Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3630dfc0-0b08-4254-b82b-4d7eb03fc9d3.roa
File:                     3630dfc0-0b08-4254-b82b-4d7eb03fc9d3.roa (raw, json)
Hash identifier:          x8JqY2vftLRqAzvkfV734JJ3LdWeSmC3wzK/UEOEIaY=
Subject key identifier:   03:FD:D6:FB:CA:23:9F:5A:E9:D4:72:22:32:0F:CF:AF:A0:B3:AA:FE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       74F6B581B891AC3426F66B74ABA2087D4C087E2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3630dfc0-0b08-4254-b82b-4d7eb03fc9d3.roa
Signing time:             Fri 03 Apr 2026 01:10:53 +0000
ROA not before:           Fri 03 Apr 2026 01:10:53 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1053::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f6:b5:81:b8:91:ac:34:26:f6:6b:74:ab:a2:08:7d:4c:08:7e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:10:53 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=5e36eae010f65ecefa423ddcfea0b09708639f49597ac59293bb99607453a916, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:e5:3c:e2:a0:74:2c:a4:1c:70:1b:fe:12:
                    c9:39:d0:64:12:3b:20:80:ab:5c:a4:40:39:f9:6b:
                    40:83:15:70:90:b6:be:b3:5f:ee:69:ca:3e:80:8b:
                    ef:55:d6:fb:dd:32:f6:85:3c:60:86:51:e3:2e:42:
                    b8:97:9b:b8:b9:17:fd:7a:fc:74:18:97:3f:78:04:
                    88:8c:f9:26:24:61:50:c9:35:f8:66:3e:f1:c3:fc:
                    bb:df:f5:d0:67:7a:78:a9:41:86:85:8e:e1:62:e2:
                    46:bf:2e:8c:db:4e:42:59:6a:c1:42:59:c3:07:ad:
                    36:e2:e0:f6:75:45:27:f0:b1:10:6e:35:d4:59:c4:
                    18:77:d6:66:4e:f6:1f:85:5a:26:77:4e:5d:9e:8a:
                    ea:64:39:d3:10:f6:97:b3:6d:6d:12:78:9f:26:b9:
                    22:fb:77:c6:1b:43:7f:2d:4a:57:94:0a:5e:4e:d4:
                    cc:f4:b3:5a:f0:be:fe:94:a4:e3:bc:ad:41:84:52:
                    9f:a3:ba:0f:91:ed:ca:4a:7b:53:39:24:1b:b1:67:
                    a0:54:12:87:ea:4c:e7:d1:d9:d7:ef:c5:98:ff:3f:
                    01:e2:78:c1:e1:4b:c2:8c:9c:b4:79:bc:3d:5d:e6:
                    81:f4:b2:69:94:c6:d3:82:5a:bb:ea:a2:ac:d9:01:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FD:D6:FB:CA:23:9F:5A:E9:D4:72:22:32:0F:CF:AF:A0:B3:AA:FE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3630dfc0-0b08-4254-b82b-4d7eb03fc9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1053::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:32:01:8f:bf:91:79:17:89:0a:0a:e0:83:b2:ff:1e:aa:9c:
         d9:04:42:a1:d3:19:f0:09:bd:89:c8:a5:13:20:95:f7:20:38:
         48:5a:ee:93:72:1b:99:0f:3d:b7:f6:bf:85:c4:68:76:62:49:
         f0:2e:90:ef:8b:7a:b8:9d:ee:dc:39:1b:23:ed:03:6d:7c:c5:
         55:0d:77:9d:a9:98:91:52:4c:e1:0e:e2:38:c3:e3:5c:85:97:
         3d:19:0b:d9:16:29:51:7f:25:d2:bc:c6:15:c4:99:2b:89:06:
         db:ab:ce:71:71:9c:6d:30:27:be:d0:3f:b1:a6:3b:78:70:74:
         7e:dd:ce:81:e5:68:8b:8b:ff:1f:99:9d:3c:06:fa:9d:ac:c2:
         7c:d0:2f:2b:74:37:ab:67:70:2e:52:0a:b0:2e:31:f5:42:bf:
         75:ec:8b:bc:59:bb:0f:08:18:ff:13:7a:4a:17:60:6c:5f:56:
         45:68:63:19:b6:f3:c9:83:11:39:cb:98:d8:a3:2b:77:6b:93:
         d0:88:15:cf:d5:4b:c4:d2:5b:9b:e0:66:25:95:d1:4c:14:a5:
         38:9c:40:0f:a9:52:ed:9e:9d:8b:46:51:15:21:9d:34:38:88:
         cf:9f:08:5a:46:25:df:87:0b:d4:79:3e:36:34:94:bd:c6:26:
         89:b8:08:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:53 2026 by rpki-client