Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f8b1f7-d6fb-4f49-bd0e-1391d9a80f9e.roa
File:                     c5f8b1f7-d6fb-4f49-bd0e-1391d9a80f9e.roa (raw, json)
Hash identifier:          LtaJ1qbeBQWlipqlVulidPedhLVF3j/y2/pgSryVlUM=
Subject key identifier:   49:7A:6E:DE:56:D6:3B:DD:EB:66:5B:0E:1C:E6:0B:1D:47:DA:21:FB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       25A65D1EF302DEDCB8155C7A0823868D0ADCF066
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f8b1f7-d6fb-4f49-bd0e-1391d9a80f9e.roa
Signing time:             Fri 03 Apr 2026 00:40:05 +0000
ROA not before:           Fri 03 Apr 2026 00:40:05 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1152::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:5d:1e:f3:02:de:dc:b8:15:5c:7a:08:23:86:8d:0a:dc:f0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:40:05 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=94456585570b9f623bfe87427e0c83ca1a71724cbe166dc43bfaebc8a6f0fc3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:80:1a:3b:9b:5a:ab:d3:9b:9d:aa:c3:ea:
                    16:1a:41:5d:44:0b:e3:fd:c2:09:2e:92:79:00:6b:
                    a8:f7:cd:e1:a0:30:92:4e:c5:98:b8:23:8f:67:23:
                    c8:ed:d4:3a:a8:0d:53:91:9d:b6:24:f7:c8:49:35:
                    2e:4a:52:71:8c:82:80:33:a3:4e:37:5e:43:a4:ff:
                    4f:33:0e:20:88:f1:7e:6f:d1:8f:21:ae:43:cc:30:
                    e3:57:fe:71:97:ec:8d:6b:51:d7:a3:6b:3c:d5:1f:
                    a6:3d:ef:c0:31:90:27:f5:e0:b8:75:43:0e:59:09:
                    b7:14:ab:2b:3d:49:08:68:58:c7:cb:3d:a8:1c:c8:
                    6e:42:b6:ba:8b:03:fc:73:aa:64:57:f7:a3:cd:8d:
                    c6:96:95:1e:f9:79:43:36:0e:45:2e:f3:ea:32:20:
                    e2:d7:98:68:63:ea:31:d3:ef:7e:9f:76:f0:ce:7d:
                    5e:47:80:b3:12:fd:ff:5e:10:51:8b:94:e0:6a:b6:
                    33:a4:38:bd:8c:f9:9e:76:8f:b4:a3:59:3b:c1:df:
                    08:c8:96:42:59:40:b6:e1:06:54:20:34:9c:d7:4c:
                    91:dc:f8:e1:32:3e:4f:32:fe:86:19:de:b5:35:38:
                    e4:0f:d7:e4:6f:a9:35:c9:00:4a:8b:2c:a3:50:52:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:6E:DE:56:D6:3B:DD:EB:66:5B:0E:1C:E6:0B:1D:47:DA:21:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f8b1f7-d6fb-4f49-bd0e-1391d9a80f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1152::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:0f:d1:b9:45:5d:8e:28:9d:25:47:1b:95:37:e3:b1:4f:
         c8:5b:96:64:fd:28:8c:10:ad:25:a1:a4:95:96:7f:5d:75:03:
         17:8b:b9:3e:0d:1d:80:cd:6e:3c:de:f5:ac:f8:03:a3:df:d6:
         29:10:3b:d9:5a:b4:49:cf:9a:51:4d:ec:e9:4c:e8:b8:01:ff:
         35:62:93:c8:18:02:de:a4:ff:f8:c9:0a:e7:23:e1:ae:46:1c:
         66:3a:c7:dc:32:f9:55:df:75:64:a7:f7:3d:6c:4e:8b:56:ec:
         c0:04:ea:a5:91:c4:04:2e:14:39:a7:ef:bd:4a:d4:86:d3:a6:
         c7:6c:d0:34:e3:2f:c2:96:ae:ed:b3:29:a4:85:e8:e5:bc:39:
         9d:91:be:0f:ad:fe:23:31:43:75:a6:c1:d6:c4:bd:13:93:a9:
         8b:4f:e0:73:81:ec:ac:26:f5:79:d8:8c:37:14:28:37:1d:c1:
         53:e8:ea:fd:df:a8:74:e8:a2:e4:42:f7:3b:0f:f7:ab:00:3c:
         d8:7e:36:5f:ce:7c:87:b1:bf:30:e4:86:32:cc:32:a5:b0:d8:
         e3:b0:03:e9:37:37:be:04:39:6d:2d:f6:87:98:02:94:c0:d9:
         71:1b:c1:29:de:81:c8:e5:7d:b9:c8:ea:c2:42:4c:45:c0:8d:
         8d:6f:b6:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:49 2026 by rpki-client