Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3f30c2-9192-4fc2-9e7c-19d9797a10ac.roa
File:                     bf3f30c2-9192-4fc2-9e7c-19d9797a10ac.roa (raw, json)
Hash identifier:          odV8yMn19M/2YFX+HaRTGPEm4PL03LKnxXEM1FR3VCw=
Subject key identifier:   FD:F3:32:C0:8E:87:0A:90:07:F8:62:5D:02:D7:46:CC:A5:ED:06:D1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C00FB39160F3A1493820F702546F928EB4169BB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3f30c2-9192-4fc2-9e7c-19d9797a10ac.roa
Signing time:             Mon 04 May 2026 07:30:13 +0000
ROA not before:           Mon 04 May 2026 07:30:13 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:337c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:00:fb:39:16:0f:3a:14:93:82:0f:70:25:46:f9:28:eb:41:69:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:30:13 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=c22bfb8a469532e03f94fb9cc893cb22eb29bf93a14fab5b71287c9f83f07556, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:53:25:dc:d1:ed:d1:d8:ea:b1:5b:12:e7:
                    54:bf:6f:40:87:2a:8f:9d:2e:a7:b2:12:85:8d:61:
                    da:65:01:bc:0c:86:fe:10:27:dc:53:3a:11:56:f6:
                    c6:1d:0f:39:b8:c2:6e:7f:87:fe:14:44:be:23:74:
                    77:5c:36:7c:86:c3:2a:f0:0a:54:99:ff:b8:f1:20:
                    03:59:a9:8e:cb:76:f3:57:3d:bc:33:74:1b:fc:b6:
                    97:7c:0d:f5:20:a0:a9:2b:40:7f:99:8d:cd:3f:ef:
                    24:9b:3d:7d:c1:7a:78:93:70:e2:78:c0:00:ba:b8:
                    5e:48:55:c1:e2:a5:a7:0b:37:29:63:0f:fd:fa:93:
                    db:5f:f2:88:89:92:18:9e:01:ab:4e:d1:6a:c6:39:
                    18:11:17:b5:77:3e:11:71:f6:f7:1f:dd:d9:47:d2:
                    25:7f:e2:b0:bc:ff:c6:b7:db:2b:6d:0d:7c:17:0a:
                    7a:17:64:ac:0d:cb:51:f3:13:b2:64:a6:92:82:e6:
                    1a:9c:7c:d1:b7:d4:3e:6d:11:c5:3e:ff:f9:86:a1:
                    7c:db:d2:ec:70:18:d4:35:35:03:be:7d:4b:ec:69:
                    e4:a6:37:1e:bf:49:fc:ae:5f:00:15:03:a7:fd:b9:
                    c2:9a:4f:b0:17:ba:93:fa:d8:22:61:8e:62:4b:0a:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F3:32:C0:8E:87:0A:90:07:F8:62:5D:02:D7:46:CC:A5:ED:06:D1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3f30c2-9192-4fc2-9e7c-19d9797a10ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:337c::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:d7:0a:3b:6c:8e:d8:56:40:c1:85:ba:49:55:60:27:e1:
         2a:3a:0d:94:c3:a3:c3:ea:17:0a:f0:55:a6:9f:eb:50:a1:bc:
         93:0a:0b:a1:99:19:8f:24:06:d0:77:92:de:a4:2e:a1:81:2e:
         b6:a5:8e:21:27:d4:a9:d5:1f:6e:da:02:11:93:8e:55:c8:f8:
         b9:83:99:8e:c7:18:ef:ec:ce:d6:c2:4f:c4:74:70:33:80:4c:
         f3:7e:e5:90:48:c5:c6:00:e1:78:c3:ab:2f:22:f0:41:f0:a7:
         a4:1f:c4:4d:45:02:01:37:1f:d8:56:49:23:5d:22:82:14:c1:
         be:ce:41:ef:40:05:34:76:29:44:a1:d0:07:5a:2a:e0:c9:8e:
         22:31:1a:6c:b7:a5:47:bb:1c:28:83:50:44:dc:dc:47:2d:f7:
         39:73:c5:0b:a5:6e:3d:97:35:3e:1d:cc:a6:f9:0d:92:0d:17:
         35:98:45:c4:2c:b1:82:ce:b0:1b:ca:f4:f1:ea:f4:3b:a6:d0:
         8c:38:d8:f0:42:64:1b:2d:fc:4d:f3:e6:a1:57:9c:0e:a1:01:
         ec:be:63:ca:28:22:1d:b7:f6:b2:2a:ea:c5:b7:ce:a1:1a:ea:
         15:ec:57:c9:ff:47:b7:68:da:54:21:09:ed:71:ae:51:1f:ae:
         1f:b5:32:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:18 2026 by rpki-client