Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17934354-79ee-4719-9edf-983be078592d.roa
File:                     17934354-79ee-4719-9edf-983be078592d.roa (raw, json)
Hash identifier:          4DQfHvRENEmFoULqGxzdktlCGnGxZnUwUSm15eBQC+w=
Subject key identifier:   24:87:AB:16:43:EE:88:28:58:89:2B:D4:C7:EB:DE:2E:04:23:E2:97
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3EE10DAF2625B5D27428E21C68C33D17FF23A8E8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17934354-79ee-4719-9edf-983be078592d.roa
Signing time:             Wed 22 Jul 2026 03:20:07 +0000
ROA not before:           Wed 22 Jul 2026 03:20:07 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e3c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:0d:af:26:25:b5:d2:74:28:e2:1c:68:c3:3d:17:ff:23:a8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:20:07 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=e1f4f4775563c29857a73d7f0532bf17860df16b42fd796c240cc5052e83bf20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:21:87:ef:46:ea:3f:38:98:da:c3:71:c5:
                    7b:21:2f:da:84:54:76:8b:2e:13:ab:92:4f:df:92:
                    b5:e4:dd:13:4a:a5:b0:5c:7e:c8:85:ef:54:62:d7:
                    3b:c1:a4:83:e1:41:82:27:dc:9e:ab:bd:ab:9b:64:
                    47:76:6a:76:71:df:34:1a:14:17:94:69:1e:0b:10:
                    f4:d1:b2:ec:ed:8c:fc:2f:0d:24:8d:ff:cd:d0:cd:
                    36:fb:f0:83:3a:c8:ab:f5:20:39:9f:10:d5:0c:74:
                    6d:08:62:5b:98:21:9d:14:90:3c:59:25:48:f0:15:
                    bf:3f:e1:a7:8c:b1:13:d3:30:c5:75:b3:f2:7c:cb:
                    bf:a9:95:ab:bc:5a:57:5f:e9:e7:6e:76:06:f1:f9:
                    19:fb:3d:3a:0d:ad:f4:1b:a8:01:37:aa:ff:83:a9:
                    ef:86:17:8c:b1:0c:a2:df:ee:c7:7d:f3:ac:08:ef:
                    12:15:21:d4:c3:66:4b:8b:fe:5e:38:e7:65:43:5d:
                    82:2d:0e:ba:77:52:8c:13:23:79:dc:89:b2:c4:c1:
                    52:02:f2:5a:78:12:06:53:93:f9:43:66:fa:69:13:
                    b8:a5:c0:aa:53:50:4b:e9:65:68:ee:a5:25:1f:c8:
                    0d:85:dd:26:bf:d9:fe:15:48:5d:fc:44:d0:3c:9f:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:AB:16:43:EE:88:28:58:89:2B:D4:C7:EB:DE:2E:04:23:E2:97
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17934354-79ee-4719-9edf-983be078592d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e3c::/47

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:03:37:a3:c7:9d:5b:1c:91:1b:61:f3:a5:1a:e9:4b:24:
         b4:f7:8b:92:53:70:f6:86:d5:df:ae:72:fc:c8:51:e5:ea:2c:
         57:cf:76:33:86:1c:45:0f:6a:57:3a:ae:f8:0f:a3:4e:86:38:
         a3:e3:ce:cc:b7:87:d2:8a:52:4c:71:13:b4:58:ed:14:fa:39:
         59:51:74:26:17:78:07:79:0e:f6:99:35:0a:eb:09:79:ae:f2:
         9a:da:11:94:ec:e9:a3:b9:5f:42:b9:e0:03:6b:bb:ca:4c:ea:
         91:9a:b4:61:36:ca:13:74:f1:b2:a3:5a:da:28:c1:b2:62:b6:
         59:67:c1:2b:fe:93:4c:d0:5c:be:9f:6a:8e:b6:85:ab:d5:65:
         fe:f0:f0:2d:04:48:a6:79:54:1d:c6:82:e2:fe:79:cf:74:c8:
         de:e5:33:c1:93:a5:ee:b3:e7:71:2d:d2:2e:4f:69:0b:8a:7d:
         6a:41:98:e0:ee:44:02:c5:f0:73:8c:29:50:67:c8:04:91:3f:
         0b:98:dd:c8:1a:6e:d3:d2:a3:a3:38:2f:74:06:da:51:15:4a:
         f1:a0:17:e6:2d:53:fb:e3:8b:51:ba:10:c1:e6:cb:02:65:1d:
         9e:e8:8c:00:aa:32:e3:d6:ee:dc:0f:e1:3d:b9:4b:78:c1:cd:
         e7:e4:76:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:47 2026 by rpki-client