Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2582b2c9-8f85-4ef2-964b-3c65a2e0042f.roa
File:                     2582b2c9-8f85-4ef2-964b-3c65a2e0042f.roa (raw, json)
Hash identifier:          BRwc4zZXydiMAq1EZJ131/ZVG3bLwdqAzFDKk2BTA6w=
Subject key identifier:   9C:2F:76:FA:2D:07:D8:16:C8:42:40:E0:00:DD:1D:9A:6F:49:3E:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       712E9D8D4A0B60FA3D7E906969E0F2B1A8352885
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2582b2c9-8f85-4ef2-964b-3c65a2e0042f.roa
Signing time:             Wed 22 Jul 2026 02:31:06 +0000
ROA not before:           Wed 22 Jul 2026 02:31:06 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:324c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2e:9d:8d:4a:0b:60:fa:3d:7e:90:69:69:e0:f2:b1:a8:35:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:31:06 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=def716ff0eda73dcb68dda8860277ca15372031270ff6bda1034e00a0102d73e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:28:0c:03:11:37:33:37:e9:0b:b3:a4:5f:
                    e1:89:08:92:60:93:d5:97:6b:64:04:69:20:0c:6d:
                    f7:74:39:eb:d2:84:77:97:f2:2e:63:d9:71:77:21:
                    64:f2:90:b6:6f:77:a7:0c:25:c2:e7:3a:37:1f:80:
                    21:21:b9:1e:71:46:70:87:6b:ac:17:34:69:13:32:
                    04:74:35:10:bd:27:58:e4:48:2e:53:a5:2c:58:19:
                    c0:97:96:f3:c5:dd:22:1e:0f:de:f1:5d:94:69:02:
                    14:6d:33:fd:1d:72:8d:01:65:29:86:c6:82:4b:8a:
                    75:ae:e3:44:89:28:95:9f:66:46:00:0c:b2:7c:09:
                    02:c0:19:37:0e:3d:f2:ca:e6:e4:43:c4:a1:15:5e:
                    96:72:fb:0a:d3:23:70:08:e7:39:d9:c8:c5:96:22:
                    98:63:c8:ee:ac:b9:87:f8:1c:e8:fa:39:80:dc:e6:
                    eb:13:1b:dd:fb:e3:25:0b:46:9e:c7:bd:41:8b:55:
                    e4:f8:58:b3:a8:ae:99:54:f0:34:af:9a:1f:8c:14:
                    9d:b5:e5:cd:69:33:b6:62:c7:b5:01:68:93:93:64:
                    da:b6:1c:b4:56:64:33:17:22:11:d4:b4:80:f6:b3:
                    a9:2c:bd:75:57:9c:50:b5:1a:13:5d:f0:fc:53:7a:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:76:FA:2D:07:D8:16:C8:42:40:E0:00:DD:1D:9A:6F:49:3E:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2582b2c9-8f85-4ef2-964b-3c65a2e0042f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:324c::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:76:b8:1e:5b:61:5e:de:f6:69:85:bd:cd:be:8f:89:71:ee:
         29:f3:e7:c3:26:0f:89:3d:cc:50:f7:ef:4d:bc:a7:99:f1:29:
         f2:92:af:5d:85:ae:51:45:9f:9f:52:7f:85:32:ff:51:db:5e:
         16:d1:ee:2d:46:1e:c3:2d:45:5d:e5:fd:66:5e:ee:e7:47:ac:
         46:a1:52:84:63:45:9b:dd:aa:eb:0e:78:a3:71:60:72:46:b4:
         35:c0:10:ea:30:c7:08:77:be:7a:f6:86:24:54:b5:89:62:32:
         13:04:e9:3f:13:64:39:06:95:b6:05:20:80:97:2b:9b:0f:15:
         69:13:18:cb:60:f1:06:06:29:78:94:86:a4:b7:50:c9:32:9d:
         d3:4e:d7:ad:12:e8:80:2b:c9:f0:55:c0:c2:86:40:33:05:a4:
         05:71:98:b5:f5:95:56:ad:20:40:b2:b7:42:c2:51:96:50:9a:
         83:6c:c5:65:37:c1:8c:5c:8a:72:86:76:79:93:d4:4a:f4:f9:
         1f:3f:4e:18:be:d7:46:fd:1a:61:37:92:98:21:40:a6:e4:f2:
         f1:ec:8a:9a:57:2f:a5:aa:44:9a:80:23:94:d9:2e:46:44:46:
         e4:72:33:1f:f4:b3:4f:db:43:cd:84:53:21:f9:be:be:e1:11:
         75:dd:ad:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:53 2026 by rpki-client