Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a7bb1fd-c7a7-4bd8-9138-d83612628965.roa
File:                     2a7bb1fd-c7a7-4bd8-9138-d83612628965.roa (raw, json)
Hash identifier:          oA103r3frEp2sEf2KLF73sD6KlOpUNMJQ5tUiM4k/eg=
Subject key identifier:   63:E6:6E:12:14:80:26:88:7B:F6:E8:A7:FB:B7:0A:A4:4A:E9:DF:A1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0EE42A95D5EBBE56B0C8E5936551124FB80E52EE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a7bb1fd-c7a7-4bd8-9138-d83612628965.roa
Signing time:             Fri 03 Apr 2026 01:30:59 +0000
ROA not before:           Fri 03 Apr 2026 01:30:59 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:121e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e4:2a:95:d5:eb:be:56:b0:c8:e5:93:65:51:12:4f:b8:0e:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:30:59 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=23d3113365871ae06db1cf1332e064cf53b51638115cbbccae1b63303b0980e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:a4:51:45:87:33:c1:17:bd:23:1d:d5:76:
                    01:78:2a:5a:06:95:68:a0:b3:9e:b8:7c:e6:95:66:
                    6a:38:17:c4:5c:01:3c:26:a7:05:8d:83:c8:b4:33:
                    74:19:d7:6c:d2:d9:64:70:a4:31:2c:1e:83:1a:87:
                    40:77:dd:59:b1:6f:2f:59:03:48:f6:34:14:4e:26:
                    79:a1:0f:22:38:ea:33:3c:a9:74:60:d3:f7:1c:b2:
                    c1:63:ad:10:a4:c5:d2:f1:e9:4e:ab:6c:05:52:3e:
                    60:7b:f3:af:4a:19:97:96:24:2e:e9:53:b7:00:78:
                    ea:72:4c:8e:b9:ee:f2:21:44:c6:f4:6b:5b:e3:01:
                    6a:f9:44:45:e9:11:34:13:13:e2:0c:f4:49:ad:99:
                    b7:d0:30:0b:35:37:ef:f6:8c:65:27:7d:b2:92:d3:
                    28:8d:6c:83:5c:0a:71:3f:5c:7f:b8:45:d9:fd:d0:
                    1c:ea:61:79:97:a3:01:4a:98:72:50:3d:8c:ee:88:
                    da:3b:da:af:67:76:dc:89:19:37:4c:a6:3e:df:97:
                    ad:4c:2a:3e:ea:b3:1b:83:79:df:a1:ff:53:9c:22:
                    c0:06:ca:52:88:41:2d:f6:a2:51:83:31:d7:33:e3:
                    64:9c:45:1f:c5:b1:0f:17:63:22:fb:7f:a6:48:f3:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E6:6E:12:14:80:26:88:7B:F6:E8:A7:FB:B7:0A:A4:4A:E9:DF:A1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a7bb1fd-c7a7-4bd8-9138-d83612628965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:121e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:31:70:41:fd:9c:b4:f9:6c:34:6d:32:fe:48:04:24:d6:
         ed:9b:62:6e:18:f1:95:d9:59:b3:3e:d3:ae:ab:27:9f:6f:0a:
         89:d6:ff:13:4f:6c:9e:9e:d4:1c:f8:de:09:4a:9f:c8:32:88:
         17:14:d3:08:cb:5a:f5:a3:af:88:a6:cb:e6:a9:a2:e2:dd:1d:
         ed:3e:d9:46:34:0c:a1:bc:14:4a:33:e4:94:e3:67:2b:df:a4:
         1e:11:f8:67:80:ba:57:0c:0a:11:f5:37:f6:9a:1e:2f:c0:db:
         26:bc:a9:80:e0:25:f8:a1:f9:cb:2d:87:95:1c:94:d1:f1:a7:
         fc:25:18:da:ed:1b:67:f9:2d:4e:93:95:32:8e:4b:2c:1b:d8:
         8b:06:d5:96:e2:19:c3:cf:a5:42:98:18:bf:24:14:b5:a1:aa:
         d0:36:73:61:ce:e9:4e:4c:bb:e7:4a:81:1b:29:86:02:97:4f:
         e3:1d:71:bb:59:1f:de:30:5c:1f:2f:27:67:36:23:2d:17:ea:
         eb:1c:4b:f0:9b:19:e6:38:7d:02:24:ed:e8:29:cf:73:11:35:
         8a:86:4e:b8:41:d7:33:cb:63:fa:98:6f:4b:9b:4e:84:b1:9d:
         79:b1:22:83:65:c2:0c:b8:0f:d7:71:3d:a2:a8:53:f7:ab:a5:
         87:5f:d8:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:11 2026 by rpki-client