Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/332190c1-0352-4dcd-ac0c-f1ea20705985.roa
File:                     332190c1-0352-4dcd-ac0c-f1ea20705985.roa (raw, json)
Hash identifier:          c7drDZeoT1sHG0FUdII+tV5E3FFoMwRPgasoCvFB9dQ=
Subject key identifier:   45:29:5B:9D:06:F0:DB:58:5F:B5:6C:A8:EE:94:C8:F5:85:9A:1A:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       16EF3ADF408090800F1C55256D8D23DC76B78A13
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/332190c1-0352-4dcd-ac0c-f1ea20705985.roa
Signing time:             Wed 22 Jul 2026 02:20:40 +0000
ROA not before:           Wed 22 Jul 2026 02:20:40 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fd8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ef:3a:df:40:80:90:80:0f:1c:55:25:6d:8d:23:dc:76:b7:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:20:40 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=e00b502e306f0b6b5be388b222e2c8454e2fb898a7956ea4fe4836de4e5ed40d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:9a:32:b9:0e:d1:17:7b:07:ad:e9:3d:f1:
                    d2:65:5f:e5:e3:6c:42:83:1e:0e:ae:7b:62:83:f7:
                    a3:ca:91:8c:3a:0a:d4:ef:a7:75:e8:79:1a:3e:35:
                    e7:22:78:fa:f7:81:2d:64:77:c5:cf:e2:3b:37:7a:
                    5c:12:26:da:33:65:c3:a1:0a:ca:83:6c:d7:98:c8:
                    a4:1e:fd:a8:98:d7:31:53:8d:33:bf:e3:47:50:f0:
                    2f:d8:0b:39:34:ea:6a:1f:c8:9a:d1:66:03:d8:b4:
                    7c:56:f4:9a:04:46:f2:88:df:77:df:27:7f:10:cd:
                    3b:f0:26:65:67:42:18:5c:7d:01:68:f0:fb:d4:79:
                    87:c3:81:5d:45:10:41:82:ab:a8:43:a2:d9:70:eb:
                    2e:a3:1b:4b:d8:2c:1c:33:56:39:5c:16:48:83:6f:
                    ce:1b:01:e5:42:47:d5:11:0d:a3:06:e4:cc:b2:c9:
                    cc:0d:41:66:0d:8e:fb:be:f6:30:5e:19:3c:9c:da:
                    ae:4b:90:c8:7d:f4:df:65:3a:52:72:17:41:69:1c:
                    c3:4e:45:16:17:86:c6:6c:ef:02:5b:23:38:77:be:
                    1c:4d:21:db:e8:58:1e:04:a6:d9:f6:4a:6c:c0:6a:
                    e0:fb:40:75:57:39:a8:63:0f:bc:f7:7f:a8:4b:24:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:5B:9D:06:F0:DB:58:5F:B5:6C:A8:EE:94:C8:F5:85:9A:1A:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/332190c1-0352-4dcd-ac0c-f1ea20705985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fd8::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:99:5d:31:83:c5:cb:54:e6:d2:98:71:9d:64:e5:bf:e1:0e:
         05:26:60:24:ec:76:5d:00:c1:c5:80:51:f3:d1:0d:78:50:4f:
         09:4a:2e:80:2b:88:2a:d9:88:e7:37:05:4a:eb:e4:8d:80:02:
         a1:11:6c:04:57:f1:f1:a7:ca:88:52:c1:4f:fc:b3:a4:fa:5a:
         fa:0d:85:98:dc:06:e3:99:f1:3e:e5:44:48:52:fd:00:c7:f1:
         bb:ca:da:dd:7a:22:d8:6b:5c:32:b0:e4:95:97:b1:01:df:2d:
         50:31:16:71:ad:6b:12:62:b1:0c:fc:7e:6e:11:e5:b6:4f:52:
         9f:cd:39:47:c7:65:b3:ef:15:ef:bc:75:73:aa:a2:6b:63:10:
         fa:83:1d:3d:c1:1c:c8:fc:99:c3:eb:fa:37:13:66:71:10:98:
         1e:7f:9a:67:8b:de:f1:05:1c:bb:7d:47:0c:9a:14:c4:3e:8e:
         a9:03:a5:b4:1b:43:89:47:bc:6f:a7:dc:da:42:40:b3:0d:24:
         22:08:10:fe:45:e0:82:a1:55:f8:b8:f6:79:b7:aa:8b:e0:0a:
         59:a4:fe:52:84:38:aa:f3:04:24:29:42:e1:4a:87:34:37:02:
         26:57:2e:37:40:79:eb:3d:d3:9b:71:ae:a4:40:ca:b9:29:c8:
         7c:38:fb:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:10 2026 by rpki-client