Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b89c4478-ec53-46d4-bdc7-249a3a0b59b6.roa
File:                     b89c4478-ec53-46d4-bdc7-249a3a0b59b6.roa (raw, json)
Hash identifier:          cdzhFgC4ihzquB95HtaCxUCxCvKxfWjk37BM3OQD1us=
Subject key identifier:   76:60:5C:FE:76:CC:C1:63:23:89:0C:3C:33:26:28:8A:74:FF:E0:4B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       70D7B13FB0CE175376AD4A76FF859D6F6FE40F86
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b89c4478-ec53-46d4-bdc7-249a3a0b59b6.roa
Signing time:             Mon 04 May 2026 07:01:51 +0000
ROA not before:           Mon 04 May 2026 07:01:51 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3842::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:b1:3f:b0:ce:17:53:76:ad:4a:76:ff:85:9d:6f:6f:e4:0f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:01:51 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=249345731dc65ad45e00a00f087d1e671efbb3bf3e19801df68d252f0de578c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:63:75:96:30:e4:1f:21:95:a9:42:8c:98:
                    7a:c6:23:bd:d9:66:ae:26:a5:9d:99:d9:6c:b0:84:
                    b0:ae:31:e9:2e:44:b3:cd:89:ba:70:32:8f:02:40:
                    ec:e1:2a:4d:92:6b:c3:40:3a:ae:a3:1a:55:8b:fa:
                    3f:ae:26:04:69:44:60:71:6f:53:b3:df:ba:5a:3d:
                    28:13:e9:4b:1f:31:c7:98:0a:4b:be:74:7b:41:97:
                    05:74:77:f3:e0:dc:9f:f1:fd:c7:42:11:ad:48:62:
                    8f:8d:51:7c:cf:3c:19:4d:3d:de:f4:e1:2f:68:9d:
                    5b:7d:e0:0e:1b:92:f9:de:87:0b:78:b7:90:15:8a:
                    e3:9d:34:25:b1:f0:57:97:a5:25:78:07:0d:5d:7f:
                    ef:3c:dd:4c:fe:cd:86:a6:8f:42:46:de:aa:7d:cd:
                    8c:18:d2:be:5e:e5:dd:4f:cd:e5:90:f9:52:4e:77:
                    af:e8:7d:7f:b3:53:d1:d6:4d:45:62:53:7f:92:49:
                    93:a2:4e:be:ce:8f:18:67:2f:80:4d:94:b1:8b:01:
                    24:be:38:7b:59:19:1e:2a:05:ac:69:4d:1c:b0:c4:
                    bb:7a:4d:d9:af:37:25:eb:8e:c6:1d:f9:75:10:d8:
                    d9:e0:ba:48:e6:80:00:7b:49:8e:58:f5:09:27:b0:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:5C:FE:76:CC:C1:63:23:89:0C:3C:33:26:28:8A:74:FF:E0:4B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b89c4478-ec53-46d4-bdc7-249a3a0b59b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3842::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:da:a3:b7:0c:f5:75:90:a3:32:f5:46:47:b5:4f:bf:17:
         2a:a5:cd:ce:60:6b:a1:74:a0:01:44:0e:b7:6c:01:66:bb:0e:
         1e:c1:b4:be:2b:b7:a0:cb:b8:a6:8c:ee:2c:5e:f7:31:e7:e5:
         4a:9a:3b:37:46:9c:6f:6d:25:9c:fc:e0:96:ae:2d:bd:fc:40:
         5c:f9:4c:2e:d7:e0:56:a6:da:95:9f:41:78:ab:e4:96:c2:2b:
         2d:d5:8e:e8:20:67:0a:92:fa:83:7a:23:8f:d8:d1:4b:dd:70:
         db:1b:77:96:65:46:29:47:95:00:0b:b2:4d:67:e6:f3:50:78:
         34:36:84:f9:22:5a:42:03:c4:c4:9f:cb:e7:c6:a2:48:07:85:
         f0:59:72:6b:ee:a3:f9:12:cb:bd:4b:58:94:39:fd:15:50:9e:
         86:c4:df:67:26:83:06:7a:11:2b:b2:45:1c:41:3c:4c:36:39:
         c2:7d:2c:04:f3:d8:e7:92:25:38:d6:8c:59:ae:68:39:37:6b:
         a0:c5:1f:fc:9a:fc:31:10:f3:df:bf:4a:a8:49:e4:90:df:da:
         c6:68:2d:27:b0:f9:48:64:6e:bc:9c:02:51:56:98:c4:eb:3a:
         32:97:ae:a7:01:dd:37:04:3e:9f:cf:76:39:96:99:6a:c6:fd:
         aa:f4:bf:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:32 2026 by rpki-client