Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3eb6c33e-f3a0-4fde-951c-9a0ef51c29ef.roa
File:                     3eb6c33e-f3a0-4fde-951c-9a0ef51c29ef.roa (raw, json)
Hash identifier:          1J1kv8xSurnDzI0jJcxi2lmkTUXSb5vA8V1ZWjIYIp0=
Subject key identifier:   FF:6A:08:83:BF:C3:AD:49:03:50:38:AF:CC:5B:15:2B:CB:CD:D5:34
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4420E25F2743A4410076EE88C99DD9A537209158
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3eb6c33e-f3a0-4fde-951c-9a0ef51c29ef.roa
Signing time:             Thu 23 Jul 2026 04:00:09 +0000
ROA not before:           Thu 23 Jul 2026 04:00:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37d6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:20:e2:5f:27:43:a4:41:00:76:ee:88:c9:9d:d9:a5:37:20:91:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:00:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=6fd97eaac3e2b29686ba53f73e40119ea5f534f86381d2f52cafdff9174a2bca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:8e:83:94:01:f3:ec:18:e1:9c:2f:45:76:
                    b5:30:09:df:11:b8:c2:0a:d3:89:d4:ff:72:34:35:
                    f4:bb:7a:ee:60:47:50:8a:eb:20:d9:b9:9d:69:fc:
                    ad:cd:8d:70:80:4f:fd:6c:77:5e:76:a2:a9:d2:95:
                    f8:67:aa:f3:d9:9b:95:42:20:7a:27:53:25:9f:d6:
                    e4:6c:9f:e4:73:8d:b7:3a:e6:68:dc:fa:41:51:3a:
                    4b:58:7a:31:44:1f:57:48:b8:40:2b:fc:38:80:cb:
                    dc:f9:7c:a7:e6:04:cd:f1:fa:da:0a:61:fc:20:fd:
                    da:5a:3d:a9:33:d1:86:e2:35:55:4c:9a:c5:ee:90:
                    54:9d:27:d8:7e:00:fd:ab:01:21:d0:d4:58:a1:5d:
                    63:c9:dc:a8:67:b4:07:cd:a1:19:33:cb:aa:f1:95:
                    01:07:ad:ff:3d:97:67:67:03:9f:d9:5c:be:b4:6f:
                    02:76:35:8e:92:c6:d9:35:01:92:69:df:55:65:96:
                    f8:00:56:98:68:fd:00:a4:1d:29:fd:0d:dd:1e:84:
                    6f:b5:18:37:35:dc:3c:3a:68:11:d0:d9:ae:f7:f3:
                    31:4a:d7:4f:80:b8:11:35:04:06:d8:4a:9e:dd:c4:
                    d0:ad:92:6d:d5:5e:a7:29:94:fe:46:ef:63:5b:b0:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6A:08:83:BF:C3:AD:49:03:50:38:AF:CC:5B:15:2B:CB:CD:D5:34
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3eb6c33e-f3a0-4fde-951c-9a0ef51c29ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37d6::/47

    Signature Algorithm: sha256WithRSAEncryption
         04:31:49:8a:17:b5:46:de:76:1f:6a:e8:e6:de:16:e4:63:2d:
         a3:3c:44:c1:0a:c4:48:5c:41:5d:e5:75:c0:84:88:71:5c:31:
         05:5b:a4:ef:d7:e9:30:a5:56:b0:53:3a:82:dd:fa:c5:14:08:
         75:6e:72:92:1c:03:76:69:2d:bb:0c:f3:12:fb:f7:64:a6:73:
         40:b2:09:f0:b0:ea:b0:d7:ca:f8:dc:f0:55:41:11:4a:5f:41:
         e0:ea:85:74:4c:fa:32:be:d3:34:5e:c9:12:2c:4e:91:39:83:
         6b:c1:7e:2a:17:56:55:78:92:ef:30:1e:f3:88:54:ac:02:34:
         ad:e8:95:10:d7:3d:71:62:e0:8a:c2:f7:a6:dc:1f:97:32:15:
         d5:f7:ab:cf:65:3a:30:59:38:e4:3b:a5:c1:11:0e:33:3b:16:
         81:9a:37:2e:d0:50:78:00:14:2f:c5:0d:47:16:9d:6f:cb:87:
         87:7b:c7:64:bf:9a:0d:60:68:c2:96:cc:4e:e3:cf:b4:38:9e:
         0d:d3:55:de:0a:61:88:49:d5:66:f8:c3:cc:a4:a6:db:92:37:
         71:4c:8b:db:5e:7e:61:3c:07:f9:8e:03:d3:a1:c6:e4:70:d9:
         b9:82:da:cd:91:ce:10:1b:a8:56:d2:d7:09:17:08:3c:0b:2f:
         d7:57:9d:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:55 2026 by rpki-client