Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa
File:                     b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa (raw, json)
Hash identifier:          t7nQwewpIN2Ce8Dcx+ZNZTdhr9IUIF7eFHsz+lJeTsk=
Subject key identifier:   23:F1:2A:53:ED:56:37:13:80:5C:9E:4E:82:1F:F7:F1:88:AB:7F:AC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4EE160BBA5BCBCCC9F88A72DB07180D4A4C88DA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa
Signing time:             Mon 04 May 2026 09:11:11 +0000
ROA not before:           Mon 04 May 2026 09:11:11 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:377c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e1:60:bb:a5:bc:bc:cc:9f:88:a7:2d:b0:71:80:d4:a4:c8:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 09:11:11 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9b45b65900f79015cabbeb634817cdda068d2d44adf2050c7765f0d8216e4cd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:22:ab:d8:8b:69:e1:7d:b6:4b:5b:e7:ea:
                    0e:06:44:45:29:1f:88:16:90:66:ba:c0:81:4d:32:
                    03:d4:8d:43:df:d2:d2:6b:ad:70:78:01:db:bd:45:
                    57:7a:ef:74:ba:96:b5:e7:65:62:64:2d:b4:2e:66:
                    7c:d3:43:e5:0b:5c:28:9f:a7:b4:46:3f:dc:79:e2:
                    15:1e:6e:68:3c:8b:c5:10:21:6c:ed:0f:eb:e3:ef:
                    53:e9:4f:03:cd:9f:a5:f4:d2:6d:d3:8d:d2:1e:88:
                    81:ea:47:42:17:60:6f:63:bc:87:ff:fa:c8:d2:4b:
                    e8:86:48:38:26:1c:82:ad:91:e1:03:7e:a3:1d:4f:
                    e0:04:2f:fe:cd:df:c5:f3:c1:9c:6f:55:2e:4f:44:
                    e1:fc:c7:c8:17:67:4e:c3:9a:a1:d7:34:5e:e2:83:
                    d2:77:aa:d0:32:98:34:61:a3:39:31:50:ff:43:71:
                    17:72:bf:05:33:ac:06:a0:8d:ba:79:05:c2:2e:77:
                    4d:13:1b:17:52:0a:15:a0:f9:47:77:32:68:01:2c:
                    46:12:f0:2d:bd:55:11:4e:48:99:4d:44:6d:24:de:
                    9c:28:0f:bc:15:53:ff:8e:92:34:45:10:c7:1e:e5:
                    29:9b:99:a2:e8:d1:af:37:3e:51:32:b7:93:8f:14:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F1:2A:53:ED:56:37:13:80:5C:9E:4E:82:1F:F7:F1:88:AB:7F:AC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:377c::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:d1:31:93:62:85:73:b3:de:5b:27:c2:ff:5e:7c:e7:e6:
         f5:87:72:ba:34:47:63:90:b0:34:a7:00:59:ee:b6:26:04:b0:
         07:ac:0f:5d:01:be:1e:c7:a6:f7:8b:5c:e6:5d:8e:31:dc:55:
         53:c2:81:eb:ab:4f:8e:4c:41:58:97:24:3f:63:24:7a:e3:1e:
         33:05:1f:b3:67:43:dc:a4:d9:d2:3a:f6:8f:06:0a:82:78:8d:
         07:8d:7d:b0:aa:e2:7b:bd:d1:60:ce:64:f1:6d:bb:f0:0c:cf:
         49:1f:30:96:30:e1:41:66:bd:ab:b5:a3:ce:69:5f:cc:0d:5c:
         e0:2b:fc:3d:a9:61:39:fa:b4:f5:a4:04:9e:c8:ef:79:52:72:
         e2:ef:a7:29:c8:77:f9:e6:e1:a2:14:e3:21:2e:89:1f:b9:c6:
         86:41:59:df:7a:b4:30:4f:a9:aa:e3:66:4b:2d:83:f7:06:a7:
         5d:96:95:9f:e9:14:1e:5d:e9:78:6d:c1:77:61:38:2b:09:d7:
         19:f3:b3:08:85:63:c5:e8:5f:f4:bd:17:fc:d9:24:4f:3d:d2:
         82:b2:cb:57:f3:b6:9e:cc:1d:8f:61:dd:19:f1:d5:4a:14:fe:
         1f:c5:b9:eb:af:38:94:b2:3f:98:55:10:74:9c:45:ec:fc:d7:
         63:63:18:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:13 2026 by rpki-client