Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be18597e-05ba-4288-90b4-047276bb428c.roa
File:                     be18597e-05ba-4288-90b4-047276bb428c.roa (raw, json)
Hash identifier:          EbUUdLoJ7PiqM417FxpqKq0DIVxclZydJvkhkPZwnwQ=
Subject key identifier:   A4:81:70:E4:05:A6:2E:33:01:01:EA:10:4F:BC:D2:DE:CD:78:1A:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12E528E6CE8A06C4A980FD6031184071A376D326
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be18597e-05ba-4288-90b4-047276bb428c.roa
Signing time:             Mon 04 May 2026 13:41:47 +0000
ROA not before:           Mon 04 May 2026 13:41:47 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3778::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:28:e6:ce:8a:06:c4:a9:80:fd:60:31:18:40:71:a3:76:d3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:41:47 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a9721c8f1e8cc120e5709667f3c234636fc9746d28004b761f6ab564661a113d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:01:c1:27:09:76:db:eb:e5:eb:e2:6b:8c:
                    b3:98:89:37:92:91:e5:46:f4:f1:a3:8c:ba:c9:3c:
                    dd:75:34:96:f1:f1:e8:f3:6f:38:15:62:29:d8:8f:
                    43:f9:e7:fb:7a:b1:35:64:87:3d:b3:d7:3a:69:b5:
                    86:18:a8:cc:fe:0d:f2:4c:3d:ac:5a:93:84:b4:42:
                    f2:a7:72:71:cf:b8:74:4d:f3:38:c0:27:61:87:48:
                    f5:59:05:76:cd:4b:65:38:32:c0:f6:a1:40:98:71:
                    bd:54:ca:22:c1:08:51:d2:87:0b:28:2f:50:56:ca:
                    98:69:3b:f1:04:f7:3f:e2:82:22:a2:be:c0:a6:d4:
                    f1:5d:32:4f:b5:09:1a:0c:d5:83:8f:d4:23:85:c6:
                    29:db:2e:1c:31:dc:47:df:f5:73:5e:20:c8:70:2a:
                    06:b1:c0:2f:05:2c:80:f8:e8:33:47:b0:5f:18:a0:
                    1c:2a:46:bd:9b:3d:25:a2:32:fb:9b:72:9b:c5:a6:
                    97:c9:da:b8:c2:a3:30:ce:99:77:a3:f7:bf:11:c9:
                    11:ae:af:99:f4:5b:76:07:25:bc:f5:37:9b:83:8e:
                    10:a8:6b:f9:34:d4:a8:28:19:8a:67:0a:80:ff:38:
                    1c:06:c6:de:f4:62:ad:0a:d0:36:09:26:00:4a:05:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:81:70:E4:05:A6:2E:33:01:01:EA:10:4F:BC:D2:DE:CD:78:1A:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be18597e-05ba-4288-90b4-047276bb428c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3778::/46

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:84:7f:5b:fe:06:f3:52:8f:85:33:18:0d:ca:48:4f:aa:
         5c:10:c7:44:75:95:15:57:59:b4:f2:1a:c3:4e:8a:b6:8f:4c:
         b2:e0:14:aa:52:b1:04:d7:fe:5a:ed:cc:78:6f:4e:51:5b:51:
         6e:47:59:e9:5b:8a:57:aa:fc:d0:ed:09:22:00:1f:7f:0f:f9:
         f2:76:a7:7d:22:f7:54:b1:d2:09:b6:23:00:f9:af:26:c5:71:
         2f:3c:00:8e:71:26:d6:60:62:7f:c7:02:81:37:2f:70:c1:50:
         a6:e2:57:1e:67:4a:3c:32:7b:5d:f1:3a:4f:69:82:c9:d4:cd:
         bb:58:ff:3d:89:b7:73:fc:89:47:78:5d:84:3f:fa:83:b6:d9:
         c3:0d:28:67:59:e9:4c:eb:af:1a:7b:03:d1:70:c8:a4:36:97:
         9e:dc:12:4b:47:4a:6d:e9:4b:51:f0:5b:89:8f:c9:16:75:f4:
         22:06:85:eb:05:3e:2d:d9:bf:2e:1a:d2:7c:8d:7a:33:d7:01:
         d4:bc:1f:3f:b3:42:6c:06:ef:e9:d2:60:ef:f3:3e:54:10:c1:
         ad:32:ff:6d:34:f3:a5:8a:c3:a3:d2:ca:d6:c0:2c:f7:1d:b7:
         e2:c3:04:dd:08:f3:01:32:5c:35:82:bd:08:59:de:8a:a1:6c:
         5c:81:89:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:38 2026 by rpki-client