Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abe81c47-4ef7-4d69-b2cb-0bcc4cb95cf5.roa
File:                     abe81c47-4ef7-4d69-b2cb-0bcc4cb95cf5.roa (raw, json)
Hash identifier:          Q92+PncN8y7kyy51m539xjngMwFyll7Ia8vYWuDqjY8=
Subject key identifier:   86:E3:A8:7D:00:9E:D2:67:50:7B:FE:6B:D5:EE:9C:83:5B:88:6C:FC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15721D007B4324D6F2A7EF5F7E13320BC646E02B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abe81c47-4ef7-4d69-b2cb-0bcc4cb95cf5.roa
Signing time:             Fri 03 Apr 2026 00:20:06 +0000
ROA not before:           Fri 03 Apr 2026 00:20:06 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1146::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:72:1d:00:7b:43:24:d6:f2:a7:ef:5f:7e:13:32:0b:c6:46:e0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:20:06 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=d90777f538de22afa812926c59f82ca6390632a4c4db684b85c7097e3861b975, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:79:a5:01:c7:12:d2:73:03:50:ab:37:99:
                    6e:6b:70:cc:f6:d7:e7:9d:be:00:9a:c3:80:2e:ff:
                    b0:89:ee:86:5d:38:6d:92:8c:03:54:66:80:3b:ae:
                    75:d4:87:90:85:eb:46:ea:f3:12:7c:fc:4e:b6:d2:
                    0a:b0:90:79:68:80:80:9c:f9:e5:fd:56:f0:14:7f:
                    37:d1:02:b6:43:19:b5:55:bd:41:a9:f2:cc:2d:cf:
                    95:cb:cc:26:5a:43:88:ab:0b:52:59:03:3b:0a:36:
                    c5:f0:67:b2:6b:f0:a5:79:d9:1b:cc:61:b3:a0:21:
                    21:1a:b5:94:f9:f3:8a:5e:e8:0a:ee:85:66:ad:44:
                    3c:86:77:11:db:19:e7:b2:d7:53:b9:96:d1:7b:5e:
                    9b:62:c5:c9:91:9e:e5:5e:91:7e:8c:34:9c:62:85:
                    d0:9b:39:66:c0:dc:5a:78:0a:45:b4:00:7a:b2:8b:
                    90:6b:59:a4:da:1d:bc:0a:01:b7:5e:15:32:8d:cf:
                    7c:1a:cb:c0:c7:c0:b2:10:16:dc:fe:3a:f9:59:7e:
                    63:a5:5b:86:a0:94:b7:6f:b2:ce:55:af:79:b2:2e:
                    ee:23:96:d5:57:95:97:1f:16:05:3d:dc:b8:27:9c:
                    cb:1d:42:9a:02:01:6b:ea:28:5d:d4:6d:0d:b0:c2:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E3:A8:7D:00:9E:D2:67:50:7B:FE:6B:D5:EE:9C:83:5B:88:6C:FC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abe81c47-4ef7-4d69-b2cb-0bcc4cb95cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1146::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:95:c7:e3:2c:d8:95:55:5e:86:2b:b7:88:ea:43:e8:0b:
         30:a4:47:7b:d0:10:ae:dd:bf:e5:ae:d4:d3:a5:0f:ce:8d:f7:
         c7:45:c4:c2:7d:14:25:94:74:f0:b3:eb:2e:c6:3e:52:76:c2:
         f3:2a:67:a0:a7:62:ef:d4:b9:a1:8b:1f:ec:c6:23:36:70:47:
         03:f2:b5:01:38:cc:be:01:94:2a:e3:ba:ef:75:a0:b3:f8:44:
         eb:dd:15:f6:60:69:ab:37:e7:d7:d5:dc:0d:dc:7e:2c:8a:85:
         d3:3b:8d:7b:f5:e7:f4:14:1d:b5:37:60:1b:05:dc:55:c6:d3:
         ea:71:a3:ac:1f:ee:0d:cb:a8:a0:7d:be:a1:43:6c:62:05:3a:
         49:a7:73:96:a0:df:35:57:f1:e3:1b:b1:e9:56:9e:04:75:2c:
         4c:92:e2:17:3d:51:bd:60:c4:76:fe:48:7a:01:f8:cb:f3:b7:
         e4:01:3f:85:5b:14:60:5d:25:a8:35:d8:cc:bf:af:77:0c:a7:
         e0:2f:45:5f:56:0e:f4:83:81:c2:23:45:30:f9:a3:4b:ac:57:
         0d:a1:ef:1d:f0:f2:79:c0:98:86:7f:9f:7e:95:23:9e:5c:59:
         b0:81:c7:78:dd:16:5f:87:9e:1d:da:7b:d5:2c:53:20:ce:b5:
         c8:d3:5e:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:45 2026 by rpki-client