Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b31997bf-674b-422c-9cc8-131609077211.roa
File:                     b31997bf-674b-422c-9cc8-131609077211.roa (raw, json)
Hash identifier:          91RgUBG0Qa5bxhjQaQKL2BbuT9dFiuXVgttxuOKE1qY=
Subject key identifier:   16:A6:44:66:18:BD:A3:E3:4A:0E:E8:DE:D9:11:AA:F4:5D:D0:C4:CE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DCF8D0C8F5AB16F527B3A046F28EBFCA94C92FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b31997bf-674b-422c-9cc8-131609077211.roa
Signing time:             Mon 04 May 2026 11:41:58 +0000
ROA not before:           Mon 04 May 2026 11:41:58 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:8d:0c:8f:5a:b1:6f:52:7b:3a:04:6f:28:eb:fc:a9:4c:92:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 11:41:58 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=de5c601efaa09e893e3ce60b412eec0cf953764c540d1e30aca3a90e4d61d469, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:89:95:44:1f:57:77:4c:b5:7c:d6:2f:54:
                    a6:e5:f2:af:02:f4:63:42:94:d9:ad:52:3a:65:49:
                    d7:07:9e:9e:75:50:9e:1a:a5:f6:45:63:99:17:49:
                    20:57:80:b4:90:c7:e6:c6:53:d1:40:42:b5:dd:2c:
                    be:f2:17:17:f5:e2:fd:b7:68:84:c7:d1:49:b4:40:
                    b4:34:fe:96:aa:61:98:a9:00:b3:ab:3e:19:b8:3e:
                    86:f8:d9:e8:9b:31:fb:6d:0c:2d:68:84:ed:ec:ea:
                    d3:18:5e:80:0a:06:58:a4:28:d5:d8:6c:c3:6d:97:
                    24:32:57:c6:71:57:29:ba:7c:2b:13:71:23:20:9a:
                    61:ee:40:1a:d7:a7:df:63:92:22:87:e0:b4:85:dd:
                    b7:70:74:1e:41:e3:1a:c0:88:51:84:ff:4f:e2:fb:
                    f5:89:2f:92:ff:90:a2:77:88:95:2f:72:98:18:c2:
                    4c:17:79:ac:85:2c:6f:95:7c:77:fc:4e:58:ad:68:
                    1c:24:9e:16:dd:aa:93:a3:38:40:6e:7b:cd:f1:b4:
                    df:ff:aa:8e:f1:21:91:55:da:ea:19:84:cf:44:e6:
                    63:02:dc:6e:d6:11:57:0f:84:8f:19:45:da:28:34:
                    9d:9d:b9:e4:18:67:5c:cf:a0:1d:e3:a0:e3:38:17:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A6:44:66:18:BD:A3:E3:4A:0E:E8:DE:D9:11:AA:F4:5D:D0:C4:CE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b31997bf-674b-422c-9cc8-131609077211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:d2:56:c7:f6:cb:88:40:35:3d:43:d3:8d:b0:ce:76:de:
         0e:33:91:b0:0f:38:98:de:45:d4:4a:86:5e:a7:ab:07:92:cc:
         ff:14:af:49:a4:58:8d:68:39:d6:89:1a:4a:ff:23:35:7d:7c:
         cd:3d:02:a2:d0:eb:8a:1c:c1:e7:4c:5b:58:33:eb:9d:1a:dd:
         c1:01:9f:df:78:26:40:b1:7c:d1:38:da:b1:56:e1:c0:ff:8e:
         71:1c:72:a7:34:7e:b6:41:2c:98:13:48:68:f4:6b:99:cb:a7:
         32:44:5f:b7:df:1d:4c:4a:e2:3d:28:3b:b7:a7:5d:c9:bd:8c:
         69:03:01:ad:8f:11:38:19:4f:0f:29:ff:b5:4a:66:e8:a3:a5:
         4f:70:df:3d:61:0f:03:86:ca:00:74:43:c2:1b:a0:7b:b1:0c:
         f4:be:00:2f:99:bf:ff:19:c6:1d:a5:8d:3d:eb:13:ba:71:95:
         44:37:cb:b7:ee:0b:24:07:35:f1:ad:a7:dc:da:de:f5:76:e5:
         e4:83:79:9b:63:c9:86:69:11:2a:53:57:fe:16:d5:d4:c0:28:
         d0:9a:b9:8f:43:ca:0f:fa:48:d3:e7:53:aa:ae:04:69:02:9c:
         12:cd:42:c2:b0:cc:cb:7e:b5:dc:02:69:7c:87:8a:1e:a6:75:
         0b:b8:f7:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:01 2026 by rpki-client