Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5fee186-5c5b-4034-9a82-64ed67e45082.roa
File:                     b5fee186-5c5b-4034-9a82-64ed67e45082.roa (raw, json)
Hash identifier:          vr1gFzZF8X1g7BGYCMrZ3EXBhCszLltG04rNzu3FDdQ=
Subject key identifier:   76:A5:A4:E7:AC:16:B0:80:02:B1:C2:03:DC:41:48:A2:E0:BD:88:9B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       08079B2849FE04CB0FF80E11CC0266E95BD0D65E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5fee186-5c5b-4034-9a82-64ed67e45082.roa
Signing time:             Mon 04 May 2026 09:51:49 +0000
ROA not before:           Mon 04 May 2026 09:51:49 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:07:9b:28:49:fe:04:cb:0f:f8:0e:11:cc:02:66:e9:5b:d0:d6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 09:51:49 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=ec434c4657932018663270aeb734c54e2ba242d4e6a94b046857a5f3b1e8fce7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:4e:7d:4a:a4:4a:fe:d2:52:26:19:a1:9f:
                    2a:c2:a6:ba:09:d0:b4:48:f0:04:38:74:44:61:7f:
                    d1:a5:74:ff:30:7d:ea:5f:45:4a:f7:1f:23:54:2f:
                    44:c8:a8:cc:68:45:39:f6:b1:bc:51:1a:68:9b:3a:
                    49:90:63:aa:5e:1b:dc:75:f9:31:16:47:24:49:82:
                    84:5a:b4:80:78:c1:b7:e8:53:bd:b5:77:39:4b:19:
                    29:b3:af:00:36:f9:05:0a:25:39:f8:dd:69:99:29:
                    0b:67:a7:3a:d5:f0:a2:fb:02:b7:3c:80:a0:9b:92:
                    95:b7:ec:e1:95:db:e7:82:5e:fd:69:1b:48:0b:32:
                    a9:58:ad:22:af:aa:51:fe:f6:fb:de:00:24:69:73:
                    80:7b:68:d4:02:c0:ad:e7:90:f5:62:bb:d3:52:ad:
                    9a:9d:6e:52:03:b9:c9:9c:3c:cb:a6:b6:7a:a2:18:
                    01:48:5d:97:5c:19:76:3c:1d:4c:2c:8d:17:39:e5:
                    f8:e7:6b:d5:45:e0:1f:12:39:5a:18:8b:05:f5:16:
                    70:29:f9:b4:83:ed:d3:92:c9:a3:e2:f5:03:95:8d:
                    0b:80:5d:75:89:49:e0:a3:3d:7f:d7:ad:54:d5:ac:
                    2f:41:28:6f:b3:0a:63:de:1f:bc:e0:85:bf:af:0d:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A5:A4:E7:AC:16:B0:80:02:B1:C2:03:DC:41:48:A2:E0:BD:88:9B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5fee186-5c5b-4034-9a82-64ed67e45082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d00::/41

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:d5:72:77:f5:c4:6e:d2:40:60:85:a6:ce:90:1e:ef:10:
         10:09:8a:78:ee:12:12:b3:23:a7:87:1e:19:fc:37:ef:f8:09:
         3e:f6:f1:d4:63:d0:21:10:19:dc:b9:87:5f:d2:07:83:87:e2:
         95:64:29:35:0c:90:00:1b:fc:25:45:fe:fa:e0:de:78:5d:7a:
         e1:08:5a:d2:1b:16:6e:5b:73:b8:d3:c1:be:e7:34:9f:72:af:
         08:63:48:48:0f:e3:d5:67:43:5a:c0:fc:03:d4:dd:dd:e4:e3:
         0b:cc:a8:b4:8b:68:f1:d9:39:a2:02:06:fb:12:ad:93:63:1a:
         12:c0:cc:fd:4c:17:da:73:76:b9:a7:07:fb:0c:4e:5c:80:15:
         b7:e7:23:e3:c5:1d:cc:78:7e:bc:e0:19:13:66:10:d7:80:d6:
         6b:21:0c:30:14:0e:34:0d:d6:f0:a0:38:ed:a8:86:85:be:8d:
         de:50:75:13:87:f4:ef:a6:50:9a:74:b2:a2:80:77:d0:bf:d0:
         b3:57:dd:eb:ad:1f:9a:1f:7a:22:79:bf:99:ec:9f:3a:d9:33:
         05:85:90:b7:88:34:8f:7d:11:b1:7c:40:83:0a:4c:24:a5:b2:
         28:4f:4a:ea:ec:7c:41:5f:37:50:d3:0f:8a:0a:77:89:ac:8f:
         32:b5:d9:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:02:48 2026 by rpki-client