Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81e4a69d-1e9d-44eb-86d4-ab41787b52c8.roa
File:                     81e4a69d-1e9d-44eb-86d4-ab41787b52c8.roa (raw, json)
Hash identifier:          W+HxeQy9DYB/Zs4dPrYQ5VHuhbV6Q+eLm/msGIkhmOw=
Subject key identifier:   0A:10:F9:62:6C:FF:01:31:EB:B4:22:B4:E9:27:A3:6B:10:62:C0:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       40F19EF69774F95087A2FCE55B21E8794B670AB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81e4a69d-1e9d-44eb-86d4-ab41787b52c8.roa
Signing time:             Mon 04 May 2026 10:10:07 +0000
ROA not before:           Mon 04 May 2026 10:10:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36a4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f1:9e:f6:97:74:f9:50:87:a2:fc:e5:5b:21:e8:79:4b:67:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:10:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=8e47da7b075c7d616435ebcf213186e671bfd013ed6c5df11f3f8a6dcd31379a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:60:43:68:bf:39:bc:ac:d4:69:07:c9:9c:
                    97:20:a5:b4:10:95:0f:5d:71:90:7a:0f:96:15:9f:
                    6a:4a:18:9b:89:61:f6:8e:c2:46:87:6c:aa:dc:ab:
                    24:5c:59:cd:c7:d3:d0:f4:11:a6:7d:2a:a8:7e:ed:
                    9c:bd:ff:0d:e6:a8:a8:3f:a7:91:12:bb:52:d8:11:
                    85:8e:3d:ab:e0:f7:db:5b:ff:0f:67:ad:9a:d3:2c:
                    71:f1:43:e3:92:02:81:46:1b:f7:ce:92:03:6a:d0:
                    15:0b:74:7e:58:25:b8:0f:9b:1f:88:50:b1:60:85:
                    bc:63:c0:ac:c3:4a:8d:b2:04:60:73:7a:3c:0b:08:
                    e4:2f:a8:88:03:12:19:b4:5c:94:f2:1a:fb:67:c6:
                    31:3b:d9:72:60:3d:b9:67:21:68:d7:ca:78:21:00:
                    7a:9f:4b:f7:ba:e3:d6:d8:54:5f:ba:16:4e:af:2b:
                    67:dd:1c:1e:d4:55:af:58:eb:77:cd:26:d5:9f:fa:
                    01:b0:dc:f2:c1:2c:9e:22:46:72:ef:92:85:09:11:
                    91:9f:c3:2c:36:4c:f8:3d:2f:a9:79:fc:a5:a5:f7:
                    fe:1a:bc:12:91:7c:22:38:db:7b:8c:6e:d3:f0:60:
                    cc:36:49:85:a0:b3:4f:76:08:f6:3a:38:eb:76:3d:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:10:F9:62:6C:FF:01:31:EB:B4:22:B4:E9:27:A3:6B:10:62:C0:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81e4a69d-1e9d-44eb-86d4-ab41787b52c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36a4::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:17:4f:b2:24:27:f0:94:b5:bd:8c:ec:82:8d:6c:37:3c:
         e6:ee:eb:16:5e:f4:c1:8d:ad:b3:c2:72:6e:e1:e3:a3:36:48:
         51:8a:a5:a0:73:88:fc:b0:c3:b2:22:4e:23:8c:6f:9a:33:12:
         9e:df:40:98:88:b3:26:51:14:a2:1f:f8:9b:c0:89:85:d0:c0:
         b9:9f:fb:25:df:87:da:99:0f:9b:a5:35:3a:dc:21:d4:af:8c:
         cc:0d:3c:64:19:a2:71:95:1d:ad:a4:0c:4c:15:d8:a9:7a:9a:
         97:cb:77:e6:f4:21:bb:a3:03:7d:23:8b:98:4e:15:f3:fa:7d:
         2f:2d:2c:c8:ba:ef:56:3e:39:a3:97:88:57:84:b7:80:c6:ab:
         cf:9e:cf:a6:11:86:12:10:10:82:a0:fe:85:22:a4:81:4a:4b:
         ce:aa:b3:c8:2c:42:52:4d:b6:6a:7f:fd:2a:51:8e:b7:df:ad:
         c6:0b:bb:53:ae:1f:9b:c5:47:c1:e9:34:3e:44:56:63:c8:ae:
         e5:b8:8f:65:ce:02:1a:ce:2a:e0:e9:f3:e3:4e:88:3c:a4:b7:
         c1:22:d8:df:fa:41:d4:15:34:2c:d8:4e:db:17:ab:41:d8:6f:
         57:47:f3:33:97:66:0a:72:af:d0:a3:97:c7:e5:ea:2f:55:09:
         f3:72:85:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:07 2026 by rpki-client