Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa
File:                     93123874-5e56-4bcb-b9b6-7964a203a830.roa (raw, json)
Hash identifier:          yQ3p5U63CLZtSPggOLroVcPtvz0CAMChjC0a+k/n0oo=
Subject key identifier:   2D:B7:57:DF:B4:C8:D7:39:02:49:03:A7:2F:9A:4C:9F:9D:18:79:58
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FB111F06164C764E5A2CB7286F2E981BC864E7D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa
Signing time:             Mon 04 May 2026 07:00:05 +0000
ROA not before:           Mon 04 May 2026 07:00:05 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:11:f0:61:64:c7:64:e5:a2:cb:72:86:f2:e9:81:bc:86:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:00:05 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=7ffb64bce4581090151d20f693e7507d346c67944af508668ca5b452cb8cdfe6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:f1:32:db:91:dd:04:75:88:89:49:ba:55:
                    26:fa:02:c9:5d:d3:67:7b:f1:9a:47:aa:69:a1:9f:
                    93:b8:6f:93:a4:c7:00:39:8e:59:14:78:70:07:96:
                    1e:ce:e8:92:b8:12:3e:6d:50:c7:56:df:1a:41:0a:
                    05:32:bc:9c:ed:a4:b9:17:f9:cf:f2:e8:01:a6:6c:
                    73:71:bc:4a:69:4b:d9:a0:b9:ce:d2:c9:84:ba:6b:
                    4f:64:81:6b:ac:fa:d5:0c:42:cc:a8:78:67:fc:21:
                    b5:17:b0:aa:5d:b8:b3:bd:d7:82:1f:b1:5e:4b:7a:
                    b2:07:48:78:cf:1e:e4:ee:fa:48:3a:c3:93:c5:79:
                    ff:82:c3:70:d9:53:b6:d2:53:a9:18:a5:88:4c:0d:
                    a9:3d:66:1f:80:9e:55:c9:21:bd:74:2f:1b:b9:db:
                    2a:1c:83:13:a6:f7:66:f5:f2:11:79:5c:10:0b:33:
                    2d:aa:7e:4c:15:9a:1c:18:da:95:a5:4b:49:b5:04:
                    ae:98:e7:05:bf:60:56:b5:16:29:15:e8:4c:66:41:
                    c6:0d:cc:24:ac:40:4b:85:dd:b2:03:87:18:79:37:
                    c0:50:9a:76:2c:f9:03:44:da:13:ad:13:90:da:3a:
                    49:f3:64:f4:5e:39:c1:a0:56:4a:25:18:1e:13:24:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:57:DF:B4:C8:D7:39:02:49:03:A7:2F:9A:4C:9F:9D:18:79:58
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93123874-5e56-4bcb-b9b6-7964a203a830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:ba:02:ac:23:ab:29:4f:1d:4a:07:0f:67:0b:4e:f5:05:
         fb:4e:49:06:74:5e:07:c2:02:09:a3:b3:21:e2:22:93:26:87:
         7d:b6:a5:1d:12:88:f2:f8:4e:6a:57:52:7f:d3:aa:b9:44:35:
         49:32:9e:a2:ee:8b:fe:34:20:81:07:43:d5:f6:74:c5:18:cc:
         63:b7:97:3c:3a:97:c1:8b:dc:16:17:ce:1e:d9:18:6b:a4:dc:
         d5:40:ff:fa:bf:35:cd:1b:36:76:ea:c4:74:d4:e7:c2:ff:81:
         01:af:aa:51:35:4e:07:3a:68:a8:2d:24:35:40:f9:96:89:f4:
         78:84:8c:92:28:d9:91:d9:9f:3a:ca:a4:91:ce:8b:74:95:63:
         4f:54:78:31:78:4d:6c:89:76:af:89:f6:2b:65:c3:5e:b6:bd:
         8e:da:46:75:84:ed:aa:b0:bd:40:97:e2:fc:c1:03:3d:14:68:
         27:50:9e:a3:16:b1:c3:8e:ef:c4:69:45:68:7f:46:15:75:96:
         a7:65:36:53:5b:e6:da:3f:3b:8a:e3:24:05:bd:27:51:dd:7d:
         1d:60:45:10:68:bf:48:87:ab:e1:ea:5c:64:ae:8d:89:79:0d:
         f5:39:47:62:e6:44:b1:ae:82:ae:9f:5f:44:05:75:f1:e6:7f:
         4b:ac:4b:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:46 2026 by rpki-client