Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7396aac5-4fb9-449e-a575-8b4cb6ea091f.roa
File:                     7396aac5-4fb9-449e-a575-8b4cb6ea091f.roa (raw, json)
Hash identifier:          9BFMkEiHRBFxvtcJ6QvyT1fkXtCNe40j+qYXVv/5FRs=
Subject key identifier:   EE:2B:3E:A7:C4:8B:0A:79:83:9A:91:46:FA:B1:69:8A:A8:35:62:C8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2209DCB446DE2E59B4195F6D57B1D7188907EC6F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7396aac5-4fb9-449e-a575-8b4cb6ea091f.roa
Signing time:             Fri 22 May 2026 00:00:04 +0000
ROA not before:           Fri 22 May 2026 00:00:04 +0000
ROA not after:            Thu 20 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:09:dc:b4:46:de:2e:59:b4:19:5f:6d:57:b1:d7:18:89:07:ec:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 22 00:00:04 2026 GMT
            Not After : Aug 20 23:59:59 2026 GMT
        Subject: serialNumber=793890b01f522dd96dc42685c1513a4541e3a68ee55a89cbf2282c66476ea3d5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:cf:3c:ad:57:c1:a2:10:11:75:f6:ab:f5:
                    cb:97:29:6d:71:82:5c:c9:e5:04:b3:65:1a:d5:30:
                    be:bb:75:b2:9b:a0:a5:9f:24:04:f2:94:f1:68:46:
                    34:c8:9e:ae:d8:21:44:8b:67:0b:c5:21:ef:2b:2d:
                    3b:34:46:ee:2e:9e:d4:b4:ef:aa:12:b6:d6:8c:33:
                    ed:77:32:bb:fb:cf:ad:2c:eb:17:37:2c:f5:f2:84:
                    0e:47:37:3b:1d:b7:e1:35:06:cc:22:2e:3e:cf:b3:
                    0b:e5:3d:e2:16:44:aa:e7:78:2b:9e:1a:6d:6b:d4:
                    60:cb:ce:a7:04:f7:4f:90:d5:a0:63:23:69:70:69:
                    67:ab:da:3a:bd:1a:f1:df:72:6c:50:e7:11:b7:26:
                    a7:0e:44:15:c1:cb:8a:b9:71:f9:1b:7d:dd:31:4b:
                    83:7f:17:f0:00:75:5d:48:3b:f3:f3:af:41:98:fe:
                    e8:67:b6:97:cb:ca:10:65:77:6a:3a:8c:ab:92:88:
                    b3:ab:f7:79:0c:77:51:1e:91:aa:35:9c:ca:68:c9:
                    35:fe:74:cd:9e:73:24:e9:34:e7:0f:27:0d:e0:18:
                    fa:3a:a5:6a:90:cd:1a:bb:00:5d:01:15:8a:12:6e:
                    41:4c:b4:0e:ac:a1:c1:58:8d:80:dd:fc:5a:e0:8a:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:3E:A7:C4:8B:0A:79:83:9A:91:46:FA:B1:69:8A:A8:35:62:C8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7396aac5-4fb9-449e-a575-8b4cb6ea091f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1244::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:39:89:7c:a9:47:32:b7:36:23:8e:cd:3e:07:43:bb:73:
         10:57:61:7e:a6:2a:6c:a3:3d:24:f6:41:7f:04:93:82:b9:50:
         e2:a9:0b:87:70:28:dc:c8:98:9e:19:34:47:02:39:8d:6f:0a:
         fc:ef:9f:58:f6:0d:9a:a9:05:f6:67:1a:04:e7:55:ab:65:72:
         a8:a9:b2:d6:80:d4:f4:fc:da:6f:f0:55:1d:eb:fd:37:b3:d5:
         de:5a:3b:d1:4e:ca:0f:aa:95:43:3c:a0:af:5f:19:7e:89:74:
         55:7f:5b:fd:13:ad:7c:de:50:16:fb:15:30:48:34:73:ae:63:
         f0:16:97:21:ce:2d:e2:66:8c:c5:8c:43:d7:47:17:e2:9f:ac:
         af:af:7d:d6:e5:87:14:17:03:29:85:0e:03:34:de:a7:66:07:
         08:64:fb:52:3d:b9:b5:ef:42:e3:8b:30:20:b3:ca:aa:e4:c6:
         be:03:8f:0a:25:2b:e8:7c:bc:33:4b:13:06:a0:25:c4:56:a8:
         c3:3d:77:75:36:73:55:c1:25:d7:f5:86:9f:f0:d5:6c:74:d6:
         da:bc:41:d3:0e:f1:0b:e1:8f:87:f0:ea:05:e0:f9:b7:0c:a8:
         d2:1c:b4:15:c6:72:a6:f0:c2:22:11:eb:a3:0f:71:da:87:bf:
         b9:b5:61:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:39:55 2026 by rpki-client