Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed4977b-d026-4d02-b33f-fe6c45c335c7.roa
File:                     bed4977b-d026-4d02-b33f-fe6c45c335c7.roa (raw, json)
Hash identifier:          418uRjoz+4wUys3+AtvPWYFzAgR5csp5EMSDjDq6Bi8=
Subject key identifier:   95:6E:1A:FE:6A:06:E1:D9:A7:6D:49:B7:47:45:54:07:E2:37:8E:62
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6178DA361510D8D6A683D2E583CF4968EA012CA1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed4977b-d026-4d02-b33f-fe6c45c335c7.roa
Signing time:             Mon 04 May 2026 13:01:47 +0000
ROA not before:           Mon 04 May 2026 13:01:47 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:375c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:da:36:15:10:d8:d6:a6:83:d2:e5:83:cf:49:68:ea:01:2c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 13:01:47 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=47a5c574b5ea9c682d7a325d44f036db06d1cb18aa72871e8bd9808b1ede30c4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:ce:1d:1b:9b:67:1d:e6:8d:7e:f7:9b:e2:
                    46:42:90:05:74:67:e5:bf:22:06:74:c5:ec:18:61:
                    ae:f4:49:b6:13:11:eb:16:27:4f:4f:23:d0:6c:cd:
                    50:84:16:e7:5f:1a:22:65:ad:b5:c8:44:06:15:cd:
                    5d:ad:52:fd:0f:68:b6:2c:c6:0c:5a:60:5d:52:62:
                    39:9d:f4:44:4f:3b:02:2a:6a:64:f4:9e:5b:96:22:
                    d2:e6:1f:2f:e8:99:ed:a5:77:61:5f:44:71:8d:25:
                    1a:c1:f7:b4:c2:8a:a6:5f:96:bf:6f:de:d5:f9:81:
                    b4:56:00:75:17:ae:04:7f:98:a6:6c:d3:14:1a:ea:
                    35:9e:80:64:43:cc:12:06:51:f1:fd:a0:40:44:d9:
                    d8:72:60:b3:e0:10:ed:e6:c3:ec:70:18:5c:ea:93:
                    1a:c0:f9:b8:af:58:d0:5a:f9:49:cf:e5:7f:79:71:
                    c4:49:fe:fc:b5:1b:54:71:ee:92:13:18:63:2d:6b:
                    70:99:e1:6c:07:89:45:3d:81:56:6f:d7:ed:a9:d7:
                    e2:9d:5f:e3:0f:2b:91:97:e1:a2:0c:6d:3b:05:33:
                    5f:13:1f:78:28:f2:b4:55:5f:c6:0c:fe:b3:77:60:
                    bd:ef:70:40:27:37:66:69:08:db:a9:6f:b3:8f:bc:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6E:1A:FE:6A:06:E1:D9:A7:6D:49:B7:47:45:54:07:E2:37:8E:62
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bed4977b-d026-4d02-b33f-fe6c45c335c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:375c::/46

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:d1:cc:c4:74:52:c4:a9:d8:e0:4f:92:26:e6:f3:77:a9:
         21:be:40:dc:43:50:a5:72:e7:78:9b:67:e2:d8:36:a4:ba:5f:
         c3:4b:d4:83:70:33:fd:00:c9:6f:44:7c:f4:83:c0:1c:ec:ff:
         b2:1c:96:80:0a:f4:dc:f2:81:8e:0d:41:a2:25:6c:23:b0:df:
         b5:84:2b:77:0c:5e:1c:d3:9b:54:16:46:cd:b2:78:43:d6:92:
         73:88:91:2f:f0:de:c6:41:aa:42:7c:b0:7d:19:96:72:d3:f3:
         32:fb:37:08:20:4d:c4:e3:24:fd:08:d3:49:41:0e:82:54:de:
         97:f6:a8:24:db:89:90:6e:39:47:ce:0b:f2:cd:99:b4:a4:cc:
         88:f4:86:60:b7:08:db:df:fd:e4:88:07:96:de:9e:54:8c:cb:
         06:e1:3d:25:46:a0:63:6f:bc:53:0e:ae:2a:33:b0:de:a7:7f:
         00:8c:3b:0b:04:ea:ae:e8:86:0f:60:44:e6:fd:45:46:5a:fc:
         17:11:fb:5a:47:22:b5:cb:bf:ac:2e:a8:da:d9:04:41:e9:61:
         f4:59:8a:84:95:5d:75:46:6d:10:5f:b0:45:ec:de:a5:dc:72:
         69:cf:a4:46:24:37:2c:62:17:36:3d:87:77:c6:4f:9b:ca:39:
         23:09:ef:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:35 2026 by rpki-client