Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61c928ad-eceb-4fcb-bd29-c2b1b2b1aff5.roa
File:                     61c928ad-eceb-4fcb-bd29-c2b1b2b1aff5.roa (raw, json)
Hash identifier:          hcU60HzTvHdp78RXUkW8GC98YTlR5aErBSVW8M0M04c=
Subject key identifier:   C2:AB:F0:DA:C0:52:8F:EB:C4:F8:37:69:6B:7A:20:19:58:B7:DB:60
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       724D42182F80790BA479016A148A66A4A6B0B691
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61c928ad-eceb-4fcb-bd29-c2b1b2b1aff5.roa
Signing time:             Sun 03 May 2026 00:21:47 +0000
ROA not before:           Sun 03 May 2026 00:21:47 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1dfe::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:42:18:2f:80:79:0b:a4:79:01:6a:14:8a:66:a4:a6:b0:b6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:21:47 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=5d08ae8159b205f21bbd216536ad829abb19525b54740affe59cb2f5c982a522, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:40:ee:4a:26:b5:09:06:dc:4d:b8:84:d8:
                    7c:19:cc:91:06:d3:d2:72:46:e7:bf:17:bd:9d:99:
                    8c:35:e8:57:2d:ce:b8:72:ba:25:d2:58:f2:e9:23:
                    1f:34:4d:c3:a1:0f:00:0d:b0:77:17:fb:b4:f2:6d:
                    43:48:72:29:9c:88:92:06:8f:52:67:39:58:db:73:
                    4a:c5:3d:b1:4a:26:17:15:28:f1:d0:8d:52:a2:25:
                    6a:f5:ce:80:fe:8f:73:8f:6b:c3:da:1f:a2:ea:83:
                    8f:3a:74:b5:b5:a2:95:5e:66:02:70:d8:10:c4:7e:
                    78:09:00:80:d3:96:21:73:88:c2:23:5c:40:65:b2:
                    19:54:49:73:5d:3a:23:8d:56:c7:f5:ce:b1:4b:9b:
                    2a:47:65:f8:de:9b:74:7d:bb:51:e0:96:07:f4:2d:
                    d9:98:6b:75:2f:9d:d8:d4:b7:ff:c4:54:59:35:6d:
                    24:d3:c0:af:93:ec:a2:14:9c:27:fe:6c:88:85:97:
                    73:ff:7f:a0:e0:11:d9:59:f7:2f:64:19:c1:f2:78:
                    bb:e3:0b:3f:2d:1c:c1:4b:38:a3:41:b7:75:63:16:
                    5a:7b:5a:ce:25:b1:56:0c:45:34:0a:62:f1:4c:99:
                    98:c4:97:16:17:22:67:fc:a9:b9:77:3f:91:1e:5e:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:F0:DA:C0:52:8F:EB:C4:F8:37:69:6B:7A:20:19:58:B7:DB:60
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61c928ad-eceb-4fcb-bd29-c2b1b2b1aff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1dfe::/47

    Signature Algorithm: sha256WithRSAEncryption
         68:40:f4:d5:39:17:1b:89:bb:06:30:30:5f:d8:75:4d:da:46:
         36:ce:6e:19:68:19:ed:e7:fd:3d:2d:fe:70:32:db:e0:97:cf:
         cb:60:82:79:80:dc:27:af:3a:78:dd:c6:e9:11:71:f5:c6:0e:
         11:40:5b:bd:f5:3e:3c:78:9f:fa:92:4d:2d:dc:07:0f:9e:ca:
         fb:1b:7c:35:c4:d0:34:d4:f7:cf:35:d1:58:bf:d8:f5:9b:f8:
         fc:d6:62:a4:1f:c9:fd:bc:56:80:47:74:aa:67:4d:e4:a2:26:
         d5:39:fa:93:8e:c3:24:ce:8e:3b:53:03:1f:9b:c8:6c:23:b7:
         e9:99:ce:a6:11:af:09:b7:f3:0c:33:31:ea:a0:92:07:2b:a2:
         77:d7:6b:44:a3:19:31:b8:a5:02:5b:f4:12:68:f3:39:40:ac:
         70:9c:63:4e:99:7b:24:ae:fb:79:08:45:aa:60:b2:0b:88:4d:
         bb:20:12:ab:41:30:a2:75:7c:cf:00:c6:ef:ff:ef:1a:bf:59:
         c9:da:2d:c8:0e:92:17:10:5c:88:d0:6b:de:b4:7a:3a:79:01:
         63:e8:9c:41:07:7d:01:5d:50:13:44:64:5e:73:6d:f4:45:11:
         d2:16:88:ac:ca:42:f4:53:11:f0:3a:1b:bb:1e:b5:ca:55:88:
         f3:40:6e:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:23:49 2026 by rpki-client