Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa
File:                     1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa (raw, json)
Hash identifier:          lZ+mwNH65VnMW+S5IJ7u4Ei9OM7GhiRZ2MYCKve/X0s=
Subject key identifier:   38:64:ED:28:34:7A:03:DF:67:FD:EC:9A:88:4B:40:15:8F:D6:92:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DB65C8E7A3A6E8E27F849C66755091E70DB2872
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa
Signing time:             Thu 23 Jul 2026 07:20:36 +0000
ROA not before:           Thu 23 Jul 2026 07:20:36 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d98::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:5c:8e:7a:3a:6e:8e:27:f8:49:c6:67:55:09:1e:70:db:28:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:20:36 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=3884642bde5f0ed0c2baa41b776780bd881f6e5a99632d0ef6ea48d873a31bb2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:63:7e:6f:20:c1:a3:c5:84:40:1d:e5:ae:
                    4d:e9:82:65:80:8d:50:71:b0:40:e9:54:b1:57:44:
                    2c:d4:7b:bc:a5:0b:45:cc:40:74:65:8e:77:41:51:
                    df:69:05:1b:8d:9a:ef:a0:c1:ba:15:6c:cb:0a:a8:
                    b4:ea:69:ba:8c:43:53:cc:71:3f:b4:a4:3f:11:8a:
                    a1:48:f4:b9:e8:38:81:17:25:bf:2e:2d:b6:ae:be:
                    76:d8:98:b1:8c:ce:cd:25:ed:e0:eb:9c:f6:01:c3:
                    b5:06:c4:58:9d:ae:46:a0:57:40:99:31:ad:c7:6b:
                    c4:8f:19:ab:b5:29:49:5c:2d:f9:c8:dc:fb:76:49:
                    7b:3e:3f:86:65:7c:4e:8c:2c:21:0e:49:c6:8f:31:
                    43:90:a6:77:ab:87:9e:f9:c4:ba:bc:bb:9f:a4:b5:
                    06:16:81:4f:af:e1:78:bc:c4:94:33:17:e4:5b:7f:
                    ec:15:92:00:0e:38:28:29:ac:3f:2d:24:6a:c1:83:
                    55:c9:3b:eb:09:19:4b:8c:d3:b8:ca:f2:4c:2b:46:
                    c8:52:33:a4:21:96:6a:83:fe:00:05:69:85:24:af:
                    ff:6b:fd:6b:b9:ed:eb:84:2a:c9:76:f1:0a:9c:22:
                    fb:de:d6:70:73:ea:fc:27:4f:65:67:4f:e8:87:66:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:ED:28:34:7A:03:DF:67:FD:EC:9A:88:4B:40:15:8F:D6:92:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a30e636-6b82-41cc-a7fe-a0e861b3cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d98::/45

    Signature Algorithm: sha256WithRSAEncryption
         c1:0b:0f:71:9d:0c:30:11:94:52:0e:02:e4:25:b1:76:97:cb:
         f0:32:62:9c:cf:a1:89:65:2f:60:23:b6:ab:9c:d1:39:75:01:
         61:df:b0:d5:15:e2:c3:7d:61:1b:48:cc:3e:69:bd:ba:39:8f:
         d8:13:75:0a:c9:f1:fc:b5:25:12:a4:84:36:f7:cf:a8:d6:a6:
         74:8f:48:56:18:d5:b4:54:1e:87:14:0b:1a:2b:ab:54:97:1d:
         84:9a:27:03:65:71:86:66:8d:d6:7b:f6:74:f5:37:96:10:28:
         65:9e:08:d2:2c:01:ec:d2:ff:8d:b6:98:cf:90:61:85:dd:c3:
         88:de:7d:aa:b0:a2:fb:f3:fd:61:58:01:fc:3a:4d:08:29:29:
         58:91:6e:39:39:24:8d:cf:0e:1a:0b:3f:41:71:3a:f6:93:d9:
         01:da:28:6d:16:ad:20:06:9f:50:25:57:23:a3:1c:3e:85:d1:
         81:7d:27:ab:ff:da:6f:59:aa:2f:58:2c:50:7c:be:a9:4e:71:
         e4:29:fc:a8:37:98:60:0a:92:b8:d7:70:64:b7:f5:7b:ac:de:
         bb:04:1a:2e:0e:da:e3:0b:f8:f6:45:ac:3d:54:8d:77:7a:9a:
         a5:19:5e:b0:9e:08:c7:6b:06:40:78:61:29:72:fc:87:ab:6a:
         5d:e0:ac:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:02 2026 by rpki-client