Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289182a0-5979-496c-b87f-7221c0e6da4a.roa
File:                     289182a0-5979-496c-b87f-7221c0e6da4a.roa (raw, json)
Hash identifier:          eH0VMjbyzPKjSXHYBz2bYzR8mLLe1MlYADMMpI7c9y4=
Subject key identifier:   F5:51:F3:D2:1E:6B:E8:B6:E8:F6:04:3B:79:46:A7:81:20:5E:C2:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       75A28E3A5645CEF95861869CF7D147181A36FBA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289182a0-5979-496c-b87f-7221c0e6da4a.roa
Signing time:             Thu 23 Jul 2026 12:10:39 +0000
ROA not before:           Thu 23 Jul 2026 12:10:39 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3744::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a2:8e:3a:56:45:ce:f9:58:61:86:9c:f7:d1:47:18:1a:36:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:10:39 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=8be9df1b3bbaf429848a05172129a35fa76972b3ac4857c5462cb04b5f6d96a1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:f3:a1:37:fe:3c:29:97:f4:da:96:e5:98:
                    e2:0a:00:76:e8:60:b6:11:4e:12:ab:4a:14:87:ab:
                    8c:69:82:2b:2e:99:d2:70:09:01:53:00:ba:ff:1b:
                    56:7c:c5:f2:cc:78:0c:de:ef:9a:22:f1:bf:c8:d6:
                    04:be:88:50:9a:10:dd:e4:f2:af:1a:9b:52:de:37:
                    2a:cf:7d:d4:ff:f6:fd:6d:70:8e:4b:ed:b0:b7:0c:
                    e8:5a:22:c2:93:35:69:2b:e7:ef:22:0d:82:d0:e4:
                    04:78:41:9b:55:e6:5d:dc:a8:22:16:41:6d:8b:65:
                    cc:23:d7:eb:6a:d2:1a:14:11:b6:d3:1a:58:51:1f:
                    41:67:70:f6:a5:9c:67:36:4a:21:ee:4a:3e:af:e9:
                    3e:ce:00:ed:55:0e:e3:64:e1:33:83:7f:98:01:d5:
                    e6:31:ba:c2:8f:c7:43:82:84:5a:7e:3e:bb:e8:5e:
                    50:5c:be:fe:74:03:7d:aa:cb:ef:6a:a0:ad:8b:52:
                    70:d7:e6:c8:9d:ac:f4:3b:94:08:b5:f9:4c:a9:f1:
                    4c:92:6c:5f:49:12:6c:49:1b:88:ec:1a:7d:00:b0:
                    89:9d:9b:0b:51:10:f0:a7:ea:b0:f6:c1:cb:36:62:
                    45:3b:02:8c:15:38:79:df:de:0f:95:06:1f:da:cb:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:F3:D2:1E:6B:E8:B6:E8:F6:04:3B:79:46:A7:81:20:5E:C2:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289182a0-5979-496c-b87f-7221c0e6da4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3744::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:69:95:f1:17:57:d3:84:2a:5e:f8:b6:31:6e:d4:0c:f0:c8:
         e0:3d:73:74:cc:a3:d7:a6:9d:be:59:42:b0:d3:65:1b:87:d8:
         f0:54:28:92:98:3c:e6:ed:10:b7:a8:8a:e6:2e:46:6b:54:7e:
         43:50:a1:5d:7c:fd:37:9a:af:18:5b:6e:22:6b:2d:a8:66:87:
         b6:08:af:1a:43:b1:bc:a1:70:56:92:d0:e6:e4:6a:18:39:d4:
         1f:67:e3:58:ac:c4:a4:a5:56:df:d9:81:4e:f3:46:cc:08:9e:
         c8:4a:a8:13:e6:33:2d:fa:d5:bd:d1:33:df:6e:64:3e:c6:78:
         4c:ff:f7:ae:b2:87:fc:9f:e1:6f:e9:67:20:87:e4:bf:3f:b6:
         54:cb:70:4d:a8:47:30:e8:b5:76:72:0f:1f:f5:4e:36:b3:32:
         e7:9d:22:79:ef:32:6a:c4:8e:3c:c6:ab:4e:41:7f:7f:4a:69:
         ce:c5:a6:3f:b5:7c:36:16:57:1c:08:7c:ae:96:70:6b:8d:c8:
         34:6b:c1:c2:a0:80:df:63:fe:b7:f9:d7:36:a5:d1:f0:af:15:
         a5:63:82:69:72:69:d7:e7:89:01:62:23:34:92:74:f9:cf:5b:
         04:d7:a8:61:80:6b:6a:c6:e3:71:6a:00:98:fc:76:d1:88:d6:
         5b:86:ab:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:43 2026 by rpki-client