Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3a3d715-341d-4c76-84c9-755ebeabd0e8.roa
File:                     f3a3d715-341d-4c76-84c9-755ebeabd0e8.roa (raw, json)
Hash identifier:          GA8BQ2wnHYXEucfUMxNOXyvS+lalh6tSAfqu/sHlE38=
Subject key identifier:   52:BC:17:D5:B4:61:2B:A8:5B:1D:D2:0E:48:51:38:91:F0:5E:3B:CB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       500B04B9A97A1CA62362D5E3433F01A564BBC25B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3a3d715-341d-4c76-84c9-755ebeabd0e8.roa
Signing time:             Fri 03 Apr 2026 01:52:01 +0000
ROA not before:           Fri 03 Apr 2026 01:52:01 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1089::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0b:04:b9:a9:7a:1c:a6:23:62:d5:e3:43:3f:01:a5:64:bb:c2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:52:01 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=19f9d803209929dcf00f8a7ab8c1a37ebc98406c1d17125647204339ab49d7fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:a9:a7:9f:f8:73:cf:2f:db:36:7e:1d:e0:
                    3d:bb:58:9c:2b:f6:cb:03:18:cd:f5:85:2b:f6:cb:
                    2c:d6:76:2e:45:6f:79:b5:c9:7d:7d:18:29:88:bc:
                    fb:79:61:54:98:d4:81:e2:df:b6:bb:b7:56:69:e8:
                    83:14:ef:31:96:6b:d3:6c:69:d4:ea:59:89:59:8b:
                    2d:f1:bb:6f:dc:68:ef:79:82:a0:4f:7e:02:c0:96:
                    dc:3e:c9:f2:37:60:c8:18:e0:d7:a6:0a:04:61:b0:
                    42:d7:01:05:27:d0:3c:d9:fb:3a:5c:89:bd:19:77:
                    75:32:1f:49:08:00:61:2d:da:22:bd:97:41:ae:f8:
                    99:1a:64:f6:1c:de:72:be:75:be:0d:2b:7e:c9:ed:
                    69:bb:a9:29:2f:c2:78:8a:f0:e8:69:83:40:e8:d7:
                    14:41:33:ff:ef:ad:58:76:77:af:91:85:00:7d:ed:
                    c2:7f:60:c5:3d:78:e9:01:73:3f:63:d8:93:60:15:
                    15:9b:ca:55:8a:4f:98:d8:67:68:83:d8:e0:7a:fd:
                    df:6c:14:39:94:67:93:c9:27:0e:51:6f:6b:c1:a7:
                    26:a3:95:93:25:b5:52:75:87:5c:74:ec:fe:ec:bd:
                    5d:67:66:2a:94:cc:95:62:df:36:e0:7a:0b:f9:d8:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:17:D5:B4:61:2B:A8:5B:1D:D2:0E:48:51:38:91:F0:5E:3B:CB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3a3d715-341d-4c76-84c9-755ebeabd0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1089::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:b4:0b:da:59:1c:44:93:53:81:27:2a:97:fa:85:c8:81:
         ab:1c:b0:b9:a2:75:b0:f3:25:81:54:d5:a4:e9:c3:5e:47:3d:
         7d:55:f8:3d:a5:51:40:05:83:1b:0e:20:f3:9d:0a:6d:18:80:
         6c:56:9f:d8:62:c1:d7:0a:0b:38:ea:e3:7e:fb:03:a3:e6:43:
         37:9b:3c:81:0a:4d:f9:d4:88:65:97:7a:77:e7:b9:56:98:1e:
         55:fa:16:9d:10:46:71:5b:0d:51:5b:2f:ac:79:3a:b1:9f:9a:
         78:64:fc:11:18:c3:1e:56:88:19:93:ef:5f:b4:1b:6d:57:ce:
         c5:79:c3:32:fa:25:70:53:63:91:ad:e3:63:d9:3c:b6:68:96:
         98:80:28:2b:3f:89:81:b2:d7:66:fd:60:f9:53:a3:d6:87:5c:
         52:62:ce:97:b9:51:15:ae:b5:fa:f9:f9:ec:53:47:c3:5d:bb:
         fe:2e:70:ea:39:9c:5d:1a:50:10:28:e1:31:2e:d5:75:bd:75:
         99:df:12:b2:b8:bd:a3:9c:ba:11:93:e4:59:c7:98:58:72:06:
         a1:f5:e2:6c:f8:4e:fe:33:46:29:72:9f:76:12:68:a9:2f:d8:
         87:55:08:fd:77:b8:86:19:40:f4:e7:b8:ff:1f:16:18:80:14:
         01:c7:a9:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:30 2026 by rpki-client