Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa
File:                     b2064814-6163-4de8-bca2-34ea8c35ab03.roa (raw, json)
Hash identifier:          jbzjPYDq16R9HdpH4SDzW7vevn8sgfGiZYbRIFOrMEI=
Subject key identifier:   AE:10:2E:9C:B3:5F:E1:C6:20:07:C0:97:9A:69:2E:4C:39:8A:42:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30790EF7B904780BBA7DF2CE6E7F516EA206E70D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa
Signing time:             Mon 04 May 2026 06:40:56 +0000
ROA not before:           Mon 04 May 2026 06:40:56 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a18::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:79:0e:f7:b9:04:78:0b:ba:7d:f2:ce:6e:7f:51:6e:a2:06:e7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:40:56 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9421a203806f7accd4e0911747c0b258e7f38f81d190fc5e3180e2d64ebe9070, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:ce:ec:f6:a5:f7:e2:49:9b:11:dc:82:62:
                    3b:2e:c4:55:92:74:63:9c:1c:d1:fc:4d:57:ae:f8:
                    82:a7:62:da:53:b8:87:07:41:cd:39:3b:f2:38:8d:
                    b0:68:ab:f5:49:72:34:7f:5f:e5:3b:1c:fb:d0:e3:
                    ca:3f:ea:c5:74:92:d5:fb:e8:f8:99:d8:e3:a3:7d:
                    32:aa:55:c3:9e:da:2c:27:5a:4e:02:9d:a5:35:b4:
                    43:85:98:e7:ca:4c:69:3b:04:34:25:e0:2b:f8:c1:
                    4e:08:e9:bd:3b:8b:7f:2b:4d:0f:fa:90:47:25:8e:
                    08:03:ca:aa:46:26:66:0b:aa:1d:5a:12:1d:18:15:
                    b8:64:86:57:dc:dd:ed:9e:8d:a2:98:01:92:21:24:
                    15:22:e0:e2:6d:6f:3c:fd:58:a0:4a:87:a8:66:cf:
                    e5:6c:d9:52:e3:c3:52:26:8a:8f:56:7c:66:c9:a9:
                    8d:3b:f4:56:bc:79:46:31:dc:b9:09:71:e5:4d:9c:
                    7f:34:0f:f7:96:5c:e6:28:34:c7:0b:93:b9:7a:e8:
                    c1:21:d4:00:fe:a4:91:19:24:5c:a7:8d:10:15:f3:
                    3c:2d:30:3f:27:84:e7:c7:bc:05:6a:78:23:b6:54:
                    12:12:55:d6:20:bf:e0:a7:7d:32:b4:f7:0b:fc:5f:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:2E:9C:B3:5F:E1:C6:20:07:C0:97:9A:69:2E:4C:39:8A:42:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2064814-6163-4de8-bca2-34ea8c35ab03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a18::/46

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:36:6c:91:43:73:0c:d6:be:ed:26:26:a3:e1:d8:4a:3a:
         7f:05:64:ed:3c:fb:6c:1f:90:bc:cf:0e:63:58:78:61:13:00:
         11:44:d7:df:d7:53:29:d5:3a:b8:cd:08:db:c0:a0:10:42:77:
         75:cb:72:c1:87:18:5d:fd:04:7f:aa:bb:63:1c:ba:9e:4b:4d:
         b0:f1:24:08:cf:98:7c:a0:68:13:88:78:0b:72:14:02:ed:cc:
         1b:a9:f9:8e:83:f0:e1:08:9d:e0:9b:ee:f7:2e:f9:8f:7c:45:
         e1:fd:68:d8:0a:f8:cd:53:8e:1a:a7:b0:58:4e:6b:59:0a:e1:
         59:b5:bc:ae:d3:25:27:e8:94:2c:a5:da:8a:7c:27:42:e0:57:
         a2:06:3e:04:5f:50:25:74:9f:e0:ac:16:bc:11:79:0e:84:6d:
         27:78:65:fd:74:4c:a0:57:01:ff:3c:77:a9:48:e5:c7:10:c5:
         98:b1:d9:f0:a9:7a:01:4a:2e:9c:bc:fe:ad:c8:de:d0:09:7f:
         ab:95:f8:7c:ec:50:76:70:42:7a:f7:5d:8b:db:cb:50:a0:5c:
         f2:7d:2f:bb:6c:7d:1d:a1:7a:15:d9:b7:e2:09:3c:e1:de:68:
         dc:f9:9a:e7:72:74:88:a4:00:80:80:14:e2:14:a4:f7:9c:84:
         57:1c:c3:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:44:05 2026 by rpki-client