Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1262fb27-1aa9-4651-90ea-31eabe081eee.roa
File:                     1262fb27-1aa9-4651-90ea-31eabe081eee.roa (raw, json)
Hash identifier:          szaJZaAx/0PLsx1JKt4NvaT3nON7pL4nox8y1EMp4KI=
Subject key identifier:   7E:25:D7:E8:E4:18:C7:C2:66:8A:DD:79:AC:CF:11:B2:54:54:19:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7ED58772FB625E26FB281C71A50CB429FCD81BF2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1262fb27-1aa9-4651-90ea-31eabe081eee.roa
Signing time:             Thu 23 Jul 2026 12:51:16 +0000
ROA not before:           Thu 23 Jul 2026 12:51:16 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:372e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:87:72:fb:62:5e:26:fb:28:1c:71:a5:0c:b4:29:fc:d8:1b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:51:16 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=f14331e939332ea19f8a17b763f9cd184fbb09d8fbf91c2fed959bb562813f1b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:dd:8a:27:01:d0:dc:b9:5d:1d:21:d9:f1:
                    94:05:9d:bf:c3:0c:15:c4:57:95:35:78:19:a0:9d:
                    26:e4:51:73:b5:ae:40:a5:68:3c:90:60:f1:61:55:
                    cd:d8:3c:a0:04:0d:c5:7a:b0:77:27:9e:84:44:07:
                    2c:00:be:d4:a3:52:2c:29:a9:bb:ea:2a:f8:8c:fc:
                    40:05:4a:ae:e4:f6:78:fd:b1:2b:9f:3b:c3:09:ab:
                    4f:7a:a9:d1:c3:90:ed:bb:c9:ea:64:1c:68:63:ed:
                    f2:fe:51:27:b3:84:dd:2e:6f:d6:36:7e:fd:fd:d1:
                    68:8a:9e:8f:99:5e:2b:9c:db:0e:d9:a6:48:30:74:
                    2d:1a:a3:bf:8b:08:4b:ea:95:d4:4f:a6:ec:ec:3a:
                    a8:e7:10:b8:ed:3e:c7:e9:22:07:7c:4b:c9:83:c1:
                    62:de:8d:e2:01:cb:e8:b7:75:eb:ba:96:2f:d1:ac:
                    e4:ba:b6:9f:66:7f:51:ea:6d:31:00:31:43:79:7b:
                    88:39:3f:88:0e:b3:9d:75:7e:84:99:65:14:9f:c4:
                    46:85:91:65:87:19:a7:43:7c:a8:3a:bb:28:1b:69:
                    f0:7d:50:88:ff:d7:64:1d:ef:80:49:a4:6b:23:02:
                    0c:71:c6:ed:e8:d5:28:35:13:fb:c7:95:f6:32:7a:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:D7:E8:E4:18:C7:C2:66:8A:DD:79:AC:CF:11:B2:54:54:19:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1262fb27-1aa9-4651-90ea-31eabe081eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:372e::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:68:e1:12:22:f8:41:42:2f:64:45:f3:67:6c:f2:bf:15:
         4b:48:91:31:0d:92:67:3b:a3:18:bb:86:3f:8f:86:17:2d:4c:
         7d:aa:0e:11:17:e9:ab:61:72:3b:d2:e3:40:7c:d2:b3:cc:95:
         75:b4:a3:e7:0d:82:6a:5a:b3:51:26:dc:fe:a7:99:50:7f:67:
         c8:b0:25:ae:58:ad:2e:88:aa:4f:02:b3:b8:e1:58:9c:ea:39:
         0a:76:66:2a:07:82:83:8e:ce:f0:04:7b:54:30:5a:42:e2:22:
         7b:d7:8b:05:d7:54:52:91:a3:5f:c8:00:d9:19:03:08:36:7b:
         4b:b4:56:11:f0:f4:b5:94:75:05:1c:f5:2c:01:f8:1a:bf:44:
         d0:d9:ad:e3:0c:0a:87:45:68:a3:88:c9:29:2e:26:c3:6f:7c:
         51:02:95:26:c1:44:2e:07:6f:1c:88:ab:95:a7:d5:c5:74:fa:
         87:5f:fb:9d:c3:1d:06:3f:ae:02:59:1d:9f:1b:aa:01:08:26:
         52:dc:98:3b:16:3f:c8:0f:c3:25:ae:49:2f:29:3f:58:c0:ce:
         a3:c3:67:a2:da:05:75:f1:19:10:03:0c:9f:a5:16:8d:67:99:
         dc:f7:f5:6c:cc:6e:b2:57:b4:cf:36:75:fe:3e:69:af:16:ec:
         b9:16:7e:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:40 2026 by rpki-client