Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b34eee3-7cd8-4b40-b5ba-d09be20ac2bc.roa
File:                     0b34eee3-7cd8-4b40-b5ba-d09be20ac2bc.roa (raw, json)
Hash identifier:          SFpxkBvOOWIXmeJcScz+oNUjiCJrgXD5hF9NnJ+F3Q8=
Subject key identifier:   FC:F1:F6:5A:53:A8:B3:45:D0:6C:8F:1A:31:F5:0B:49:D1:76:45:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73A87A6BC75926D2BDA73CCB932170157FD13955
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b34eee3-7cd8-4b40-b5ba-d09be20ac2bc.roa
Signing time:             Thu 23 Jul 2026 02:40:11 +0000
ROA not before:           Thu 23 Jul 2026 02:40:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fd2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a8:7a:6b:c7:59:26:d2:bd:a7:3c:cb:93:21:70:15:7f:d1:39:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:40:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ed66e812426278cefdd60ac46d9661c22c639b2945f29b2c796b96b0b217e60f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:87:19:6a:ce:70:e4:8a:22:72:6a:01:fe:
                    09:df:4f:63:5b:0c:c9:7b:1b:cd:3e:2e:eb:75:5c:
                    95:5b:a6:20:11:13:89:9d:0e:6e:d4:cc:9f:9a:ac:
                    f3:ee:07:48:b5:46:14:74:e7:62:a0:70:31:6c:de:
                    b4:ab:87:b6:1b:09:c0:e3:ab:ff:7a:13:06:a6:c7:
                    ee:74:4b:02:da:d9:97:40:69:76:74:e6:fd:3a:20:
                    0e:7e:9f:9b:a0:d9:62:5d:75:4e:77:e3:6b:3f:a9:
                    dc:f1:66:5c:15:2e:41:c4:bd:e5:3f:d8:ce:f4:d5:
                    45:e0:16:38:5a:b0:a4:ba:8f:7f:3e:e6:af:21:86:
                    a8:ca:4f:14:7e:3b:d8:5b:08:d2:8a:b5:98:61:92:
                    21:0e:87:c3:d1:3d:cd:51:07:c4:a7:cf:eb:d1:04:
                    48:4f:04:c5:fd:45:47:bc:37:af:bf:f2:93:67:92:
                    c2:94:24:ca:71:38:27:a6:45:e8:c4:40:c3:a1:92:
                    23:71:6e:9e:da:92:49:23:f3:e1:ba:25:30:48:9c:
                    b1:b4:3a:fb:2c:bb:74:98:08:dc:11:1f:5c:8f:ad:
                    88:8a:bc:57:ed:8c:64:c6:51:2e:36:a9:f2:4d:ab:
                    5d:d4:32:43:b8:93:c6:ad:56:4e:65:d6:24:09:a2:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:F6:5A:53:A8:B3:45:D0:6C:8F:1A:31:F5:0B:49:D1:76:45:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b34eee3-7cd8-4b40-b5ba-d09be20ac2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fd2::/47

    Signature Algorithm: sha256WithRSAEncryption
         bd:ba:97:11:75:bf:66:76:48:70:01:b1:ec:6a:34:cf:97:30:
         f4:3e:58:c3:be:4e:5d:4b:09:d4:26:88:07:d0:cc:2c:d6:73:
         59:6b:19:59:1a:11:2b:de:ec:0d:06:47:11:1d:d1:b8:77:eb:
         b5:ec:d7:e9:17:0b:c9:2c:95:f9:f3:da:4c:22:0d:80:31:5e:
         79:3a:4f:f7:f8:32:ad:79:ab:73:7c:52:f6:87:f5:fb:b8:61:
         22:ec:80:40:77:1b:c8:ed:a3:99:0a:18:00:bb:54:fd:84:f2:
         59:7d:a3:a6:8d:98:33:bd:d9:15:e4:11:55:1e:24:5c:d8:f7:
         dc:dd:78:06:e4:46:83:a2:94:1e:fc:cd:2e:b9:55:1b:20:dc:
         84:63:07:4d:a2:d1:09:97:8f:cf:61:af:fd:c1:8e:b1:3c:45:
         53:0c:e2:43:be:39:0f:e3:42:ac:04:22:54:12:bd:12:de:64:
         5b:4a:ef:c3:11:f3:98:dd:1f:68:dc:ad:2f:6d:c1:85:72:cc:
         54:18:a0:c1:74:c0:26:d6:a1:de:21:a8:5f:4b:83:36:7a:68:
         02:67:e5:3a:c9:ee:e9:71:a9:0a:9f:1b:38:2e:22:8f:9f:68:
         fe:8d:db:11:61:4c:c3:db:15:38:ee:b5:fd:23:e0:67:57:6b:
         b5:b3:e7:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:47 2026 by rpki-client