Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/80e1a3e9-2592-4f23-bcef-bc787301728c.roa
File:                     80e1a3e9-2592-4f23-bcef-bc787301728c.roa (raw, json)
Hash identifier:          YTrtI4GkRS8hvj+1X9qlTZo6pMUZmUOKZy184aPTugE=
Subject key identifier:   44:F1:6E:B2:1C:4D:3A:A4:65:29:4A:4A:6F:3B:FF:30:FB:B2:40:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4794940A5CB9CCA2C40B6FDD4E41A7154739AA71
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/80e1a3e9-2592-4f23-bcef-bc787301728c.roa
Signing time:             Mon 04 May 2026 07:01:14 +0000
ROA not before:           Mon 04 May 2026 07:01:14 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e14::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:94:94:0a:5c:b9:cc:a2:c4:0b:6f:dd:4e:41:a7:15:47:39:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:01:14 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=f7f5b2291f2b0bbecb69ba63dd55676b3710ea8456727d4526c38afb3e44c3ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:60:ba:36:c0:c8:99:c4:77:0e:23:49:13:
                    a5:42:f3:be:c4:37:ec:8f:79:31:c6:0d:29:24:8c:
                    9e:6d:a7:5a:31:9b:93:7b:4a:7e:87:07:ad:5e:7d:
                    ce:e6:ca:e5:6d:a3:9c:63:cd:ca:9b:d1:1c:be:1d:
                    cf:18:dd:07:22:b9:13:d9:4f:6a:c0:de:66:fc:b8:
                    2a:4a:50:d8:4d:e3:fc:26:a3:fb:d4:19:fa:08:bb:
                    cb:66:3c:f7:17:c4:2b:c1:41:7c:7a:1d:64:b0:05:
                    e0:fa:39:bb:0a:ae:e9:b4:33:d4:8d:98:c5:98:13:
                    f6:d0:a8:29:04:07:d3:73:8f:09:0b:2a:16:21:44:
                    12:f8:d9:99:25:84:2a:bb:18:43:9c:48:2c:e3:04:
                    c7:b4:39:5d:61:60:2b:4b:0d:a1:29:90:e0:fb:bf:
                    66:f6:fd:d6:d9:53:ab:38:ad:4a:ae:48:3d:26:a7:
                    ea:39:92:88:57:5a:f2:f7:9f:35:8b:94:15:5b:11:
                    8f:70:a4:4d:9d:1c:40:1a:c6:9f:6c:56:85:37:09:
                    34:b2:9f:73:83:ac:f2:46:b7:d1:ea:ca:82:75:95:
                    11:f8:98:01:64:1b:c0:da:73:ac:cd:dd:00:a0:31:
                    50:61:28:6c:35:0d:bf:57:bd:93:d8:ee:eb:1b:d7:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:6E:B2:1C:4D:3A:A4:65:29:4A:4A:6F:3B:FF:30:FB:B2:40:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/80e1a3e9-2592-4f23-bcef-bc787301728c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e14::/46

    Signature Algorithm: sha256WithRSAEncryption
         30:65:79:fc:a3:8c:45:41:5b:fd:0f:5f:89:ea:16:86:50:9d:
         b2:41:2b:70:67:ff:3c:07:44:23:ea:35:d6:45:62:0a:6e:3b:
         13:e0:8e:0e:74:12:b3:94:3e:f3:05:7d:de:ba:a2:c3:ce:6c:
         6a:76:88:9b:4c:c5:f5:42:b0:1c:6c:69:96:7f:e7:64:43:20:
         8a:85:bf:a6:7d:fe:8b:0c:67:f7:0a:45:92:ae:93:63:37:e1:
         42:4e:1d:f6:a5:d5:d8:3f:a9:dd:e4:e7:af:2c:b6:10:d1:a0:
         f8:9e:f7:46:b5:e6:45:e4:42:b3:0a:3f:d0:fb:2c:d4:c2:89:
         c2:fd:44:7d:72:18:48:24:56:0d:bf:c8:0b:32:1d:a9:eb:c8:
         b0:00:b9:ae:db:12:7f:52:fa:56:cf:bc:90:38:f4:94:21:1a:
         87:f8:c7:2e:b7:69:26:91:2a:39:2d:ae:24:0e:cf:b9:95:3c:
         ab:30:99:db:72:b6:7b:dd:18:ad:a8:a9:e5:dd:6e:8a:b9:76:
         1a:d7:a4:c9:07:6a:fd:c5:6a:26:4d:4d:24:56:fd:1a:66:63:
         cd:a8:79:06:32:2c:62:4b:bc:6a:d4:47:77:7f:45:42:6c:b1:
         b6:b8:fa:b3:94:82:88:54:a7:9c:ee:ce:a3:09:14:b5:47:ac:
         09:07:96:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:39:27 2026 by rpki-client