Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362519cb-777f-4aab-957b-9719ae6edb90.roa
File:                     362519cb-777f-4aab-957b-9719ae6edb90.roa (raw, json)
Hash identifier:          cP8+7jz24B+b4Jn2sopkqVE746jjmW5zBiBInZSPm+w=
Subject key identifier:   17:A8:E7:FD:01:9F:FE:26:82:6C:CC:5D:EB:18:B4:2F:1D:57:AB:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33D5DF1311F8F2796EAD5D362EBBE4E287025529
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362519cb-777f-4aab-957b-9719ae6edb90.roa
Signing time:             Thu 23 Jul 2026 11:41:16 +0000
ROA not before:           Thu 23 Jul 2026 11:41:16 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3284::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d5:df:13:11:f8:f2:79:6e:ad:5d:36:2e:bb:e4:e2:87:02:55:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:41:16 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=300ed1a8191a40521030c99665b8d2f0b9c04849f02783f8f8c6641667883840, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:eb:b8:3a:ee:a2:b2:f5:3a:52:79:71:b0:
                    af:5e:d9:ca:e1:c6:cc:5d:46:7e:e7:a6:3e:5e:55:
                    66:54:ad:02:43:c0:01:e6:70:56:b2:7b:b4:79:e3:
                    af:26:fd:58:b9:38:cd:be:85:7b:1b:45:29:cb:2d:
                    a3:ec:cd:91:07:d8:89:db:30:77:de:33:8e:c5:aa:
                    a7:7d:de:21:ec:ae:d4:c1:2b:68:e8:4f:46:90:8e:
                    ad:e8:53:68:84:40:4a:62:a2:00:f0:cc:74:2d:df:
                    62:ad:22:a2:86:a5:25:37:60:12:cc:df:64:58:93:
                    ba:08:9b:80:49:d3:b9:a5:ff:bb:26:ca:0f:4d:61:
                    a9:1c:4b:20:6d:56:9e:0b:37:a8:cf:81:f4:16:c1:
                    bc:b6:06:ff:c0:f0:58:91:6c:36:cc:e2:44:00:94:
                    4a:0f:bd:87:46:ef:35:7d:67:73:16:81:1b:e7:44:
                    65:79:00:c2:eb:3b:2e:da:6d:18:f8:0f:f9:b3:ef:
                    7d:85:54:01:72:e6:0a:30:ed:24:45:4a:72:fb:15:
                    13:84:ad:1b:67:b6:c6:13:24:b6:c2:b5:c2:21:ba:
                    21:9a:00:75:7c:85:44:c6:12:75:a8:fc:a0:ac:24:
                    92:f6:e2:7c:09:2d:cc:f2:46:54:46:09:42:2c:03:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:E7:FD:01:9F:FE:26:82:6C:CC:5D:EB:18:B4:2F:1D:57:AB:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362519cb-777f-4aab-957b-9719ae6edb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3284::/46

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:75:bd:5e:41:6e:d3:02:d3:47:f0:68:66:db:f1:fc:63:
         f3:e9:9d:a2:29:9a:0d:85:81:16:75:42:0f:70:d6:ee:03:7b:
         5e:25:e6:8b:6c:b6:95:7f:17:7a:94:93:3e:8e:1e:cd:47:04:
         cc:0e:4b:22:5c:25:62:59:db:6f:9b:d2:3d:2c:ec:3a:cf:bf:
         fd:5f:49:83:32:23:32:88:13:9f:f0:a3:15:52:ed:35:b1:64:
         52:f6:0b:c7:75:85:48:a6:cd:00:5b:bc:89:8b:ef:f8:8f:dc:
         36:de:de:51:ea:44:b1:5e:0c:d4:12:65:01:2a:6f:39:f1:30:
         48:b7:c2:fe:70:8b:af:4f:2d:99:21:a2:a1:d5:8e:f7:8b:bc:
         80:d7:13:c0:43:2a:96:8b:55:3f:0e:57:aa:39:31:9c:d4:15:
         88:ef:52:55:41:7f:27:7a:f5:ed:34:63:8b:dc:3f:ad:c3:97:
         fa:32:fa:02:2b:c0:72:0c:ae:67:f9:75:f0:f2:97:4e:fd:6d:
         46:41:95:77:9f:7a:25:4f:b7:7c:27:c5:a1:76:db:79:76:2b:
         5a:36:d7:65:2d:bc:9c:0b:55:ef:ac:cf:6b:54:08:75:1b:2c:
         e6:ad:e6:66:f9:ca:4b:00:cd:d5:e1:b3:e9:6a:74:21:c6:e0:
         1b:b4:59:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:29 2026 by rpki-client