Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31540cd5-6b2a-497e-a932-41731bd5218a.roa
File:                     31540cd5-6b2a-497e-a932-41731bd5218a.roa (raw, json)
Hash identifier:          DHzcCKYP89Jr+t4Gl0Vo+ZhEzV+unNZZeZuZFrmMo1I=
Subject key identifier:   D3:D1:55:CF:6C:53:5C:A9:50:1B:A2:13:EC:B9:4D:DA:5F:BE:8F:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0359A35669448311EE119BB8A37B077927ACEE48
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31540cd5-6b2a-497e-a932-41731bd5218a.roa
Signing time:             Thu 23 Jul 2026 09:51:50 +0000
ROA not before:           Thu 23 Jul 2026 09:51:50 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a94::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:59:a3:56:69:44:83:11:ee:11:9b:b8:a3:7b:07:79:27:ac:ee:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:51:50 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=a6b9973de553b63a80b2309de8c6edb0a3817e095c38c65ee394338a7cc376f0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:01:5b:cb:f8:91:ba:a4:7c:65:73:0f:91:
                    39:36:14:c5:ed:4b:d8:f1:15:fd:b8:93:3b:fa:aa:
                    00:f8:1d:a0:13:84:67:45:98:67:ac:aa:a6:a1:40:
                    e8:73:c9:ab:a3:de:7d:24:fc:c0:fd:a5:fa:de:52:
                    26:a9:1c:b5:96:62:ec:fd:55:e5:22:ad:5b:20:ba:
                    46:44:29:37:ec:36:07:be:22:0a:76:a4:31:d4:45:
                    33:7a:04:d0:15:cf:20:1d:ae:e4:08:22:99:6f:20:
                    f3:d1:bf:e1:15:5c:40:54:fc:21:0c:da:c7:6d:fe:
                    f5:2d:50:94:a5:b9:61:c7:e6:e4:e6:1a:18:64:a7:
                    9f:3f:06:60:ea:29:2e:40:fd:1e:95:70:cb:de:d4:
                    51:e7:ec:4f:b0:d3:34:2b:34:3f:ad:6a:85:c6:18:
                    37:57:bf:dc:8b:34:7e:2e:de:85:36:0e:2f:fb:66:
                    11:04:5e:a3:f0:f6:2b:27:a1:f6:19:48:92:4e:7a:
                    db:5d:78:b5:be:82:72:ff:4e:43:a9:7d:3e:be:ab:
                    37:32:67:14:4b:06:cf:4c:ba:e2:35:96:ae:cd:c7:
                    b6:63:bc:a3:51:dc:31:44:55:ad:ee:f5:23:e9:61:
                    c0:4b:12:19:e6:66:66:04:97:bb:34:83:7a:4e:1b:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D1:55:CF:6C:53:5C:A9:50:1B:A2:13:EC:B9:4D:DA:5F:BE:8F:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/31540cd5-6b2a-497e-a932-41731bd5218a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a94::/47

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:53:e0:46:d9:46:48:42:f3:10:fd:32:ef:4b:fc:68:8c:
         4d:fc:41:85:91:46:1c:57:17:f0:73:77:be:c8:f3:cd:cc:ea:
         b6:bc:5a:cd:f3:8c:68:9a:df:65:18:a5:c2:96:88:08:b7:c1:
         d1:04:cd:80:b3:82:1d:5e:86:09:4f:93:b6:ba:08:13:19:d9:
         c1:58:bf:d2:cd:e9:8e:1c:1d:cd:92:d5:4e:44:40:1b:84:79:
         8b:cd:d1:6b:80:90:70:d7:f6:70:5b:7a:0c:97:ff:45:8b:8f:
         96:50:f0:c8:b2:4c:45:2a:25:76:6f:f0:ed:d9:48:a0:3b:4c:
         df:18:bd:69:1f:73:ce:27:cd:b2:90:e4:fb:29:98:78:f7:2b:
         e1:e1:b6:9e:2d:72:6d:00:4f:c8:d3:92:98:75:e8:c1:cf:a6:
         4b:5b:ae:4f:8f:af:67:3c:36:65:a7:93:51:7f:02:40:23:80:
         20:24:3a:e1:8b:04:9e:d0:e8:f9:37:dd:98:5d:89:ce:13:02:
         52:cd:af:69:ea:85:30:24:3d:5d:15:40:b6:cc:c7:29:0a:e2:
         cb:60:c4:81:75:17:56:a9:2b:b9:1e:1e:f3:41:bd:73:60:a4:
         c9:e8:37:84:29:15:79:f6:ad:e9:ff:64:d2:00:80:e5:71:84:
         d4:b7:b8:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:48 2026 by rpki-client