Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/260f8fc2-ebb3-4591-96fa-b985837be6a5.roa
File:                     260f8fc2-ebb3-4591-96fa-b985837be6a5.roa (raw, json)
Hash identifier:          TVz1LF1S+INy98VPkAP7ucA3Y7k9CHdzujsOHdvulkU=
Subject key identifier:   CD:CD:F4:19:49:A5:40:D4:70:19:E7:36:59:11:2B:A6:74:7D:24:F1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60357F3CD69635D2102F5A7686C2BB0E56C5540C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/260f8fc2-ebb3-4591-96fa-b985837be6a5.roa
Signing time:             Fri 03 Apr 2026 00:50:47 +0000
ROA not before:           Fri 03 Apr 2026 00:50:47 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:35:7f:3c:d6:96:35:d2:10:2f:5a:76:86:c2:bb:0e:56:c5:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:50:47 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=ee08676b04d5172d69b7a3092ace81fd6654aab9beef696a63a3697ea398896d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:16:28:19:3c:e0:58:72:d3:6c:36:f1:ac:
                    3c:2b:8b:3e:23:ae:e9:ef:55:88:cd:b7:d0:63:d9:
                    bc:e4:31:a3:49:96:56:33:bc:1f:1c:c0:5f:40:d9:
                    22:da:6f:ed:8e:9b:9c:8c:25:b7:69:96:c4:4c:05:
                    1e:c6:c4:0b:2b:2c:f3:5c:32:cf:64:7b:84:5d:fd:
                    3d:4e:51:13:d4:9f:21:f2:c6:72:39:5c:3e:22:5b:
                    db:8b:7e:80:28:3b:c2:41:cf:8b:84:2e:7e:e4:6d:
                    b5:11:45:3c:b0:0e:08:ac:cb:b6:78:2d:76:40:ff:
                    19:fe:69:d7:88:0b:d8:74:10:b6:ba:a4:dc:94:50:
                    d8:e1:f8:a8:fc:4f:ad:e9:e0:f7:51:52:26:20:51:
                    7e:c3:92:7a:bf:20:5d:1b:ab:71:dd:cb:21:63:f9:
                    1e:04:69:55:aa:d1:34:b4:e5:16:f0:b7:4d:f7:6c:
                    0c:6a:96:a4:3c:4a:6d:e9:46:de:59:4a:87:72:f7:
                    14:fd:b8:44:2f:e8:4e:c0:90:8c:e6:8d:93:11:d5:
                    ac:98:43:01:6f:9a:3a:1b:60:37:25:40:18:06:36:
                    18:06:9c:c2:c0:f8:c9:dc:a8:88:67:58:af:ce:49:
                    7a:76:b4:7d:42:01:97:ce:f8:38:62:eb:44:d9:14:
                    f3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:F4:19:49:A5:40:D4:70:19:E7:36:59:11:2B:A6:74:7D:24:F1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/260f8fc2-ebb3-4591-96fa-b985837be6a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e72::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:7b:de:3d:1d:c3:d8:5f:27:46:0e:2c:b3:fd:ff:1d:79:6b:
         fd:ae:d7:46:df:02:a7:e4:84:b6:78:01:aa:31:b5:25:8c:2e:
         13:28:5d:1a:5a:7f:d0:cb:95:bf:8e:61:14:da:9e:d2:74:76:
         00:f1:56:fc:85:8d:98:df:de:43:90:7a:59:84:d0:e3:36:2c:
         03:84:e6:75:85:95:77:5a:63:c7:e0:dd:20:06:66:af:99:99:
         0b:63:8f:9e:ff:36:e2:1c:87:89:8c:b5:9c:c6:f1:57:37:79:
         fd:3b:bf:63:d4:75:a0:73:b7:4d:71:4e:82:ca:ac:bd:79:bc:
         01:11:71:ad:43:a3:e4:e0:1b:11:f6:32:5e:96:88:da:f9:b4:
         9c:16:aa:78:c7:e5:71:b1:fd:2d:cd:bf:42:ac:55:53:d1:59:
         41:f2:a4:3e:09:d1:21:ed:24:84:b9:ea:74:64:29:25:21:7a:
         55:0e:ec:a5:c6:17:c4:6b:10:0e:93:38:9f:84:b4:dc:71:12:
         86:ce:1a:c3:d6:ee:81:43:dc:ef:69:14:b2:7f:73:b5:28:06:
         b6:95:bb:92:28:f4:a8:6e:b5:d6:df:ad:78:62:a1:11:53:3f:
         28:1b:93:65:21:46:3e:1b:75:3b:37:82:a6:85:41:f1:f0:0e:
         2a:01:09:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:42:39 2026 by rpki-client