Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27b90b92-f38d-44b1-9824-8e4f9b949c89.roa
File:                     27b90b92-f38d-44b1-9824-8e4f9b949c89.roa (raw, json)
Hash identifier:          cR4hlYC0ytDsGYPyr9XkUj+B6F4HFyMc5Jct8ZiGuYA=
Subject key identifier:   80:8B:73:E5:6F:9F:6C:0F:CF:CC:06:CF:7E:AC:64:E5:02:A1:E8:D0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       50B7F927A42C0781AB2251A1995923ACB24414
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27b90b92-f38d-44b1-9824-8e4f9b949c89.roa
Signing time:             Wed 22 Jul 2026 02:12:00 +0000
ROA not before:           Wed 22 Jul 2026 02:12:00 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2caa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b7:f9:27:a4:2c:07:81:ab:22:51:a1:99:59:23:ac:b2:44:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:12:00 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=95ed989066408cdf7bd5245e90e89110747f45c2610637525ac5a8be9bd9caf2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:3d:97:2d:1d:2b:88:b5:ec:30:b0:bf:87:
                    da:e7:66:7e:32:ff:9f:90:d9:c8:aa:96:6a:06:65:
                    2e:49:08:fd:25:2d:12:23:09:85:62:ee:ec:87:7b:
                    70:f9:94:74:3c:81:f9:17:f2:9c:76:5b:00:fa:ec:
                    12:12:8b:15:78:1e:a1:d7:86:68:fc:a8:a0:25:f5:
                    75:67:2e:d7:11:e5:b0:cc:2a:91:60:97:55:7b:48:
                    c6:33:54:8c:83:c6:f9:17:89:a1:0b:b7:00:26:5f:
                    c1:97:6c:39:03:0e:e6:df:55:46:7c:b0:2f:89:63:
                    75:25:5c:de:d5:90:dd:a4:d0:06:51:51:1c:36:bc:
                    e7:d8:9a:2b:63:7a:40:fd:e4:ba:ac:27:c4:4c:33:
                    5d:71:24:9e:dd:b7:22:79:b5:7a:ef:7a:3b:83:13:
                    6c:a4:23:63:26:2a:7b:9d:be:ab:7a:49:e3:34:e1:
                    a2:fe:2b:24:ad:7a:84:2d:00:93:f6:95:ff:a4:68:
                    24:e8:b2:08:b7:1a:1a:2c:81:d9:16:25:61:97:47:
                    d2:88:77:6f:f4:b0:14:9a:83:b3:ee:dd:85:fb:0a:
                    42:6e:1a:2a:5c:53:f3:d3:58:10:41:50:70:a0:0f:
                    7d:4b:15:05:c8:94:bf:e1:8b:d7:e4:74:8d:44:2c:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:73:E5:6F:9F:6C:0F:CF:CC:06:CF:7E:AC:64:E5:02:A1:E8:D0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27b90b92-f38d-44b1-9824-8e4f9b949c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2caa::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:45:33:58:b8:c5:f3:c7:1f:8d:76:71:00:7c:b1:77:4f:47:
         22:65:3d:48:2b:42:3a:f6:04:01:22:00:df:69:e5:79:fe:60:
         6b:12:f0:25:c9:f1:82:8d:76:11:f8:07:25:3c:90:2c:84:f2:
         69:db:45:61:83:5e:b5:a9:16:31:05:35:f8:5a:ae:a3:18:76:
         29:22:5d:79:43:1b:bf:0e:20:c6:43:be:7e:84:14:5b:30:19:
         09:d6:2f:4f:8b:b0:c6:b0:ff:e3:32:ca:84:d3:76:ce:68:86:
         bb:ec:8a:d5:97:0e:a5:53:ff:78:e0:df:33:47:2b:08:e3:fd:
         cb:bd:7c:e1:49:ed:88:57:74:b3:8e:77:35:fc:2a:d8:15:93:
         9b:c2:f2:c3:7c:de:85:df:7b:ec:53:55:29:8f:4e:83:82:fd:
         6c:35:01:06:5e:2d:15:5a:0a:d4:7d:e6:a8:d9:e8:b9:20:cb:
         a8:3b:6c:c9:bb:32:9c:47:38:5b:b1:34:7e:bf:d8:29:37:5a:
         9f:3c:78:ec:0e:7a:f9:4f:6a:44:1a:65:f6:9b:48:7d:2f:66:
         19:83:92:ce:ac:3f:35:16:94:96:de:ac:e7:b9:b5:02:75:a2:
         c6:fd:1f:ba:43:ee:fa:01:e1:e7:75:20:f9:52:44:04:2f:34:
         03:cd:b9:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:13 2026 by rpki-client