Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08cb0ce5-2fe1-4fdf-b45b-7e1cf437b085.roa
File:                     08cb0ce5-2fe1-4fdf-b45b-7e1cf437b085.roa (raw, json)
Hash identifier:          Vg17h25hcZzDSxnFt+6Gaa7ZEiTkTIXGJ6+c1p2Wm6w=
Subject key identifier:   56:DF:15:6C:F4:09:6B:0C:D5:02:C4:75:57:91:30:56:7B:05:EC:20
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7B7007D12866082A98CED71DE6B23A746454B4D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08cb0ce5-2fe1-4fdf-b45b-7e1cf437b085.roa
Signing time:             Fri 03 Apr 2026 01:40:05 +0000
ROA not before:           Fri 03 Apr 2026 01:40:05 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:106d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:70:07:d1:28:66:08:2a:98:ce:d7:1d:e6:b2:3a:74:64:54:b4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:40:05 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=bb1cc72869cd5c59ff10db60f1970269964b1356cc316c9b825c5855cd84f87f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:b2:87:4e:4e:62:e3:3c:15:83:75:08:17:
                    7c:85:67:77:df:18:f1:5f:8f:8b:15:f9:52:ab:ac:
                    c2:c4:ba:a3:d7:fd:cd:94:7c:32:79:9b:d9:47:0e:
                    f0:49:7f:77:61:4d:3e:5a:eb:ba:ec:90:fa:e9:20:
                    a6:31:50:3d:b9:c8:ee:5e:67:9e:b1:96:59:9c:00:
                    22:a9:61:d1:6f:04:f7:30:38:69:c7:2d:ee:61:95:
                    f4:07:dd:7f:78:51:37:81:b8:36:4a:bd:16:5b:4a:
                    ec:62:53:a9:a1:4c:5d:9f:f8:84:28:d8:ba:fe:51:
                    81:3e:90:79:c0:b2:4f:7a:53:60:39:d9:0b:b4:1d:
                    02:2c:6e:3d:2e:51:9b:67:03:96:da:7b:f6:69:9c:
                    88:06:42:ed:1e:f1:76:d6:cf:81:5f:34:14:45:37:
                    ca:2d:ad:40:81:a4:a1:a8:0a:70:3f:5b:2c:90:25:
                    d8:cd:b7:e9:d3:e4:da:bb:58:15:2e:09:19:c3:3f:
                    3b:29:77:14:a3:2e:af:8a:64:64:e5:8a:15:33:f5:
                    2f:ec:d9:b1:34:4b:fd:13:0c:23:fc:a6:ae:d4:b4:
                    ac:5a:5c:43:d5:e1:28:28:b1:dc:fa:8c:a9:db:b1:
                    31:a6:a2:35:f4:8e:db:c8:9b:34:f8:d2:90:c1:cc:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:15:6C:F4:09:6B:0C:D5:02:C4:75:57:91:30:56:7B:05:EC:20
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08cb0ce5-2fe1-4fdf-b45b-7e1cf437b085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:106d::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:75:3f:ef:f4:a4:1a:8b:c9:ba:70:ff:49:ab:07:34:e1:57:
         b4:4e:c3:7b:ff:5c:80:eb:47:8e:cc:20:50:6b:ec:4e:40:b9:
         69:cf:53:f9:e8:56:25:da:e3:82:13:cd:5c:2e:5c:d4:f9:8b:
         75:b3:25:84:06:f5:c7:e8:5e:36:0c:a9:13:cd:72:3b:e8:af:
         26:76:61:63:f8:0a:e9:05:47:6e:ae:49:dc:2b:1a:98:96:41:
         7e:33:09:55:f5:c7:5b:b4:51:43:67:42:11:f8:19:b2:54:ea:
         13:71:68:95:5b:08:d5:f8:38:e0:20:88:ba:56:e8:19:1c:b7:
         08:89:b8:37:64:4d:34:dd:ba:d0:78:76:88:00:26:ae:cf:fc:
         89:a2:79:1f:c1:f5:dd:3b:a0:8b:76:19:55:4d:3e:e9:62:0b:
         d3:24:af:72:78:3e:04:5b:16:00:9e:9b:3e:56:b0:3e:1b:62:
         37:de:88:c4:87:25:d6:90:b4:be:ec:80:d8:02:16:81:d7:5b:
         17:dd:5c:14:b5:3b:fb:0b:85:8c:53:12:a5:6a:01:9b:16:fe:
         9f:fc:ce:ca:5d:1c:43:89:cc:52:dd:a8:a8:b4:25:79:5c:e9:
         48:18:51:a5:29:83:a6:17:14:b5:b2:37:7c:83:32:91:d8:07:
         d6:4c:41:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:32:34 2026 by rpki-client