Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081a9f52-fbde-4492-b818-5aa4f38bac6a.roa
File:                     081a9f52-fbde-4492-b818-5aa4f38bac6a.roa (raw, json)
Hash identifier:          Y3p4RBFQpfMT7tOh8OxbMXLrin50dYWk7k5yIpU+104=
Subject key identifier:   88:F7:13:8F:C4:D0:8C:E5:1C:36:45:49:93:36:33:F5:F7:7D:65:1D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5D179F300A9F9965F12054864DBCE5F7F1A172DE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081a9f52-fbde-4492-b818-5aa4f38bac6a.roa
Signing time:             Wed 22 Jul 2026 02:40:08 +0000
ROA not before:           Wed 22 Jul 2026 02:40:08 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b9c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:17:9f:30:0a:9f:99:65:f1:20:54:86:4d:bc:e5:f7:f1:a1:72:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:40:08 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=3f536cfc62c7a8860b52ae5f14bcbf615c3319476878ad3d5725539c6ae55f9c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:d2:13:79:6c:ea:56:99:97:51:39:b2:a9:
                    83:27:ad:de:d2:59:01:f6:4f:6f:db:ca:c9:e8:03:
                    c4:4b:4f:b1:6f:00:1d:50:79:11:38:52:f5:36:ca:
                    68:38:ca:07:70:0d:f2:f7:5f:12:39:7d:bc:f4:0e:
                    36:b4:ce:6b:9a:b3:3e:19:b0:8b:81:82:d9:99:89:
                    49:a5:64:c7:73:64:3c:91:d8:23:88:42:39:ad:c9:
                    32:92:9c:09:a9:3b:15:89:3e:de:f0:17:c9:bb:a5:
                    37:08:ce:1b:76:cf:69:b4:5e:d3:46:67:b4:9b:0a:
                    c6:dc:e0:46:96:2b:70:94:3c:e9:82:d7:b4:52:38:
                    ad:88:5c:1d:2b:ee:c2:67:09:53:59:51:38:34:56:
                    61:06:2d:a9:56:23:63:e1:df:6e:18:3c:d7:00:e3:
                    1d:ad:88:f8:cf:93:4a:45:46:60:d7:0b:02:c0:3e:
                    bd:55:ec:b7:76:a5:ae:46:f6:4a:07:af:48:c9:49:
                    c0:19:c7:7c:51:a8:2c:15:c9:c0:d7:14:97:7d:e9:
                    d8:97:05:72:c4:9f:72:dd:48:4f:e3:f0:9e:08:36:
                    f2:4e:30:1d:e1:e6:1d:cf:54:1e:7f:ad:d3:3a:3f:
                    ab:b7:9b:13:ca:53:bb:3d:ed:4a:5d:70:ce:00:45:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:13:8F:C4:D0:8C:E5:1C:36:45:49:93:36:33:F5:F7:7D:65:1D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/081a9f52-fbde-4492-b818-5aa4f38bac6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b9c::/47

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:af:2c:41:48:92:d3:50:72:9f:87:7c:51:48:0f:63:89:
         ef:81:3c:ce:88:10:e6:d6:12:c1:bd:41:d6:f5:9d:d2:5b:25:
         8b:d1:aa:89:44:b1:39:f2:e9:20:1b:ce:68:33:20:78:f9:72:
         5c:71:e0:a5:4c:e8:d6:21:7a:c2:d9:a8:ea:9c:33:a7:7e:6d:
         4c:b0:09:0d:8c:5d:ee:13:7a:83:b2:c0:61:da:00:c3:2e:fb:
         95:66:04:1b:e0:4a:bd:a9:11:03:43:9a:14:99:95:1e:01:c3:
         75:3a:dc:50:8d:f1:37:15:5d:8c:a5:30:b4:db:db:c3:2d:e9:
         84:84:d6:a5:42:b9:5c:07:b7:1c:58:c2:e3:08:31:db:7e:9d:
         37:4d:7a:a7:80:da:7a:9e:26:47:00:98:72:ae:32:6a:c2:f2:
         0e:48:d7:15:0a:20:14:41:07:d7:ea:73:5c:15:ca:9c:e2:1f:
         62:6c:47:f4:17:12:5a:9f:0d:69:92:f9:e7:af:d0:8b:1b:e4:
         85:74:c5:ea:a8:ea:3b:95:49:cc:aa:e7:43:79:2f:36:62:94:
         5f:64:21:41:c7:40:d5:79:23:1f:95:72:b4:69:04:ce:26:e1:
         79:ce:18:77:40:4b:a8:9d:06:13:2a:54:ec:51:a6:90:d2:a9:
         d1:67:27:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:55 2026 by rpki-client