Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33c3c88b-a752-4b65-b2a1-705b5099f576.roa
File:                     33c3c88b-a752-4b65-b2a1-705b5099f576.roa (raw, json)
Hash identifier:          5aL9U+YNq3JJkMqowyZi6NpCMzGbhckABoATM0hZfYk=
Subject key identifier:   42:64:E4:0E:F9:6E:2D:B8:DE:7D:14:AE:CB:A3:96:D1:AB:1C:64:54
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       45155F3C4EB51108E3455C4ECF218B448F192DD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33c3c88b-a752-4b65-b2a1-705b5099f576.roa
Signing time:             Wed 22 Jul 2026 03:31:00 +0000
ROA not before:           Wed 22 Jul 2026 03:31:00 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e78::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:15:5f:3c:4e:b5:11:08:e3:45:5c:4e:cf:21:8b:44:8f:19:2d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:31:00 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=65d594c232db871557cf12dc687c61f6f9f6f458d4abe4d957917876e224df99, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:c8:63:30:05:16:ee:4c:eb:7a:b5:85:3c:
                    3e:b6:b8:88:2f:db:e6:d0:b7:e9:c5:66:b9:0f:9f:
                    3b:d0:47:7d:fd:11:c3:b8:c6:dd:07:75:88:40:67:
                    c7:3f:07:02:e8:3a:e0:75:b8:bf:a2:98:6e:60:95:
                    26:f9:e5:e0:85:3f:c8:59:8e:30:b2:2e:bf:3d:e2:
                    6f:3d:6d:41:96:3d:dd:82:1f:96:01:88:45:8c:1e:
                    3a:5a:97:1e:63:29:78:a3:ad:ed:8a:48:71:9a:99:
                    74:5d:ec:c2:81:a1:ac:bb:a5:7b:7d:8f:d3:d4:d2:
                    54:70:d2:14:3e:85:e9:9c:17:39:42:35:99:cb:c0:
                    c9:85:69:d4:14:79:db:cc:3f:be:e3:c2:12:1d:21:
                    dc:d3:b1:03:c0:29:18:07:5a:e8:a0:33:2c:74:6d:
                    8f:b3:e7:13:ef:8c:14:98:f2:7f:be:e4:89:3c:92:
                    31:24:85:f1:6a:25:62:9f:df:3c:25:25:1e:53:bd:
                    30:53:de:7b:d7:0e:ab:5a:80:9f:79:b1:a2:8f:cc:
                    b1:63:cc:3c:b2:29:e3:5c:ae:ec:e8:2c:ef:67:42:
                    be:ed:bd:c1:7b:b4:1e:0a:91:0c:0b:81:38:dc:b6:
                    73:f7:25:15:b7:42:e6:68:64:c5:e5:75:08:74:53:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:64:E4:0E:F9:6E:2D:B8:DE:7D:14:AE:CB:A3:96:D1:AB:1C:64:54
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33c3c88b-a752-4b65-b2a1-705b5099f576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e78::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:df:74:f9:0a:a2:5a:a6:c7:39:b3:32:74:0a:05:f6:07:
         a8:0c:15:2f:7c:a3:86:4b:83:76:97:39:1e:8b:5b:ae:b5:8c:
         6b:86:af:d0:40:98:f7:47:13:ea:46:ab:57:f4:48:91:6b:fe:
         d7:b3:24:6b:27:3c:d0:77:96:14:89:d2:8c:66:53:47:5b:e1:
         d5:26:ce:67:91:92:73:04:6a:3b:e9:98:f0:be:53:27:48:f5:
         b1:f4:6e:41:f2:bc:e1:ec:4e:be:4a:32:d4:5c:8a:94:25:56:
         9b:80:32:f4:2f:8e:fb:75:23:19:72:0d:ab:e6:a3:8f:e3:95:
         68:80:95:9c:ed:33:ca:21:61:6d:71:53:69:67:c5:15:ca:7c:
         3c:d0:5f:86:ea:a3:a9:1a:6d:61:8e:0b:b2:14:11:6e:f8:f8:
         b1:05:72:fb:e4:96:ff:25:ca:ad:e2:75:07:c8:e8:9c:4d:66:
         2f:63:03:4e:b1:a4:f2:68:bb:7c:a8:b3:5f:99:aa:e5:4b:85:
         70:b7:64:e6:96:30:ce:74:61:17:27:70:e9:38:a6:11:80:68:
         cf:b8:c2:fa:6f:e8:6d:8f:b8:6c:cf:d5:e0:50:35:c2:1b:65:
         eb:a3:4e:b3:e9:9d:65:7f:c9:8d:d9:0a:a3:86:fb:c6:9d:11:
         a2:d5:62:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:16 2026 by rpki-client