Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1282ed54-9b85-4be1-ba80-4d0f8577417c.roa
File:                     1282ed54-9b85-4be1-ba80-4d0f8577417c.roa (raw, json)
Hash identifier:          IQuPmL3Nyoaan/x9t+xQ2D+c75SEg2JcexQf2CVI7OY=
Subject key identifier:   42:46:0F:07:36:B2:62:F4:F1:F1:6E:78:03:E2:0E:7A:03:BA:A9:51
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E06D537EE4AB9E3D582A65E606F15F8BE8C1D28
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1282ed54-9b85-4be1-ba80-4d0f8577417c.roa
Signing time:             Thu 23 Jul 2026 09:11:36 +0000
ROA not before:           Thu 23 Jul 2026 09:11:36 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33d4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:d5:37:ee:4a:b9:e3:d5:82:a6:5e:60:6f:15:f8:be:8c:1d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:11:36 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=b25bfcfee224340dcaf51e98e323df63e19b005d4b0d77458639952c09c35d6c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:99:a4:35:08:bc:cd:6b:d6:fa:b3:57:24:
                    f8:88:18:b5:30:05:29:bc:cf:b8:0b:b6:3e:fe:6c:
                    80:f6:64:dd:3a:57:1f:05:87:38:f2:20:c9:3f:4b:
                    9d:a1:a4:6e:56:a3:4f:4d:f4:59:80:e5:6b:67:65:
                    e9:1b:e7:b2:fd:50:e4:1e:60:17:cf:9c:f9:27:e9:
                    e9:db:94:97:b6:0d:bf:9d:c7:11:42:13:e0:44:f4:
                    28:2b:e0:69:9e:ba:07:79:a9:5f:cb:fa:31:2e:bc:
                    99:58:d4:78:90:1d:c0:76:aa:e0:a6:6b:5d:66:70:
                    ad:b6:8d:d7:46:7f:50:9d:87:a1:a4:f5:15:53:cd:
                    14:9a:2b:da:db:70:7f:6d:5d:f2:f1:1f:b9:17:6f:
                    15:18:89:a3:0e:0c:22:e4:31:11:ba:36:82:32:6a:
                    94:c1:7d:82:27:3b:48:1c:57:cb:88:4a:19:ea:09:
                    3c:b6:5d:55:02:40:ee:d7:cf:6f:26:eb:e7:c6:39:
                    c9:1b:07:bd:eb:df:da:55:18:22:1c:be:e7:e0:8e:
                    1c:ec:38:c8:8e:9d:2e:5b:3d:52:a2:30:ec:5f:0b:
                    41:5b:f5:48:e6:e7:93:cc:8c:06:16:31:e2:1f:dc:
                    80:4e:a2:a8:b4:23:fa:37:15:a3:4e:df:a0:87:c7:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:0F:07:36:B2:62:F4:F1:F1:6E:78:03:E2:0E:7A:03:BA:A9:51
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1282ed54-9b85-4be1-ba80-4d0f8577417c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33d4::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:1d:d4:61:49:41:50:4b:16:29:9b:82:f2:86:c2:c0:42:
         84:3d:11:6c:ae:31:e6:e4:fd:a6:f9:ab:50:ee:63:f4:9d:e4:
         f3:2c:29:44:2d:4a:d6:65:23:29:62:78:db:ed:db:b0:ab:25:
         e2:7c:6d:dd:3b:46:c0:dd:17:f3:c2:03:f5:64:8a:9f:37:77:
         f3:5b:66:73:70:ba:bc:1a:38:43:e7:cc:81:16:e2:ce:51:ce:
         1c:e0:a1:78:b9:b4:55:9d:26:1e:d2:f6:0b:51:81:e5:b2:61:
         b7:ad:17:f8:28:14:3f:ca:cb:f0:7b:ef:85:47:dc:e0:ea:db:
         3b:2f:7d:b2:12:58:ef:d3:c4:6c:cf:44:64:01:4a:6b:21:78:
         71:c7:db:ef:32:45:15:d9:cd:06:3b:f5:75:29:d2:43:34:a2:
         cc:a5:26:d7:97:02:fe:b5:bf:9d:e7:c2:6a:17:78:47:15:40:
         a4:83:49:d4:82:0d:52:82:a1:89:2e:68:a0:1c:ef:76:6e:e8:
         94:5e:d7:67:a8:d8:43:7e:6c:8f:ed:4f:2c:87:c5:1f:3f:b1:
         93:e8:fd:da:c7:77:fb:b0:06:7e:39:c8:38:e1:8a:b6:1d:a8:
         1a:62:30:60:77:f5:23:75:6b:09:79:b7:94:33:ec:12:b0:b1:
         0e:02:6b:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:10 2026 by rpki-client