Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a5e3314-9179-4d75-867c-b973236f48b4.roa
File:                     0a5e3314-9179-4d75-867c-b973236f48b4.roa (raw, json)
Hash identifier:          6dOZld+A0FufBJS7RVIcFBO5Gly3Sq3kc1v4U/9JBPI=
Subject key identifier:   C2:62:FF:2A:8D:6E:E8:D7:08:DA:A4:B2:77:87:63:1F:E5:9F:A7:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17D0172872F1217346EAC96F861048321487928E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a5e3314-9179-4d75-867c-b973236f48b4.roa
Signing time:             Thu 23 Jul 2026 01:50:34 +0000
ROA not before:           Thu 23 Jul 2026 01:50:34 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:394a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d0:17:28:72:f1:21:73:46:ea:c9:6f:86:10:48:32:14:87:92:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:50:34 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=6b145b27812b437e49bc4d7e668faf4de3d6815dbb36be2e5e95ffeeb16faddc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:1a:8f:b8:ae:af:f3:a3:4b:76:e1:c7:22:
                    18:f0:04:5b:6b:5a:23:04:33:4a:ac:fb:61:e5:35:
                    09:39:4d:a4:ec:bd:40:6d:ba:72:34:9b:f4:4a:f0:
                    0c:70:dd:59:7f:db:d1:62:32:06:ca:a5:00:69:7a:
                    d6:07:4d:5f:15:ea:81:39:43:c9:c2:dd:20:b8:fd:
                    0b:5b:2f:cb:59:93:7c:db:d1:be:ed:b9:63:d3:6e:
                    8b:cb:d9:f8:d6:d0:3e:ba:55:39:45:48:f1:64:ab:
                    05:45:aa:25:da:a0:6f:34:13:b8:bf:00:59:34:09:
                    11:25:eb:4b:82:c5:82:86:eb:0f:d6:2a:5e:c4:40:
                    5e:5e:1d:5b:35:9e:05:53:c3:38:0e:16:d6:1d:ce:
                    fe:27:ab:ae:02:ce:ba:9b:30:b9:5e:bc:2c:e2:65:
                    34:93:46:78:4f:a3:52:1a:ec:88:06:b2:32:29:a9:
                    96:d7:48:d0:c9:b5:5e:76:d3:4d:26:7c:96:d9:72:
                    df:ab:7b:ec:30:94:41:7d:dd:f3:cc:c8:8f:28:e5:
                    b9:b6:53:40:b6:25:67:19:22:f6:10:47:cb:8c:c2:
                    6b:c1:39:fe:4c:d6:10:2c:9d:39:92:7e:4e:70:f8:
                    13:3a:04:41:22:4d:8d:e7:e5:a0:46:0b:7a:66:96:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:FF:2A:8D:6E:E8:D7:08:DA:A4:B2:77:87:63:1F:E5:9F:A7:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a5e3314-9179-4d75-867c-b973236f48b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:394a::/47

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:49:09:c8:b9:7d:2a:cb:85:2b:a1:e2:a2:0d:ba:82:d8:
         ee:2a:55:db:fd:4f:ca:e6:7f:84:98:9c:56:b6:f6:86:aa:1f:
         85:ba:b3:c2:68:b1:41:05:8b:6d:97:b3:69:06:7d:31:14:20:
         bd:7f:97:d6:cc:aa:b7:7d:e9:7e:e5:2e:04:5c:a4:ab:12:f6:
         c5:3f:28:2d:bb:7a:52:5f:c1:c3:22:70:5f:2b:69:47:90:91:
         1a:62:61:8c:e4:b9:09:51:3f:b4:ae:d8:82:b7:a4:e1:48:4b:
         45:0a:e3:b1:92:5a:f5:1b:c5:99:bb:5a:f3:85:06:f5:f3:5d:
         ef:27:16:fd:10:3b:93:56:d1:36:12:dc:5e:18:c8:ab:fa:0b:
         70:8a:2b:ac:12:40:09:46:61:fc:62:b9:54:25:b8:95:1f:c4:
         5d:a8:02:d1:9b:d5:b1:9a:ae:cc:4b:fb:1f:8f:f2:3b:ac:7c:
         3f:b5:ed:94:51:6f:e3:95:99:39:70:97:bb:fe:0a:8f:7d:8c:
         72:fe:b7:0a:93:73:bb:9f:d7:05:eb:5d:22:34:4b:55:04:53:
         4c:c6:e1:26:6e:fc:7d:35:6c:c1:88:05:70:21:8d:de:ef:aa:
         8a:f2:08:21:57:45:01:74:16:5f:fc:19:0c:a7:1e:c2:96:49:
         94:74:b3:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:01 2026 by rpki-client