Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa
File:                     30bdc8fa-36f4-4808-978b-5636298cfb64.roa (raw, json)
Hash identifier:          MmWjDMSzdaj0wnM6OVnuUEypZ7G//3MEiqEQSvoCrM4=
Subject key identifier:   F7:D7:72:E5:22:12:9F:97:C7:F7:52:46:10:C5:1B:5B:CE:E0:2A:06
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72907A834984A8A34E407F09A7B90B02A24CFD2C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa
Signing time:             Wed 22 Jul 2026 02:20:06 +0000
ROA not before:           Wed 22 Jul 2026 02:20:06 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bca::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:90:7a:83:49:84:a8:a3:4e:40:7f:09:a7:b9:0b:02:a2:4c:fd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:20:06 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=060e12dd57c0f06e7adb1d9a019642e1acbfea52c8f8106a2723aa7936f03c2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:bc:03:12:7b:2b:a2:e0:71:48:83:ce:a7:
                    28:81:df:cf:da:65:12:80:85:2e:f7:4a:82:17:7b:
                    01:8a:97:7f:bb:1c:53:fd:89:79:43:6d:10:7c:3c:
                    5d:80:c7:9c:3f:22:2e:ab:69:4a:f4:d0:d3:67:e6:
                    be:f7:5e:7b:5b:d9:a6:b1:7f:27:c0:8c:56:e0:9a:
                    43:10:51:a7:d3:6f:05:d0:73:9a:c8:18:a0:b7:35:
                    8f:73:cd:99:f4:10:d3:0a:d7:c0:34:22:dc:10:1d:
                    3d:55:8e:94:43:b1:5a:62:a6:45:65:3c:54:26:ce:
                    1e:a4:9b:1f:44:6e:d5:f9:da:ac:19:ed:c8:7d:a4:
                    60:c3:fc:71:37:10:44:e9:48:31:01:94:8d:92:fd:
                    f2:b6:12:6c:f1:ae:06:16:ea:fa:50:d6:bb:06:25:
                    50:6d:22:c6:5e:df:bd:15:89:15:37:b2:4b:59:fe:
                    72:80:11:99:be:32:c4:d8:d3:f2:f6:52:4d:67:fa:
                    44:6f:12:9a:26:f4:e9:86:c6:30:81:83:cc:6d:45:
                    cc:d1:5d:37:a2:08:0c:69:42:b6:8b:5d:35:5b:d4:
                    25:f7:4a:4a:b4:4f:d9:69:dc:1b:a4:1e:58:ca:93:
                    86:5f:2a:ac:01:ec:fc:b9:40:8b:b0:a1:3d:3f:37:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:72:E5:22:12:9F:97:C7:F7:52:46:10:C5:1B:5B:CE:E0:2A:06
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bca::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:fb:41:d5:93:f1:1b:5f:3f:fc:1f:c0:cd:c4:bf:37:7f:
         e4:80:66:b1:76:51:b2:4b:d3:54:12:28:56:d9:7a:b1:0a:11:
         ac:5e:85:88:f7:da:06:dc:d2:45:6d:aa:d7:97:83:a6:b8:d9:
         49:07:43:f7:e0:66:2e:47:d1:5f:bb:87:1e:56:20:1e:3e:42:
         52:34:02:8e:b6:99:c7:7d:48:c3:75:67:37:1c:4a:49:5b:8a:
         f3:bc:fb:29:8d:c3:96:80:1f:d4:e9:6a:9a:e3:f3:25:c0:85:
         7f:0d:02:48:ce:2c:57:71:73:d2:72:cf:a8:e2:e8:4f:16:25:
         a5:85:53:64:1b:7b:94:b4:89:95:76:77:46:1e:a5:77:3a:fa:
         61:15:3b:f5:75:ad:51:63:56:6c:b2:74:c7:0b:12:2f:1c:98:
         bb:de:ed:7a:b0:e9:97:53:2d:84:09:57:2e:62:22:fc:f9:c4:
         5a:a6:f9:95:f8:6c:da:68:58:89:5c:82:3c:d1:47:c7:82:3b:
         95:1e:b5:62:18:7e:50:20:61:af:72:ec:c1:0b:51:1c:4e:13:
         3f:04:cb:d1:70:4f:dc:ac:6b:5b:e6:6e:b8:35:22:04:14:14:
         6d:15:4f:26:ab:e6:10:ca:07:20:1e:27:10:b9:0c:b3:1b:f8:
         46:b5:b2:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:13 2026 by rpki-client