Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/137f68e0-6b41-4edf-b2b0-0257f72e460c.roa
File:                     137f68e0-6b41-4edf-b2b0-0257f72e460c.roa (raw, json)
Hash identifier:          pvVUXrUV4h3ghQ9MCqtuEIEldyndqrKf2NLbIJPNFeI=
Subject key identifier:   1B:80:D1:D2:C4:6A:4D:FB:22:EB:DE:69:9E:EB:D8:7C:F4:3E:22:96
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B44EA29669123D244A5E7ECB70C334A1F7971D2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/137f68e0-6b41-4edf-b2b0-0257f72e460c.roa
Signing time:             Fri 03 Apr 2026 02:30:55 +0000
ROA not before:           Fri 03 Apr 2026 02:30:55 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:44:ea:29:66:91:23:d2:44:a5:e7:ec:b7:0c:33:4a:1f:79:71:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:30:55 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=61b70f11a58fc81e50b21b54728c9f17089b3f86dd7ceb9b68ab53737aaa1e55, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:96:5d:50:79:05:ce:d2:a7:da:05:13:e9:
                    36:35:a0:f4:2f:78:54:18:60:d7:b8:74:cb:a3:4e:
                    fe:26:f4:ca:0d:4c:ea:0c:33:21:6a:78:2b:44:b1:
                    03:10:72:59:68:29:da:fe:8f:cd:b1:0e:9e:d6:3d:
                    63:64:d2:7d:18:f2:a6:27:64:fb:c6:f3:43:41:75:
                    4b:e8:9b:e7:a6:21:6d:f9:cb:c2:3a:70:c9:03:98:
                    2f:83:9a:64:52:ae:71:4a:d9:f2:eb:f3:56:0d:31:
                    b7:91:a0:1d:ef:f6:15:51:af:37:37:10:43:7c:cd:
                    b4:22:e1:f1:f9:bc:86:e9:5a:33:8f:a4:68:fe:41:
                    07:4f:f8:f6:78:40:d2:e8:b9:ac:91:14:81:7f:5f:
                    7a:92:e2:be:9c:f6:83:03:45:52:85:d0:b7:ba:1b:
                    ff:ce:4b:c0:8e:97:83:55:9a:f5:41:00:63:29:76:
                    08:78:ea:fa:7a:73:4a:9e:f5:da:5a:6d:3d:f7:55:
                    96:a0:b2:67:ac:14:18:4b:7d:57:15:59:30:b4:32:
                    d4:33:d1:3e:24:0b:34:67:29:b3:01:52:9d:16:c1:
                    ac:ac:3e:e7:1d:f1:3b:00:5b:a4:86:be:f7:52:08:
                    8f:22:8d:e7:ce:f9:dc:a8:72:7a:2b:82:fa:24:5d:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:D1:D2:C4:6A:4D:FB:22:EB:DE:69:9E:EB:D8:7C:F4:3E:22:96
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/137f68e0-6b41-4edf-b2b0-0257f72e460c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:5d:65:37:90:c2:7c:6c:aa:23:60:5f:36:dc:7c:80:92:
         d0:cd:1e:9f:d4:25:9c:b2:d6:28:47:76:ad:13:4a:17:46:2a:
         56:f5:85:64:59:57:4c:fe:c8:86:49:cc:9b:39:f5:75:98:51:
         00:a6:a8:00:6d:91:55:9a:1d:a5:57:7e:c3:e2:1c:15:fe:0a:
         85:a8:8b:0e:d2:3a:2c:f7:b2:3e:09:f9:7a:66:66:29:b2:0e:
         12:72:5f:62:ed:f5:10:d5:70:8c:19:d9:71:e6:7a:dc:3b:38:
         3c:fe:57:3f:f2:c9:5e:a5:ff:2a:5c:e9:f8:77:a5:e9:95:69:
         fd:36:4b:af:79:e5:39:20:9a:17:31:2a:b2:6d:b3:7e:6f:94:
         47:c2:b3:8e:a4:97:80:d9:73:34:bf:7d:19:42:a0:7b:1e:15:
         bb:54:ff:98:0a:79:a2:bb:ee:71:51:13:54:19:54:31:70:4b:
         ee:f5:bc:a9:f1:13:79:4a:8d:65:8d:f4:de:b6:99:a6:09:18:
         39:a9:6f:77:e7:5a:a1:17:a1:1c:b4:0e:44:71:f8:e0:8e:1c:
         2b:4e:41:ec:94:10:b1:9e:24:e4:4c:ed:fe:6c:0e:41:43:c5:
         90:d2:4b:2e:7d:96:34:b7:2b:e4:49:3d:01:05:f5:dd:bb:b1:
         28:ea:88:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:40 2026 by rpki-client