Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368bd0e1-7eec-410e-9614-10e01b28326d.roa
File:                     368bd0e1-7eec-410e-9614-10e01b28326d.roa (raw, json)
Hash identifier:          CW3P4KBliS+REcmqoUkQKB3NptXkYXmWDt+rLd8kADE=
Subject key identifier:   21:72:12:F4:23:E7:AE:72:1F:0A:EE:49:7F:F5:50:92:23:DB:71:3E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3FDE23F29A365938E381BFF60C77727A0C163C59
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368bd0e1-7eec-410e-9614-10e01b28326d.roa
Signing time:             Wed 22 Jul 2026 01:10:43 +0000
ROA not before:           Wed 22 Jul 2026 01:10:43 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:254c::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:23:f2:9a:36:59:38:e3:81:bf:f6:0c:77:72:7a:0c:16:3c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:10:43 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=9092ca252a2cf5980a5c50ce72bfbade9f57099719a79f9542114fdf249fcfb3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:39:b1:cb:67:c9:3a:86:79:47:7e:2e:cc:
                    9c:91:11:27:30:fc:53:04:1b:f4:03:8d:03:93:8b:
                    56:66:f4:73:bd:5c:60:6a:ea:69:df:e7:45:10:8f:
                    e1:3f:09:e2:2b:0e:bf:ca:b3:6c:9f:3e:0a:66:56:
                    2f:7e:7d:1c:f6:43:1f:19:55:d3:47:c5:cb:c2:8c:
                    d6:d6:0f:bd:2e:cc:0d:dd:b7:23:07:32:98:27:28:
                    b5:e1:41:81:53:b7:1b:84:cf:76:e5:dc:83:a7:c2:
                    b4:e2:ce:59:71:54:d2:cd:98:26:3d:85:38:97:54:
                    11:fe:17:27:53:82:da:70:cb:f5:8b:e9:3c:39:d2:
                    5d:c2:2f:90:e0:62:da:0c:57:04:81:42:ff:54:cd:
                    3f:d1:79:ee:40:f3:cd:0c:7a:e7:2c:24:2c:cc:c0:
                    c2:ce:15:7f:7c:9b:b7:66:a2:30:eb:8a:9a:85:23:
                    80:85:a1:57:d1:36:ce:79:ee:88:19:0b:bc:3e:69:
                    99:4d:db:9c:2a:c9:56:58:4b:1a:7b:8a:81:17:b1:
                    ec:f4:34:73:a2:36:2f:bb:e1:e5:fa:51:d2:0b:50:
                    73:e8:76:39:73:90:e2:86:a7:5c:92:03:d1:5c:29:
                    3b:a7:ef:73:31:2d:1d:a2:11:5b:df:0d:47:5e:2d:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:72:12:F4:23:E7:AE:72:1F:0A:EE:49:7F:F5:50:92:23:DB:71:3E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368bd0e1-7eec-410e-9614-10e01b28326d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:254c::/47

    Signature Algorithm: sha256WithRSAEncryption
         b0:61:0c:ca:78:12:6c:f7:a3:4f:31:c1:65:f6:48:ce:4a:90:
         34:e4:53:a1:6d:4f:72:82:5b:2b:03:f0:a0:e3:38:a7:d9:cf:
         56:bb:b7:91:ba:83:0a:a5:96:c4:a9:ef:61:bd:ca:60:26:6e:
         ec:61:8e:10:a4:3f:92:0f:58:48:9e:99:93:44:69:91:aa:ba:
         cf:78:11:21:2f:f8:5b:94:ac:64:93:b1:0a:a5:52:61:7c:db:
         82:e2:f5:ad:7b:87:c2:1e:dd:dd:cc:1d:f1:56:e4:08:9c:d5:
         a6:99:91:0b:fd:75:55:81:ef:33:5f:b8:9f:d0:e3:0d:ad:d5:
         af:76:e5:2e:00:7c:91:ea:46:26:b0:68:14:a5:29:20:5a:fb:
         f4:5b:7f:f2:a0:08:de:b2:c4:40:c5:23:83:19:ff:8b:c1:a0:
         ba:da:fa:93:ad:58:cf:0f:bb:e4:a1:a6:64:7d:fd:39:c5:ae:
         a8:e8:dc:00:fd:87:41:03:c3:54:08:c6:39:46:48:c9:25:30:
         05:61:04:e2:e5:72:2c:6a:c0:33:1b:01:78:06:10:e8:b0:6c:
         2c:1b:68:26:2e:fc:55:1e:83:6c:b5:a2:eb:f0:43:65:f5:68:
         86:40:ff:84:7d:1a:8e:73:8d:ef:27:88:fa:b5:b4:5b:65:cc:
         2b:79:e8:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:48 2026 by rpki-client