Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0257995a-e9b6-4b98-a96c-60c7f7f65be8.roa
File:                     0257995a-e9b6-4b98-a96c-60c7f7f65be8.roa (raw, json)
Hash identifier:          dOlp7kJMxYLnY0aovDSzymLMG6ht8gbqnvW+neEX3Co=
Subject key identifier:   9F:72:A0:C2:3F:E5:AF:60:F0:2B:35:C1:68:A0:C3:89:5F:51:90:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       70D02099AC8204C18C07C1225F6C2EEE4DF6B113
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0257995a-e9b6-4b98-a96c-60c7f7f65be8.roa
Signing time:             Thu 23 Jul 2026 05:50:32 +0000
ROA not before:           Thu 23 Jul 2026 05:50:32 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d0:20:99:ac:82:04:c1:8c:07:c1:22:5f:6c:2e:ee:4d:f6:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 05:50:32 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=73d01813d3a1608643f52fc8861582a20fb0f20896570672cc38249ac643c438, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:f1:98:04:b9:b6:a3:e9:69:d7:44:f1:88:
                    10:ab:35:b4:55:07:2f:ef:85:ee:35:05:b4:cd:ad:
                    32:ee:6e:ea:ad:86:53:a5:1f:93:f0:83:9c:4d:32:
                    a8:31:43:7d:d6:df:c2:93:f8:25:37:17:d8:bf:63:
                    d1:5d:ac:3a:26:8c:ac:fb:e3:a6:29:cb:40:9e:ec:
                    5f:d5:e9:58:93:b7:e3:52:8e:4a:b0:fd:33:a8:48:
                    a3:c3:a8:ce:ad:47:3e:13:2e:34:7a:10:41:74:fb:
                    da:91:5c:7f:bf:a4:57:5f:1c:a2:f0:8f:85:9a:26:
                    81:97:3b:f7:d3:16:2a:4a:68:15:ee:84:ef:68:f8:
                    c0:03:fa:fe:dc:48:6d:4e:f9:a6:5b:37:e8:3d:99:
                    77:f3:a2:f8:ba:fb:71:58:99:35:61:3c:7d:92:06:
                    12:b4:17:14:f6:2b:62:f2:33:3f:85:fa:f2:f1:80:
                    b8:28:b0:db:15:a7:e9:e9:35:52:45:8b:07:6b:26:
                    45:bf:1a:ae:f5:76:59:19:03:01:4e:b4:e3:2f:f4:
                    66:44:a3:a4:36:03:33:3b:2d:0b:1f:d2:ec:c0:93:
                    59:67:f5:d6:5b:57:45:19:14:52:75:5b:00:99:f8:
                    f2:b9:43:79:5f:d7:18:a7:19:95:b1:ec:6b:07:f2:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:A0:C2:3F:E5:AF:60:F0:2B:35:C1:68:A0:C3:89:5F:51:90:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0257995a-e9b6-4b98-a96c-60c7f7f65be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a88::/45

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:f6:e7:29:b0:f8:44:92:e0:60:24:62:70:87:30:6f:8e:
         b2:a5:8a:a1:49:de:ba:99:5d:54:38:8f:ea:e1:0b:d9:5d:92:
         08:6e:8f:a7:98:ff:af:53:f2:fd:b5:e8:e0:c3:23:6c:f8:28:
         3f:9d:ed:3f:59:c6:54:31:91:ec:cf:bf:3b:4b:bc:90:d0:a7:
         a2:76:26:51:f2:19:c2:7c:ee:51:f1:fa:39:2c:01:d5:fe:83:
         58:e0:0e:33:20:94:52:8a:c7:fa:a9:e4:7c:9a:23:6e:ce:b4:
         ae:cc:8e:d9:a0:45:33:2e:10:1b:f4:7d:8b:9b:84:e9:9b:3b:
         df:0b:41:8a:7a:91:97:e5:64:0a:c0:72:ad:7a:fd:08:b5:d0:
         69:45:67:7e:ff:75:7f:4d:b0:24:5c:f5:bf:6f:86:24:4a:2b:
         a0:41:d6:88:8f:d3:94:b5:ea:e7:68:74:56:f1:46:5f:fe:83:
         7a:bf:d5:51:50:52:03:68:b1:98:b2:ea:d5:a0:b6:42:19:b1:
         71:18:5e:7d:41:35:90:8a:f2:d7:f5:d2:11:68:04:3e:ed:c7:
         1a:37:52:f8:1c:23:02:c9:f5:55:8f:34:d2:7f:00:c1:57:3b:
         4a:71:c3:8c:b0:26:c5:ee:0c:13:87:a7:00:94:06:0c:1b:4d:
         ba:25:fb:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:03 2026 by rpki-client