Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27a7c98f-405a-491e-a7fa-fb6eb366cf87.roa
File:                     27a7c98f-405a-491e-a7fa-fb6eb366cf87.roa (raw, json)
Hash identifier:          CQe67qOdkVd6eP2tswZzYxGEWGQwEDueNmPENYEiLKo=
Subject key identifier:   C5:E9:B7:08:F1:0C:EB:4F:22:FC:5C:CB:97:0E:0F:C0:5D:7E:74:19
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6FA6D2DBC1CB6CB93BB32E7B90EBDF3C86F22955
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27a7c98f-405a-491e-a7fa-fb6eb366cf87.roa
Signing time:             Thu 23 Jul 2026 03:41:19 +0000
ROA not before:           Thu 23 Jul 2026 03:41:19 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3618::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a6:d2:db:c1:cb:6c:b9:3b:b3:2e:7b:90:eb:df:3c:86:f2:29:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:41:19 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0100bd23e944839bab2d3ac0a2b11a8026a37f1399e88dcd9dd0069b6c9a65e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:00:cc:47:b6:d2:bb:59:78:ba:6d:23:4c:
                    60:04:fe:b4:8a:96:a4:95:65:45:b4:d8:63:9e:d2:
                    5b:07:69:d0:d0:01:04:06:af:f1:99:c8:7c:0e:8e:
                    22:c6:57:01:fd:cb:50:ae:1d:02:1f:ce:e9:d1:db:
                    8f:a8:10:98:5c:06:c6:1c:73:a4:fd:0a:1a:e3:8a:
                    b2:ae:e9:f6:8b:fa:d4:3b:c1:d4:69:5a:45:86:3d:
                    dd:35:b1:6e:eb:61:98:ea:63:70:f1:11:17:f5:a0:
                    a1:5f:9c:61:77:39:d1:e4:31:5a:68:4f:19:e9:d2:
                    c1:d8:0b:52:6d:77:6c:88:96:f6:a9:8c:21:01:e3:
                    b2:52:09:fd:f3:eb:25:af:11:c6:88:fc:b0:68:e3:
                    dc:f6:b4:57:33:b1:40:39:4b:11:21:94:ee:76:08:
                    97:7c:de:84:d4:21:75:8a:78:72:24:da:19:68:05:
                    6a:7c:ae:6d:73:3a:ca:3b:00:7c:04:13:5f:39:16:
                    f3:7f:9e:05:c1:2e:63:77:87:10:17:73:25:3b:6c:
                    ca:ba:eb:3c:eb:31:44:92:f1:ec:f6:27:40:76:05:
                    22:c4:a2:fe:de:8a:82:78:b0:ca:eb:31:7b:e2:7e:
                    a6:38:d7:97:4c:f7:54:81:7b:a5:c7:c6:8a:ec:99:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:B7:08:F1:0C:EB:4F:22:FC:5C:CB:97:0E:0F:C0:5D:7E:74:19
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27a7c98f-405a-491e-a7fa-fb6eb366cf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3618::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:24:cb:c6:be:62:b0:85:74:5f:18:e5:26:b5:c1:7d:38:56:
         30:18:64:de:04:0b:82:16:2a:a0:a6:63:77:99:b9:b1:0f:dd:
         24:a7:26:df:36:5d:05:e2:06:eb:85:c6:84:9c:69:03:c0:58:
         70:be:e9:8e:6c:1c:ce:64:c8:d6:4c:b3:d7:b6:c9:f3:f8:5d:
         78:11:7c:d3:b6:01:1a:75:02:5b:f2:16:da:21:9b:a2:94:ca:
         f5:3d:ec:d1:7c:ad:95:57:17:5d:fd:7b:35:d3:b2:83:7c:25:
         17:aa:b4:ad:51:99:0f:9f:11:02:ce:25:24:59:44:d1:c6:b6:
         ea:93:2a:9f:bb:74:1c:5e:15:15:d0:b7:23:8d:2a:df:3d:be:
         45:a0:86:6c:58:c8:80:23:c3:de:ae:f5:07:ca:7c:8e:0d:65:
         49:fa:c2:88:b1:57:46:37:7f:c7:38:3f:e9:51:ae:49:17:69:
         e0:f2:fe:f1:dd:40:08:e1:39:48:25:c4:af:66:01:21:69:64:
         90:17:dc:e8:e7:60:b7:9b:93:a4:cf:16:e7:ac:ee:e4:e4:9f:
         7d:fc:7b:3c:28:46:59:2b:61:30:ee:9e:19:4c:44:2e:7b:e5:
         4d:a0:49:f0:43:91:7b:ba:b2:6a:be:58:c6:9e:ac:82:be:c8:
         ce:94:f1:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:50 2026 by rpki-client