Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17ea576-d96d-4ca6-b7fe-64a84d14bfe9.roa
File:                     b17ea576-d96d-4ca6-b7fe-64a84d14bfe9.roa (raw, json)
Hash identifier:          jNkpJO+v+vQ9UlcEXJ++Q1eNJGSvgjrtkbhLYDhryeA=
Subject key identifier:   EB:75:CE:A7:E4:EB:34:0C:93:CB:1B:AE:FD:89:CF:D9:F9:99:2D:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22FA60327EB83D82BDDC61F72F00CBAC063057
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17ea576-d96d-4ca6-b7fe-64a84d14bfe9.roa
Signing time:             Mon 04 May 2026 11:32:06 +0000
ROA not before:           Mon 04 May 2026 11:32:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3228::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:60:32:7e:b8:3d:82:bd:dc:61:f7:2f:00:cb:ac:06:30:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 11:32:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=aebe53abb691715a472a643cf5a56da8abd90e3abca5d2b0f6ddabe0ac18a087, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:73:b5:1c:ab:2b:58:0a:20:2a:2e:70:51:
                    91:91:43:7c:a0:da:49:34:b8:d6:13:a7:d8:a6:47:
                    ec:6b:5f:fd:71:47:a1:72:3e:1b:bb:d2:ba:4f:29:
                    ca:04:0a:f2:ce:53:0c:b3:35:20:82:81:a7:ef:a8:
                    51:1b:b6:cf:c0:70:50:0a:84:dc:a5:61:26:68:48:
                    85:af:dd:83:e9:d1:5c:09:3d:15:8b:ce:94:e8:5f:
                    6d:83:c8:89:b3:a1:91:79:55:62:30:d1:ab:91:70:
                    d6:37:53:95:ac:3a:bb:3e:80:f7:84:0e:3f:ed:8d:
                    80:59:d0:f7:1b:9f:3b:fa:0f:cb:63:fc:d0:44:84:
                    ef:c7:d8:a5:71:59:b9:de:8a:5d:dc:9f:e7:ed:fc:
                    3f:e1:fe:0f:c9:28:38:2e:b6:4e:c0:9d:4c:13:b2:
                    e7:ce:be:45:72:ed:c3:95:e2:e1:95:2b:b5:0b:60:
                    0b:c6:8d:fd:90:57:bf:62:75:6a:dc:5f:2b:e1:fc:
                    cf:1e:f6:ec:90:a6:75:a3:0e:e7:a4:9e:69:02:c5:
                    5d:ae:c4:e3:b0:44:b5:20:34:2b:ff:f1:9b:82:df:
                    17:44:cc:ee:59:b0:47:b7:61:c7:a8:38:3f:bc:5f:
                    70:84:ec:ea:1e:90:23:26:00:c9:9e:cf:68:49:58:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:CE:A7:E4:EB:34:0C:93:CB:1B:AE:FD:89:CF:D9:F9:99:2D:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b17ea576-d96d-4ca6-b7fe-64a84d14bfe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3228::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:52:22:7c:71:26:a8:a5:72:ad:7f:ed:48:ec:1c:26:e8:ff:
         d4:cf:8c:bb:95:62:49:4a:7d:b3:f5:cf:78:3d:a9:98:a6:41:
         3c:21:3e:85:ef:64:89:e5:af:96:97:b3:47:70:dc:28:dd:51:
         63:1e:ae:44:f2:25:28:0f:b7:77:f2:50:b4:a1:3b:58:22:95:
         be:c3:6f:06:8c:db:40:3e:b4:2b:91:4f:62:6e:44:fa:5e:64:
         d4:6b:b1:44:55:59:db:60:00:df:56:03:82:e1:75:51:b2:0d:
         70:ec:5c:a1:a6:f5:76:e3:bb:0f:22:59:f0:25:ef:d8:24:2d:
         8a:72:9c:ae:bb:fb:be:12:1c:e0:56:35:68:82:a2:16:47:c3:
         c2:09:aa:6c:53:8f:d3:17:de:15:09:0a:c7:bd:d4:d5:69:37:
         6c:f3:1d:f8:91:e8:cc:ef:89:ea:8f:bd:03:dc:cb:11:1a:bf:
         13:d5:47:b9:f8:2f:c5:de:9b:6f:f1:b2:cb:eb:07:bb:cd:a3:
         07:d3:93:98:83:37:06:34:e9:7b:51:83:59:cc:2a:d0:89:e3:
         7e:94:ec:18:f7:22:a4:7d:22:ab:94:66:67:59:b0:ee:98:97:
         95:65:a1:94:86:c4:49:58:3a:e9:1e:55:14:75:73:b3:db:bf:
         c8:1d:72:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:56 2026 by rpki-client