Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/113eb685-2f97-465d-83e5-09257f415ced.roa
File:                     113eb685-2f97-465d-83e5-09257f415ced.roa (raw, json)
Hash identifier:          fpq1FN26CVGi5XKMA9hMVU9re9cqQ0HdXRud2QQyOVM=
Subject key identifier:   A9:44:8E:6C:BA:63:2C:97:A8:FF:E0:B5:62:A9:04:3D:43:1A:A9:EA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       177C9D52F8609119987FD3B7DFCEF72BA8AC5450
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/113eb685-2f97-465d-83e5-09257f415ced.roa
Signing time:             Thu 23 Jul 2026 07:10:54 +0000
ROA not before:           Thu 23 Jul 2026 07:10:54 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3eb2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:9d:52:f8:60:91:19:98:7f:d3:b7:df:ce:f7:2b:a8:ac:54:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:10:54 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4212c49fef40cc9389e3f83a497ef209c0ce613f2bd6dec5bf33aa0fbed228de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:1f:2e:cb:36:3e:66:5c:7f:93:a6:d7:ef:
                    5b:11:79:2e:c9:a6:6c:ad:50:f8:4d:16:46:f0:67:
                    f1:f0:89:da:c1:5c:e1:55:21:94:7e:af:92:2e:2d:
                    31:d6:e9:e1:a2:84:3c:8a:2e:a9:0c:44:27:18:cd:
                    b1:28:81:9a:1c:dc:c5:29:e1:c3:ad:d9:e0:41:89:
                    78:5e:07:eb:8e:16:ec:79:38:99:9d:ae:57:33:4c:
                    78:c1:cc:43:71:0b:1c:d6:fd:cb:ac:77:5c:de:2c:
                    1e:59:08:bb:b4:ef:81:cd:9a:05:25:a7:0b:b6:ba:
                    f9:33:95:73:9b:10:95:8f:31:97:e8:54:cb:2d:0c:
                    25:e6:c7:92:60:f1:97:c8:19:bf:7a:a6:e7:52:18:
                    40:51:a0:12:ea:bc:92:27:68:90:86:9d:1e:e8:28:
                    d9:1d:f3:99:a8:e2:4f:b9:e9:10:a6:78:e1:04:9a:
                    34:16:c3:2a:29:49:a9:6f:16:30:4e:d8:f5:69:8b:
                    60:34:4f:10:d6:6b:0c:ed:97:68:2b:f1:26:e3:6c:
                    a5:9c:02:7d:fe:7f:78:3f:b0:d5:00:28:fe:b7:69:
                    9b:51:99:fa:b1:f1:8f:52:61:93:bc:2d:b8:87:88:
                    03:5f:5b:8f:5b:dc:8f:c8:09:04:29:ae:dd:ea:ce:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:8E:6C:BA:63:2C:97:A8:FF:E0:B5:62:A9:04:3D:43:1A:A9:EA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/113eb685-2f97-465d-83e5-09257f415ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3eb2::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:10:85:40:08:1b:89:58:16:2f:e4:2d:c9:e8:cd:7b:99:da:
         f7:79:56:b6:d2:8d:81:85:43:6f:15:50:a1:aa:4c:b3:83:cc:
         21:5b:72:b5:ca:32:8c:7b:63:cb:0a:9f:23:22:59:b4:1c:a1:
         65:93:84:a5:38:75:7d:8a:fe:e8:36:c3:8f:ca:97:c3:a3:1e:
         80:80:e8:b6:ab:26:8d:99:75:a8:30:97:f9:c7:cf:47:ce:4f:
         5d:d7:d7:ec:e1:e5:b7:df:03:4a:c3:a7:ac:13:f4:e2:a1:d3:
         ec:b5:03:d2:09:87:68:4e:ad:1d:9f:78:5d:1f:76:15:aa:9c:
         73:26:d8:ba:22:5c:54:1b:1d:7b:d0:f4:96:76:4b:c8:39:48:
         11:c8:b1:18:d3:98:bf:9b:33:cd:44:91:0b:ca:65:f9:52:4b:
         47:03:fd:11:e2:c3:4c:7e:58:6f:3e:8c:1e:07:17:0a:0f:c9:
         48:a3:c6:6b:2d:fe:6a:2d:9a:42:c0:6c:af:00:24:02:39:3b:
         a7:0a:a3:b2:3f:6b:a9:f9:2a:8d:30:b4:52:40:d7:0a:27:95:
         41:4f:a0:9a:44:e4:56:28:fb:45:f4:2e:3f:22:38:07:e8:b4:
         1f:32:61:df:1c:53:b3:a1:82:20:f4:59:28:d4:58:d1:93:88:
         31:5e:30:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:37 2026 by rpki-client