Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e0a1d9cc-fdd2-4cb0-bd87-d10fc7fd687c.roa
File:                     e0a1d9cc-fdd2-4cb0-bd87-d10fc7fd687c.roa (raw, json)
Hash identifier:          08F1x7x0epL1rS7f0/rXHF2sRu7oIozDXran3AqgAsA=
Subject key identifier:   56:D6:35:20:ED:13:0F:18:D3:39:32:C2:56:11:C7:5B:58:69:BF:F5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17B1313AB5B2083D9F10A393A1A0AC49A880746F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e0a1d9cc-fdd2-4cb0-bd87-d10fc7fd687c.roa
Signing time:             Fri 03 Apr 2026 00:20:04 +0000
ROA not before:           Fri 03 Apr 2026 00:20:04 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:108e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b1:31:3a:b5:b2:08:3d:9f:10:a3:93:a1:a0:ac:49:a8:80:74:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:20:04 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=c4c81eb07167ae71df807973b9dcafd0de02cc20d03f02ef3acc1d4b5277bdcf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:d3:01:e3:cb:17:51:48:9b:cc:b3:45:d6:
                    20:43:4c:ea:7c:6c:7b:d7:88:2b:b6:cf:b9:2d:79:
                    7a:36:90:25:7a:f5:17:a9:f4:69:c9:1e:13:97:5c:
                    81:9c:57:69:ad:52:70:2a:98:36:be:72:0c:a5:1b:
                    e4:a5:9a:6d:f3:2a:06:92:61:11:45:c5:ef:0c:24:
                    55:1e:98:70:45:6a:58:1e:a5:d3:d8:ae:f6:a2:72:
                    1c:6e:03:35:64:f3:f4:2d:ab:6c:bb:6e:b1:d9:27:
                    b2:33:54:fb:0c:ca:00:93:23:49:4f:94:ef:48:0d:
                    a8:34:44:6e:5e:28:ea:14:15:37:cb:18:75:4e:68:
                    bf:52:53:fc:86:26:06:e9:6b:08:30:b0:9c:41:76:
                    fa:8e:24:ad:3f:f4:07:c6:6f:ff:bc:21:fa:a4:0a:
                    ef:2a:fb:57:d4:01:4c:a3:18:84:58:23:3d:b5:68:
                    e6:04:fc:22:51:db:5b:f0:b4:a4:9e:20:f8:d7:7b:
                    a9:88:ff:0c:57:f1:ad:cb:e2:66:59:90:f1:0b:9b:
                    ac:f0:11:3d:e4:dc:6a:9f:35:f4:1f:f8:30:80:a5:
                    7e:fe:7d:77:6a:9a:f1:51:4c:97:fe:9e:a8:25:62:
                    be:01:03:06:e0:6a:de:81:38:32:e0:2d:98:d6:d9:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:35:20:ED:13:0F:18:D3:39:32:C2:56:11:C7:5B:58:69:BF:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e0a1d9cc-fdd2-4cb0-bd87-d10fc7fd687c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:108e::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:89:42:6c:89:ad:de:86:b4:ea:9b:9c:42:4f:cf:80:c5:63:
         e7:03:23:41:db:94:f5:f1:d8:92:8c:07:e2:b2:1f:de:a7:21:
         27:40:f3:ba:9f:f1:f5:d1:76:c3:42:f4:54:e2:3f:ed:1c:77:
         8a:c2:18:1e:52:a2:33:1a:a1:95:04:99:ce:25:ed:54:27:ff:
         db:f0:4c:c0:f2:42:75:b8:f3:28:81:1b:03:63:ef:72:55:81:
         1b:4c:37:37:f6:a9:a8:81:3e:5b:12:54:ed:1c:eb:1a:0f:87:
         16:2f:75:98:20:3b:e7:89:18:be:9f:87:b1:8f:06:21:b3:82:
         2f:24:4f:92:9f:eb:9c:3d:67:ba:e3:bb:de:6e:90:56:7a:2a:
         af:29:7c:ab:95:29:b1:76:9f:5d:95:37:c4:f2:cd:4b:bc:bc:
         d3:5d:27:1b:ae:2e:29:a0:7e:cc:6f:9c:77:4a:88:d2:82:27:
         cb:5d:1d:3b:98:e6:c6:b8:c6:35:ba:b8:e4:03:38:c9:e1:0e:
         7f:b8:0f:a1:46:9d:14:fb:1b:94:4f:08:bb:5b:bd:08:21:62:
         a2:d7:5b:03:21:b4:bb:9c:05:37:93:5e:d3:e0:a3:2b:db:bb:
         07:3f:d6:16:5e:7d:24:26:d9:d9:37:75:d1:e6:a5:f8:82:e3:
         07:dd:ec:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:50 2026 by rpki-client