Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/224b0348-334b-4538-80a6-c12256c757d8.roa
File:                     224b0348-334b-4538-80a6-c12256c757d8.roa (raw, json)
Hash identifier:          yUAioJXaEds4gzm8o3zVdYIW0oDV0wUPbSVkARmLqzw=
Subject key identifier:   27:A7:E3:4C:68:09:D2:36:FD:3E:6B:35:E4:3D:A5:15:E3:EA:CC:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32E57E9E7C29D34DD3FB2438A8EC1A2FD4BDCCD5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/224b0348-334b-4538-80a6-c12256c757d8.roa
Signing time:             Thu 23 Jul 2026 06:11:11 +0000
ROA not before:           Thu 23 Jul 2026 06:11:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37c8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e5:7e:9e:7c:29:d3:4d:d3:fb:24:38:a8:ec:1a:2f:d4:bd:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:11:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4d0d873409c5a7948527cd9379d7b21d49b1c630e1a9b149f72e70e459fd4690, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:5c:26:a6:65:1a:ed:04:3a:30:e4:43:cc:
                    a2:e8:1b:eb:2b:26:01:dd:e4:6f:1d:94:0d:cf:e3:
                    26:2c:0c:fc:99:e9:b6:52:4f:56:90:68:29:db:b6:
                    09:39:a7:f5:7f:48:f4:4d:df:83:6b:a4:89:a8:8e:
                    47:75:0b:12:08:63:b6:e9:1b:85:b0:1b:52:07:9e:
                    82:a3:c6:c6:8a:c2:78:7a:95:0c:3c:e9:54:ad:c9:
                    84:3e:83:24:d0:de:88:e3:d0:ff:9c:96:44:f8:bf:
                    d6:f4:dc:42:d9:70:27:6e:b8:a0:7c:a0:9d:ec:bb:
                    9c:37:f1:2a:16:15:e9:b4:e0:da:bc:8f:b7:c8:89:
                    cd:ae:91:d1:45:42:cd:18:fc:e6:6f:29:00:19:d5:
                    d2:75:04:7c:8a:a1:f5:eb:72:f1:33:36:52:10:08:
                    30:50:53:77:88:6d:c6:9b:ae:a1:64:78:34:0f:66:
                    7c:21:60:bb:04:59:6b:e6:6a:e1:53:22:7c:1e:87:
                    40:ae:fe:d2:af:e2:9e:22:57:2f:3c:bb:8d:5a:98:
                    34:47:4c:d6:7b:46:49:73:13:72:aa:02:e0:b8:5e:
                    27:38:93:a7:66:86:7b:30:e7:4d:f4:55:ed:5c:54:
                    dc:54:73:bf:fa:17:0e:40:53:1a:41:b4:68:07:40:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:E3:4C:68:09:D2:36:FD:3E:6B:35:E4:3D:A5:15:E3:EA:CC:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/224b0348-334b-4538-80a6-c12256c757d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37c8::/47

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:c7:87:87:21:bc:e1:52:7f:06:2e:93:43:d9:97:46:0a:
         8d:ab:89:9b:31:83:79:4e:ad:cd:c7:72:c3:38:03:17:aa:aa:
         37:57:0e:ba:d7:cc:e2:37:09:60:fb:84:1a:d2:65:71:ae:89:
         b6:13:5e:2a:19:9e:b5:ae:3a:f1:32:26:1e:0b:72:11:37:8c:
         a7:b4:b4:c6:e2:71:ef:ca:a4:16:cb:f7:68:f5:36:00:c8:91:
         19:28:49:00:12:a9:99:3d:f5:42:a4:a9:5e:db:78:18:76:cf:
         3c:a0:9b:38:5e:f9:7e:07:c1:99:8a:78:2f:6f:15:43:66:f6:
         58:a7:18:8b:56:a6:ad:ff:90:df:0d:ef:2e:d5:d2:e1:9d:6f:
         d2:ce:b8:e6:6c:98:c1:cd:b2:f1:46:3a:03:a5:92:14:29:af:
         ad:16:05:7c:d0:1a:ca:c0:1e:a7:ff:76:61:a9:8f:29:ae:ac:
         71:30:d6:f3:81:69:d1:5f:c5:76:c0:9c:e2:6c:ff:dc:c8:36:
         ca:b3:ab:71:12:0c:2b:dd:fe:12:6d:66:9f:b3:93:89:67:c3:
         ee:c4:6a:ab:0a:98:a0:1d:49:fc:59:81:7b:c5:71:62:f5:0c:
         d0:e5:b5:b7:35:89:a0:4f:79:94:33:52:e7:e5:55:ae:79:f8:
         55:c3:4d:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:30 2026 by rpki-client