Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c96b710-ce8b-4675-bd29-d80a0f80e6f7.roa
File:                     9c96b710-ce8b-4675-bd29-d80a0f80e6f7.roa (raw, json)
Hash identifier:          +T6IHZgbkBr1L7TZxFraurW0hcNNk/ch7HdpdTGnRJI=
Subject key identifier:   85:8F:F5:56:6B:F0:B0:72:4A:76:79:81:CC:67:37:77:BB:D0:E3:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56BFFCCC0A6CE91AFA482849BF66768ADD2594
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c96b710-ce8b-4675-bd29-d80a0f80e6f7.roa
Signing time:             Fri 03 Apr 2026 00:41:18 +0000
ROA not before:           Fri 03 Apr 2026 00:41:18 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:fc:cc:0a:6c:e9:1a:fa:48:28:49:bf:66:76:8a:dd:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:41:18 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=5054ef42ab20757da4b5478b44e3d3ee049e622511aac8841d888ad8861b40aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:64:1c:52:6d:d1:08:06:9e:88:5c:2e:92:
                    2d:4c:e7:99:8c:54:0c:b8:83:4e:46:9d:65:86:76:
                    ec:db:54:c9:a1:91:4d:5c:1f:b9:c2:b7:47:97:76:
                    31:ee:71:90:96:11:76:6a:80:e4:ab:9a:e3:73:3d:
                    cd:4e:11:8d:2d:f5:fb:62:a0:d6:ac:5f:5c:41:d1:
                    9c:35:6f:63:80:63:be:af:9e:7f:54:51:09:e0:c1:
                    e4:49:52:b1:d1:77:9d:4c:d9:dc:e8:66:2b:a4:4f:
                    d6:8b:0b:d7:5a:8d:72:d3:f1:1b:b5:7f:f9:2f:a3:
                    56:51:a3:a8:5b:93:f3:84:af:f0:4e:13:a7:f7:be:
                    d9:d6:8e:78:f1:5b:62:71:e1:4e:c7:0d:b8:32:6c:
                    46:a8:24:e5:4b:7f:3a:77:df:16:f9:88:f3:89:b7:
                    07:de:bf:a3:50:c9:d1:e3:dc:3b:4d:5b:25:68:a4:
                    10:b4:c2:0b:58:fd:c3:db:fb:2b:78:51:c9:6c:ad:
                    49:b8:a6:df:3a:90:f0:d8:1d:07:8b:18:00:51:9b:
                    b9:13:0a:8d:86:b2:23:98:11:8b:99:11:f5:24:0d:
                    67:7c:7d:ba:d3:6a:77:70:66:01:8e:95:6d:f3:c9:
                    54:6e:d3:df:c1:36:d7:5c:6d:ba:1e:36:09:dd:43:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:F5:56:6B:F0:B0:72:4A:76:79:81:CC:67:37:77:BB:D0:E3:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c96b710-ce8b-4675-bd29-d80a0f80e6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:7f:fa:93:de:06:3b:08:67:ce:79:d1:10:2c:cb:62:8f:
         83:d2:35:b7:7e:2e:cc:b6:42:82:2e:85:29:a0:e0:4f:74:50:
         7b:62:54:56:0c:63:5a:2a:11:7c:ce:28:ef:01:40:df:ca:d9:
         3b:ac:ca:c3:c9:fd:96:6d:95:9c:15:78:be:e7:6c:f6:8b:63:
         0f:02:c2:34:2e:0a:76:8c:5d:4e:c7:30:44:c0:87:92:a6:19:
         cb:4f:bb:a6:69:26:6b:5e:a9:bb:af:c8:40:cc:82:52:9d:ca:
         40:43:30:0b:3a:15:98:ba:aa:ac:22:c0:98:4f:fe:23:a9:7f:
         1a:76:c8:45:5e:f9:10:fc:59:c0:aa:c2:b1:13:62:e3:2b:f1:
         b4:20:89:34:c7:b1:bd:40:7a:52:0b:04:8f:48:95:78:c7:52:
         e9:90:da:81:ec:08:77:db:d1:7d:a8:62:94:10:59:b9:77:bc:
         e1:f9:cb:f4:64:88:54:6a:ca:ba:4a:a2:0c:c4:e6:fe:0e:6a:
         73:26:13:18:a8:9f:10:c7:67:f2:fc:37:8c:02:c8:7a:92:ca:
         d6:5c:3a:84:fc:1d:ed:27:82:78:98:21:f7:4c:46:09:32:7d:
         50:2f:6e:71:c2:a8:76:65:66:e2:47:c7:8b:ce:c1:3a:f1:1f:
         69:d8:e7:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:43 2026 by rpki-client