17:56:64:
                    6f:62:88:cb:a9:fa:db:6f:ba:f8:d8:4e:a3:e8:48:
                    b2:37:a4:cf:97:5b:5d:05:6d:3d:02:3c:ea:9e:c0:
                    70:83:6b:92:36:38:15:36:5b:dd:ab:a8:1e:e7:92:
                    8b:a7:6c:e7:50:84:33:51:c7:13:56:44:80:3d:a7:
                    98:e5:e0:b3:5d:14:1b:d0:9c:ee:13:94:4d:84:a0:
                    98:76:5f:e9:4e:37:b0:9a:9a:02:c1:f2:e3:97:b6:
                    bb:ae:6a:4d:0a:2a:3b:30:c8:cb:08:ae:aa:75:72:
                    21:a6:c4:81:e6:92:16:64:fa:1d:8d:cc:f8:cd:38:
                    c2:65:27:1f:48:5e:c7:00:e3:e3:76:b2:71:54:ca:
                    0d:ec:7c:5d:cc:09:e6:98:14:64:66:5c:61:34:91:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:82:41:41:8F:99:49:05:41:60:DB:F3:0E:73:8F:83:0D:5D:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3376::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:88:da:9b:08:f3:e8:3b:5c:c8:81:36:ef:5b:4c:95:61:17:
         5f:46:3f:00:38:94:38:7a:48:1e:57:f1:e2:95:da:6d:36:cf:
         7c:d8:6a:8d:82:f6:2b:bf:77:4c:0d:71:6f:e2:05:7f:cb:b4:
         11:c6:bc:38:64:a4:26:6a:6f:db:80:ea:44:ab:6e:8c:84:45:
         32:f3:4f:f4:ca:36:8f:fb:3f:5e:49:62:7c:f0:7d:24:e1:3f:
         fc:d2:89:a2:1f:1e:cf:2b:6e:c0:54:51:bd:07:25:20:df:3a:
         a9:00:e5:ac:1f:d7:45:65:12:2e:ce:45:03:72:8d:cb:70:86:
         89:f2:79:92:6c:3b:74:91:9d:a1:fd:15:ee:f0:37:df:49:ff:
         3b:5e:5a:99:7e:14:8e:33:46:5d:69:c2:a1:28:64:1e:9f:5e:
         e8:1d:0a:96:b5:07:8a:be:47:84:3b:b7:72:96:85:75:f6:a3:
         90:87:bb:d1:5c:34:af:7b:d9:1e:7c:6a:1e:0b:8c:68:34:ce:
         42:15:4f:17:a9:ad:0d:9f:55:b1:e6:a6:08:19:06:56:74:b2:
         15:cc:7e:17:b1:ee:6c:18:9a:03:5a:9d:eb:b7:91:0d:12:f7:
         ec:dc:a8:13:e0:88:db:6d:4c:2b:7e:77:a2:94:6b:74:34:92:
         8c:07:aa:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:33:13 2026 by rpki-client