Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa
File:                     329f8db9-b92e-4041-8390-4beffed72075.roa (raw, json)
Hash identifier:          EdiDyRa/XjZnkZAHbMf7fvEi9XHQfel2kl/gL1YlJco=
Subject key identifier:   FD:D5:33:35:9E:F7:AA:B3:0D:3F:E8:D8:3F:72:EB:76:AD:92:3B:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33C1BBC5D0B4938377DFF3C24E74A96D161A4164
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa
Signing time:             Wed 22 Jul 2026 01:11:58 +0000
ROA not before:           Wed 22 Jul 2026 01:11:58 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2db8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c1:bb:c5:d0:b4:93:83:77:df:f3:c2:4e:74:a9:6d:16:1a:41:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:11:58 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=99f5926267e8230a6b526ae750e727ec940253e5d2a0b198b79b702ee2046a1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:5b:ee:fa:02:ef:18:f7:cf:4a:4a:9f:fd:
                    e3:4b:ae:5e:b5:eb:77:16:bf:85:b0:68:cc:ec:cf:
                    36:28:f8:75:5a:02:fd:68:26:5e:57:56:be:05:90:
                    50:77:c8:0e:c6:7f:40:5f:82:91:07:64:81:ab:58:
                    f3:e4:f5:9a:dc:11:03:3c:78:cc:c6:9b:03:1f:56:
                    5b:0c:2d:ac:a3:2f:18:f6:0f:14:e9:e1:e3:e1:d6:
                    f9:74:4b:c7:5f:88:d6:14:27:3f:d7:b8:27:a9:1a:
                    4c:40:ad:92:25:de:c4:c8:4e:53:44:3e:1b:db:55:
                    da:86:ef:12:67:96:26:5e:60:c2:ba:89:96:09:e5:
                    55:07:b0:6d:8a:3f:51:71:61:f1:72:0a:ea:e1:74:
                    9d:b1:3c:d9:13:7a:e7:92:c0:5c:3e:89:c9:ae:e6:
                    04:82:71:8c:b4:bf:fc:ab:88:50:f6:83:2c:af:61:
                    78:6f:50:a5:9b:2e:3f:1a:a1:fa:7e:10:19:dd:c1:
                    1a:7f:5c:70:81:90:ea:87:3b:8b:6d:13:f8:d4:8d:
                    d2:91:e1:68:45:6b:35:96:fc:32:55:81:e6:3c:8d:
                    6d:31:5d:6d:23:68:0c:bc:e1:db:5c:29:3c:d4:9a:
                    a6:4d:c7:28:6b:58:f7:0f:92:8d:e8:a1:61:3c:de:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:33:35:9E:F7:AA:B3:0D:3F:E8:D8:3F:72:EB:76:AD:92:3B:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2db8::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:47:2c:09:c5:90:a3:81:99:10:36:08:c0:19:a1:66:4c:
         49:bc:c4:53:b0:29:4a:46:44:16:e6:f3:b6:22:c9:99:82:08:
         6c:c9:1c:32:20:33:41:12:26:5d:27:2e:d4:28:db:e1:12:d5:
         9d:94:79:0b:aa:38:4f:26:29:41:79:0e:8e:46:f6:3d:f1:44:
         8f:b6:1c:27:81:82:33:14:5e:9a:fb:1e:3c:d1:cf:bf:56:8f:
         ea:23:00:e9:e2:94:42:b0:ac:32:2a:f8:4f:6c:c8:05:bb:45:
         2b:31:db:72:24:61:a0:54:10:61:81:d0:af:06:67:be:db:e8:
         f5:df:34:83:a7:ec:15:31:86:df:5c:e9:48:df:55:ec:da:b8:
         5d:d3:cd:07:f0:55:2f:27:9d:3b:4c:88:8d:1e:1c:2a:34:ca:
         95:93:1f:c5:83:14:f8:1f:ea:39:e0:cb:c1:14:ff:48:1a:c6:
         5f:43:8c:f6:de:93:c8:3f:56:13:24:53:73:a7:7c:55:da:7a:
         64:f4:a0:90:c2:06:90:a2:10:ca:11:7e:0a:3f:60:52:ee:bc:
         f5:ea:fb:b0:b9:59:7f:d3:44:32:40:c0:60:89:b6:ca:77:b6:
         d7:71:19:89:de:e0:61:6b:65:ad:e1:45:0e:38:11:66:24:0f:
         e4:43:17:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:02 2026 by rpki-client