Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a05b19c-f5c4-4b51-b247-6645ae2e7119.roa
File:                     2a05b19c-f5c4-4b51-b247-6645ae2e7119.roa (raw, json)
Hash identifier:          de75TJZfzZUAwkdaQ+VZ6HeUQC27X7K44yr00ZnzLlU=
Subject key identifier:   15:18:82:1D:38:ED:42:9A:AA:D6:F4:DF:F0:1C:B3:F3:70:C3:00:CC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6F4D285C1023941E42CECF55815BEEC3C36BA3C8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a05b19c-f5c4-4b51-b247-6645ae2e7119.roa
Signing time:             Fri 03 Apr 2026 01:01:33 +0000
ROA not before:           Fri 03 Apr 2026 01:01:33 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1086::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4d:28:5c:10:23:94:1e:42:ce:cf:55:81:5b:ee:c3:c3:6b:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:01:33 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=9ed3160adf86147403d97ee68c57da9b381553f1ccb09a309a604df87cfac6bb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:0e:ea:be:64:74:d8:17:59:9b:81:4a:7e:
                    76:da:41:7c:fb:90:b6:4c:55:23:52:c0:ad:e7:3b:
                    1f:ef:ed:94:e9:64:d4:be:c9:c9:60:0a:cb:d0:b7:
                    f3:38:fe:6a:4b:b5:4e:55:40:8e:c6:10:53:94:50:
                    45:5e:1e:15:fe:4b:92:6e:98:51:a5:25:55:31:01:
                    b5:08:86:05:e6:83:b6:2b:ba:5e:fa:d6:12:54:ec:
                    fd:75:b4:ca:6e:eb:33:fe:0b:27:d8:7c:6f:ad:f1:
                    fb:15:13:33:82:e1:8a:9e:79:92:24:c6:74:31:80:
                    b6:63:69:02:6f:a2:48:81:5e:da:b7:aa:2f:9e:26:
                    b0:b4:12:f9:ca:c1:dc:16:bf:0c:94:03:f2:bb:43:
                    e1:d3:ed:e4:53:29:f1:84:93:c4:eb:5e:42:96:4b:
                    43:f2:fd:02:4d:5b:04:b6:14:05:84:50:1d:9c:e1:
                    07:66:12:be:16:56:25:61:49:ef:4c:27:1f:6e:cd:
                    ab:66:03:82:8d:4a:a8:fc:4f:96:78:ed:9b:91:4d:
                    5d:7c:4c:f3:f3:c9:00:d0:5e:9f:22:b6:45:06:b6:
                    ae:4a:ce:34:dd:48:59:e0:54:13:18:20:e2:c8:ff:
                    d1:70:1e:5a:43:bc:e2:9d:69:99:23:85:83:2a:16:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:18:82:1D:38:ED:42:9A:AA:D6:F4:DF:F0:1C:B3:F3:70:C3:00:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a05b19c-f5c4-4b51-b247-6645ae2e7119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1086::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:8e:bd:d1:11:2d:90:2d:25:97:cb:e0:b6:6b:a4:6f:54:e4:
         e5:93:93:3b:c7:17:3b:57:d4:96:3b:db:99:1e:f1:18:e5:fc:
         05:73:d7:9e:aa:29:af:4f:1c:59:c8:24:79:1f:57:e7:ab:10:
         4c:24:03:0b:74:b7:7c:fd:0a:34:7c:d0:0d:4a:5d:bb:6f:95:
         3a:fe:95:08:17:ae:dc:99:10:7c:2b:2e:d4:c5:64:dd:77:99:
         8d:7d:ef:d9:9b:82:c3:4c:6c:62:a7:0d:b5:61:0b:e4:d0:5e:
         fe:06:c4:3d:bf:fa:b2:be:2a:41:93:f4:3c:0a:04:ca:98:ad:
         21:9e:14:2e:87:95:47:0e:58:52:ec:40:51:04:91:12:3a:00:
         ea:ee:75:88:ac:e9:9f:09:6c:86:1f:28:dc:81:7f:7e:15:91:
         6b:b2:7e:91:b4:60:d6:dd:7e:c3:33:53:21:2c:62:3e:5d:b9:
         d0:2e:ea:b0:a3:77:75:90:d4:52:57:5e:03:e2:f2:44:14:78:
         aa:70:c3:ff:a5:45:b9:bb:6a:9f:b8:2e:f5:bd:2a:15:63:25:
         d7:64:24:e0:15:e5:c2:4c:ba:7c:ec:ec:0a:6c:15:b0:5d:9a:
         ed:45:1a:bc:f0:45:4c:4a:c8:18:a0:82:63:2f:00:b1:cc:2f:
         a4:25:cd:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:13 2026 by rpki-client