Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82123435-6e8d-4462-a8f7-278e30b7d79e.roa
File:                     82123435-6e8d-4462-a8f7-278e30b7d79e.roa (raw, json)
Hash identifier:          tSd25MoYvOV2LQgLBbC3GsTv9Qk2jeA6ASqNA2axVRA=
Subject key identifier:   B4:FC:FF:2F:51:0E:BE:A3:CC:B8:2D:08:6E:C4:4D:6A:A1:D3:58:9B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5164F24558798EAFC01D633658D80FD8567BC679
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82123435-6e8d-4462-a8f7-278e30b7d79e.roa
Signing time:             Mon 04 May 2026 11:02:17 +0000
ROA not before:           Mon 04 May 2026 11:02:17 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e44::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:f2:45:58:79:8e:af:c0:1d:63:36:58:d8:0f:d8:56:7b:c6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 11:02:17 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=b9364b4768c828bed1a6de172d7350bf659641f9cadf0bb3586cb02939c4468d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:e4:0a:0b:05:a2:7e:79:21:be:57:f5:c9:
                    e9:79:18:23:6a:94:47:0f:bb:db:73:ac:f5:5a:b1:
                    27:fb:53:c0:a4:d9:ea:05:95:9b:b4:51:b5:65:d5:
                    56:0b:19:13:b8:29:bb:55:8e:63:2c:35:95:29:b4:
                    d2:f5:a8:ba:b5:23:06:99:ff:64:62:df:16:0a:e5:
                    6a:e7:35:13:40:29:79:4c:cc:37:56:a9:d4:a8:82:
                    91:6a:70:ea:f7:7a:e7:ed:05:a9:cd:9e:87:7b:41:
                    60:aa:64:2d:83:bc:63:01:f2:96:a5:44:4f:44:9f:
                    0b:45:c9:95:d3:a3:ec:36:d5:42:fb:cb:2c:51:8e:
                    5f:61:4d:03:2c:a8:0f:31:29:3f:ef:62:eb:02:45:
                    a7:a4:d6:63:1e:7b:1e:17:34:72:b7:f1:49:1e:6d:
                    17:c0:a1:1c:30:24:30:de:4f:e9:98:52:d2:fe:ab:
                    36:66:92:cc:5c:f4:2e:8c:c5:26:48:7f:16:b6:39:
                    94:eb:4d:f9:5b:e5:ef:ef:9b:c8:74:10:fb:86:01:
                    10:91:8a:52:41:ed:14:66:bf:b5:fe:a8:d9:a8:1c:
                    ce:06:2b:8a:ed:77:4d:ac:c7:a8:69:39:8a:ae:d1:
                    a7:7e:17:7b:e7:a9:6b:f8:b6:3d:0c:88:61:16:d8:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:FF:2F:51:0E:BE:A3:CC:B8:2D:08:6E:C4:4D:6A:A1:D3:58:9B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82123435-6e8d-4462-a8f7-278e30b7d79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e44::/47

    Signature Algorithm: sha256WithRSAEncryption
         b7:bd:58:41:64:32:14:20:22:b0:12:09:3c:2a:49:a8:4c:0a:
         f0:08:6a:75:21:73:70:f9:4f:e7:82:ee:20:3e:8e:24:e4:82:
         7b:da:7d:fa:ff:07:8b:50:72:cd:e4:dc:15:29:25:02:6f:4b:
         75:81:35:4f:99:de:09:47:d1:97:0b:95:71:c2:15:cd:5d:8e:
         dd:d3:e4:3d:2d:b9:fd:7b:ef:07:1d:c0:33:8e:0b:34:fb:8a:
         39:34:00:ed:dd:18:9f:4e:38:0b:ef:fc:5f:38:41:08:6e:5d:
         32:56:12:e1:f5:c8:d1:dc:d2:02:aa:29:4e:ab:3f:d1:9f:66:
         01:78:44:76:96:a8:b3:b6:bb:9d:12:94:4a:e1:ac:62:5a:88:
         f2:8f:d7:1a:d6:09:83:b0:aa:89:87:82:29:d5:25:be:fe:2c:
         7a:43:74:63:f7:fc:01:28:f9:30:36:40:9d:5b:82:c9:16:b1:
         5a:c3:a8:8b:9f:98:5f:88:33:b0:a4:44:ff:54:a9:92:f1:ff:
         42:6f:5f:d3:db:30:aa:11:78:d4:08:5d:5e:50:64:11:98:ff:
         cf:77:2f:46:36:6e:f9:0c:4c:ef:97:3e:61:b4:b8:d5:ce:ce:
         cc:2d:df:17:18:94:53:87:16:64:af:31:6f:05:41:eb:c0:f3:
         f7:36:60:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:17:53 2026 by rpki-client