Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09cfe0b-7d59-49fa-92ee-ed56ea65961e.roa
File:                     e09cfe0b-7d59-49fa-92ee-ed56ea65961e.roa (raw, json)
Hash identifier:          1tKtMVclsUTnIYXp1lrSMDcmFRpnQGTnj2uhP0D+3Is=
Subject key identifier:   A4:6F:12:E8:B6:DE:AB:74:9B:35:6A:38:22:AC:93:C2:EF:58:52:FC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D98076A1657083D37724620B5351CBC21DD8B09
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09cfe0b-7d59-49fa-92ee-ed56ea65961e.roa
Signing time:             Fri 03 Apr 2026 02:11:34 +0000
ROA not before:           Fri 03 Apr 2026 02:11:34 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:98:07:6a:16:57:08:3d:37:72:46:20:b5:35:1c:bc:21:dd:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:11:34 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=52c05952cf4c35488b17b987ebe6508116ea1fc480ff549c191798d063b9e5ed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:51:5e:99:ff:27:30:92:42:84:be:13:fd:
                    00:d2:4a:0f:c9:0a:88:3d:b9:f0:55:3c:c1:dd:7e:
                    7a:44:3c:dd:45:14:e3:c4:bb:29:37:c1:e8:ef:d4:
                    dc:46:03:bb:01:bb:10:84:d1:1a:66:67:84:9e:be:
                    0e:4f:8e:87:23:55:e9:d6:2e:4b:45:9d:f4:62:4d:
                    13:04:16:08:dd:f7:b7:8f:bb:4b:03:ef:a6:18:9b:
                    16:77:0e:31:eb:9f:cc:20:a3:7e:71:93:5a:e5:32:
                    2e:46:d2:c0:66:ed:77:e1:26:97:58:86:b5:3c:62:
                    e6:45:3b:2a:b9:94:e5:3a:01:83:f1:03:89:03:e5:
                    86:98:28:2b:3d:a0:4e:44:ee:8e:e7:25:1e:e9:ed:
                    d7:18:40:10:28:cf:b2:5f:c3:3e:4b:99:76:1f:9e:
                    f0:db:ea:36:b8:e4:6d:0d:e9:b2:4c:12:fd:7b:cd:
                    42:91:14:df:9e:22:7a:ed:53:3a:3c:77:49:7f:a2:
                    d2:9b:ca:2d:af:07:f6:9c:8a:80:5d:5c:ea:a6:50:
                    21:c9:f6:9c:8c:c7:17:30:3d:bf:af:1d:5a:a5:91:
                    74:ce:a2:06:70:e2:a5:8a:a4:96:4d:7b:6e:fc:ba:
                    6f:3e:a3:7f:94:27:d4:a2:b1:e7:71:94:6b:6b:04:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6F:12:E8:B6:DE:AB:74:9B:35:6A:38:22:AC:93:C2:EF:58:52:FC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09cfe0b-7d59-49fa-92ee-ed56ea65961e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1202::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:b5:ca:5a:79:c0:c5:3a:b0:2e:31:e5:17:ed:4a:bb:20:
         79:4c:0b:83:9c:c0:e3:27:32:a2:93:96:3f:8b:d6:c4:ae:16:
         8d:4d:a4:61:76:9e:5e:26:a7:0c:ca:46:4d:30:e1:ff:88:cb:
         d1:4a:19:2b:db:75:f6:ab:f7:f1:ad:7f:16:87:a2:96:aa:85:
         56:2c:03:31:ef:dc:b5:55:c8:d1:f7:e6:3a:02:7e:3b:98:f0:
         0a:ac:6c:a7:a2:2d:2b:70:fb:4a:5a:c1:c0:4b:db:10:78:e9:
         03:5d:f9:52:52:49:4f:e2:77:f0:3c:92:e7:ea:6c:a1:38:51:
         3c:f5:9f:dc:72:a5:41:bd:d0:75:e6:76:57:ac:83:8e:7c:c6:
         f6:69:ad:be:7f:80:7a:c4:03:17:8e:d9:ad:8c:fe:4f:0f:0e:
         45:7a:de:5c:6f:db:8a:e2:55:25:00:a2:c3:03:b5:c1:4d:9b:
         f8:2b:8b:4f:58:98:91:ad:34:41:c4:51:2f:bd:30:f5:95:52:
         40:7f:c7:30:ec:7e:10:18:ec:22:bc:4b:71:ad:47:e5:54:80:
         8c:fc:bb:02:49:86:c9:e4:ca:c4:dd:11:0e:ab:d0:2a:07:0d:
         28:13:87:e3:57:54:26:e4:35:a0:cc:9b:a7:8e:3c:b6:d3:5c:
         c0:d3:9d:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:04 2026 by rpki-client