Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9544cca1-78c2-4c69-b98f-dd9076736094.roa
File:                     9544cca1-78c2-4c69-b98f-dd9076736094.roa (raw, json)
Hash identifier:          LOzD42+PqVUL6SJmTLckyTSCZIl5fJzbDs6qwGojXnA=
Subject key identifier:   59:47:29:40:69:0B:65:33:4B:3A:FA:02:07:A5:04:D2:66:2C:27:05
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12EAD05F8DA17E3813A5A9C32F52A204C68EDCB8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9544cca1-78c2-4c69-b98f-dd9076736094.roa
Signing time:             Mon 04 May 2026 10:11:57 +0000
ROA not before:           Mon 04 May 2026 10:11:57 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ea:d0:5f:8d:a1:7e:38:13:a5:a9:c3:2f:52:a2:04:c6:8e:dc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:11:57 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=d4813b0588f75ffec69777656958eacba96698179e4a864f907b9e26b7b39363, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:cf:cb:22:ca:83:04:04:32:76:0a:e9:92:
                    65:b7:39:91:76:6b:8b:7d:5f:3a:b8:f2:7a:8a:72:
                    39:e7:74:0b:11:77:6d:cc:b6:37:5a:bc:3d:2c:f5:
                    04:c0:0d:9b:ea:7a:e7:b9:bf:9b:24:64:90:80:f0:
                    f4:28:9e:d7:78:fd:ad:da:9b:aa:18:00:ec:b0:0f:
                    da:d9:c5:5c:de:2b:71:7f:9f:59:5f:78:d1:56:fb:
                    22:1f:82:57:8d:83:04:38:45:9b:a0:9c:76:32:68:
                    c1:4f:d5:d7:c9:e9:a5:81:a7:65:cc:9e:85:6c:db:
                    4b:34:63:a3:67:a5:f6:ce:52:3d:0c:e2:2b:11:b7:
                    41:0d:bc:e2:24:49:0c:11:7d:d9:11:37:80:56:5c:
                    cd:61:90:95:7d:5e:0a:8d:d1:2e:94:06:28:11:56:
                    e9:0a:ed:ce:01:77:bf:74:5b:35:a2:3a:cf:89:cb:
                    32:42:19:05:3d:ba:5b:61:ac:20:55:91:75:dd:af:
                    ec:f8:cf:29:a2:01:96:db:d9:ce:f7:54:a2:c3:b5:
                    ad:8c:f0:67:d3:3f:aa:15:8f:90:2b:79:54:2d:08:
                    7a:e6:d8:43:41:0a:d9:20:5a:87:41:fa:b5:23:db:
                    bc:7f:e4:02:3c:e1:8f:53:06:9d:70:c7:0b:33:f5:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:29:40:69:0B:65:33:4B:3A:FA:02:07:A5:04:D2:66:2C:27:05
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9544cca1-78c2-4c69-b98f-dd9076736094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:f6:1c:4f:96:2a:9d:88:fb:5a:12:d4:ab:7f:bc:0d:c0:
         b8:89:61:85:73:e2:1c:2d:84:c0:80:31:16:fb:36:43:76:8f:
         9e:18:19:d4:33:a2:07:5f:e1:a7:86:a1:bc:b0:66:c4:1a:58:
         ba:9c:3c:59:92:8a:59:12:c4:15:2d:9a:62:23:a6:23:20:48:
         17:ba:4d:7b:65:2c:48:51:1f:75:9d:9b:e3:63:a3:d4:af:e5:
         8e:b9:04:3e:ea:e8:79:12:bb:39:8e:8a:27:f9:76:4b:94:09:
         f3:06:26:1c:1b:f5:d9:e6:32:d6:fa:34:23:8b:a3:81:79:ca:
         da:f2:3c:1b:1d:71:5c:28:15:62:c9:09:72:5d:3f:3e:a7:53:
         26:28:00:e4:07:0d:d3:8d:a9:5c:81:53:41:da:53:ee:fa:b0:
         22:e0:99:6e:1b:51:1b:cb:10:ea:1a:da:8f:a4:17:47:e3:e6:
         f3:ae:61:11:09:13:7a:5d:0c:24:aa:5b:91:97:be:f4:7a:ef:
         86:09:b1:9d:34:0d:27:ef:8d:03:df:4f:99:b2:60:8c:62:b8:
         1a:04:b8:27:c9:2e:b2:4b:73:fc:86:0c:6c:24:c1:8f:ba:ff:
         06:e9:16:92:39:51:1c:3f:00:42:5f:55:ab:97:29:a9:cf:7a:
         20:9d:e8:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:31 2026 by rpki-client