Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/005fd837-f494-4ccf-9694-2bf3e7047848.roa
File:                     005fd837-f494-4ccf-9694-2bf3e7047848.roa (raw, json)
Hash identifier:          LxUdKNx1Parr2YaUT+2fQrmyJKzbT0oZ0gH5sf7pqIg=
Subject key identifier:   A4:5D:B6:66:0A:04:F2:F2:56:52:0E:27:7C:F1:CB:50:CD:1E:95:37
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D438B7B5B2FC939EF2F88929880A5E2C66E87FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/005fd837-f494-4ccf-9694-2bf3e7047848.roa
Signing time:             Thu 23 Jul 2026 11:02:11 +0000
ROA not before:           Thu 23 Jul 2026 11:02:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e48::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:43:8b:7b:5b:2f:c9:39:ef:2f:88:92:98:80:a5:e2:c6:6e:87:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:02:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=004a6f4516a953e45379b28870c9c96c97872736bc43d3e9337944b35a362688, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:aa:ef:38:fa:59:0e:b2:55:54:ee:6e:a5:
                    b1:e0:6c:c7:bf:8d:46:df:d5:5c:da:2f:2e:f6:d7:
                    9e:b4:5b:f7:31:be:6e:c3:3e:b4:36:78:10:5a:8c:
                    28:a1:14:d0:af:00:1e:65:24:85:fe:06:a3:f3:86:
                    39:ea:1f:b7:60:31:a2:5d:6b:0b:70:c1:70:cd:79:
                    2f:2a:4a:c5:c2:3d:d0:44:2e:e8:1d:74:bc:fa:c9:
                    c9:bc:7b:69:c1:03:86:7b:0a:29:cc:03:f0:25:8e:
                    a9:93:dc:1f:6d:bd:11:5f:c5:f2:ee:a2:75:8e:d0:
                    62:d9:ab:5a:d6:18:8c:e4:98:df:24:68:9a:cb:63:
                    f1:d2:ab:49:20:a5:eb:12:e1:5b:3a:5a:1d:23:2c:
                    e6:ce:f2:de:d5:a5:1c:a2:e2:19:37:83:f5:f6:e7:
                    f4:42:31:ea:42:71:d1:e6:8f:53:16:95:50:de:b6:
                    27:ed:2d:6f:29:d2:22:ed:5f:d2:36:ae:6e:bf:66:
                    17:da:ae:51:5f:b5:68:e5:1f:31:19:23:a0:9f:f7:
                    78:54:8e:2d:20:1e:13:87:db:f2:33:bd:21:a0:78:
                    8b:06:1f:5e:f6:92:d8:37:25:4f:61:59:a4:fd:86:
                    72:a2:5d:13:e2:f2:9d:15:f9:c3:d3:3e:79:7d:7f:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:B6:66:0A:04:F2:F2:56:52:0E:27:7C:F1:CB:50:CD:1E:95:37
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/005fd837-f494-4ccf-9694-2bf3e7047848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e48::/47

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:ad:cf:8e:7f:1a:ab:0c:e7:04:c7:8b:27:42:54:c0:50:
         be:e4:bc:3c:c4:ef:e0:12:e7:c8:e4:cb:8e:d9:2c:0d:ed:c3:
         df:6d:56:d3:19:2f:90:41:71:19:e4:24:9b:6b:35:7e:c2:d2:
         e5:45:aa:c1:64:78:38:53:04:9d:4c:fa:ac:7d:a5:d3:e6:8c:
         7c:17:92:44:1a:ba:38:b8:ff:53:ef:74:0c:ef:b9:a8:42:bb:
         dd:79:a2:32:a5:a9:e0:8c:60:f2:8b:8d:23:2f:37:fb:2c:0d:
         29:f8:65:aa:13:65:47:40:b8:9a:82:6f:26:39:dc:b6:4a:57:
         c2:ae:0c:fb:08:af:ef:90:5a:14:cf:58:9c:7c:92:85:99:0a:
         33:ac:79:dd:69:5d:0d:88:63:17:d8:5d:4b:d6:91:54:96:b2:
         29:56:d2:5d:df:a9:d8:b8:52:5a:5d:1f:ff:b6:86:16:78:ad:
         a4:b1:2e:53:b9:7e:5b:5e:cb:37:f0:72:c6:52:d4:5e:2a:d4:
         04:f6:eb:b1:e0:b8:5d:30:86:cb:31:a6:62:19:5a:bd:b0:10:
         37:b7:02:5a:54:25:41:7c:db:41:69:0c:de:c6:e6:88:0d:8f:
         ef:6d:6f:4c:1d:94:55:d9:ac:92:6f:5e:61:7a:79:d3:a2:3b:
         de:09:48:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:05 2026 by rpki-client