Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d471abb-b45d-4cbc-86c5-65fd8f408951.roa
File:                     2d471abb-b45d-4cbc-86c5-65fd8f408951.roa (raw, json)
Hash identifier:          Ql9Aib6k2uVODPjzq0Ch0rJS1ghSX6NgfebUGjzy3e4=
Subject key identifier:   BB:10:D1:5F:EE:4F:8B:20:6F:8D:1D:A7:ED:61:B7:78:E8:93:06:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       558094D21D7EAB00792B857C582969665243ACCB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d471abb-b45d-4cbc-86c5-65fd8f408951.roa
Signing time:             Thu 23 Jul 2026 03:10:56 +0000
ROA not before:           Thu 23 Jul 2026 03:10:56 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3640::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:80:94:d2:1d:7e:ab:00:79:2b:85:7c:58:29:69:66:52:43:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:10:56 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c3b0a9541e7e76e5b6364807bc2200acd42fa5f96f070aefe95b35c3c7611c0d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:32:1b:e5:6f:c1:a4:82:47:45:1d:00:99:
                    97:df:02:dd:db:73:31:4a:cb:8c:32:a5:25:26:37:
                    fa:51:51:66:48:61:40:bd:3d:65:df:3c:06:6f:68:
                    4b:78:8b:fd:5d:72:f6:a4:c9:0c:aa:95:8d:b7:3c:
                    1c:aa:f7:ee:1a:12:86:c0:f8:2e:3f:85:58:c6:34:
                    05:f2:ad:a0:0f:cf:8e:cc:72:ed:06:85:0c:ff:65:
                    c2:b2:3b:9a:2e:dc:1f:df:0b:e3:f7:52:7a:02:50:
                    6a:6e:ce:9f:ae:01:b4:94:b9:5a:93:2d:71:3b:e7:
                    19:b1:7d:49:5f:33:01:d0:0b:9f:d3:67:0d:26:29:
                    50:01:08:46:22:ff:00:ab:d9:0f:b9:01:b9:0d:f0:
                    49:01:d0:c9:a0:15:f2:28:4c:0c:39:fd:bd:6c:8b:
                    bc:9c:f1:c4:a9:7b:f2:45:72:c9:9d:e4:bb:90:9b:
                    a5:7b:bb:b1:6b:9c:be:1a:14:90:e9:d3:21:a4:56:
                    20:48:50:e0:eb:b5:10:fc:8b:f3:42:2b:0a:3c:3b:
                    df:3f:29:35:9b:c1:4f:ff:42:8e:11:7a:91:be:6c:
                    dd:c2:a4:5e:cc:53:67:f1:f3:51:b1:d0:33:36:29:
                    51:34:b5:94:0a:10:f8:36:92:76:21:2d:f2:fd:52:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:D1:5F:EE:4F:8B:20:6F:8D:1D:A7:ED:61:B7:78:E8:93:06:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d471abb-b45d-4cbc-86c5-65fd8f408951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3640::/46

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:b0:49:10:a6:b9:62:f1:b9:84:8a:8e:cd:ef:06:c1:86:
         76:37:e1:1d:d5:c8:5f:24:be:54:94:39:b5:75:b2:e7:41:71:
         3a:26:bf:eb:7e:d9:1d:5e:de:d6:77:7b:ad:b4:88:29:73:72:
         dd:3b:e9:73:55:1f:17:a6:8b:a4:3f:d6:df:da:2c:65:e0:36:
         3a:2e:5f:88:e0:ed:41:0d:7a:0e:ed:54:74:c7:9d:f1:9c:5f:
         a1:8a:7f:c2:dd:2e:02:96:43:82:94:0c:4f:76:98:41:ae:86:
         89:7a:6f:14:b5:a3:69:2d:0f:f7:fe:99:47:df:e4:16:1e:cf:
         b2:9d:9a:77:12:23:d5:b8:41:0d:ff:77:90:3b:0b:c6:fb:f8:
         f3:64:c0:58:73:4b:08:43:1c:b1:9c:91:13:a5:c7:af:95:a6:
         2c:4c:8b:dd:17:95:b4:d8:29:ac:d7:f7:86:7a:8e:2d:8d:04:
         ea:44:57:66:fe:26:ce:00:e5:5b:72:de:6a:3b:61:b2:75:74:
         4a:e1:e5:69:26:e9:a4:2f:50:5a:62:52:2b:7d:09:62:ad:f7:
         21:a1:2a:19:bc:95:95:69:87:b3:22:a6:ec:4a:d9:3b:49:17:
         91:9b:dc:10:57:73:a0:ec:14:65:1a:b5:09:22:aa:37:98:8b:
         57:2c:3a:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:18 2026 by rpki-client