Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ecebaaa-c585-439d-98c2-1c1833c1aca2.roa
File:                     3ecebaaa-c585-439d-98c2-1c1833c1aca2.roa (raw, json)
Hash identifier:          gAwddTkjpyNe4aCgrqOUtvi7ldVrShpxOwEnvuIPfLk=
Subject key identifier:   18:B4:99:61:F6:9B:35:DF:6F:A4:7B:05:A7:20:CE:62:FC:AA:84:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4C7820020A1C6294FCF1C769DBF1BB881F019C3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ecebaaa-c585-439d-98c2-1c1833c1aca2.roa
Signing time:             Thu 23 Jul 2026 07:20:09 +0000
ROA not before:           Thu 23 Jul 2026 07:20:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35f6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:20:02:0a:1c:62:94:fc:f1:c7:69:db:f1:bb:88:1f:01:9c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:20:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=7bbb9509c64cfe361ef5a0406e19cbc9431fcaa032a47e77f20974e710e1f4d8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:f4:3b:14:6d:5b:a5:e0:6f:0f:80:60:cd:
                    92:cd:c3:a4:3c:69:c8:50:b2:04:70:78:fb:03:92:
                    91:a8:77:98:02:db:9a:a6:89:69:70:4c:88:6d:55:
                    00:45:79:13:52:78:e7:e6:48:a2:70:3c:38:f2:cc:
                    95:66:7c:af:ec:b5:7d:2a:d7:77:d4:d4:13:23:35:
                    9f:4a:cc:7d:b2:28:92:b4:b1:cf:d2:41:eb:56:21:
                    28:8d:ee:4c:c4:2c:d8:14:3a:45:de:c4:e7:f6:b4:
                    c8:31:64:8f:f6:9e:10:a7:1a:27:a5:92:9a:76:f7:
                    0c:32:65:fc:5c:68:af:4b:ba:d8:14:af:12:11:42:
                    72:41:f5:29:64:5b:e5:bb:f2:89:5e:07:02:6b:cf:
                    58:9a:24:b2:4f:c9:5b:32:a3:41:75:3c:6e:17:ee:
                    aa:95:cf:1a:83:07:c5:ce:d6:ae:a8:21:d8:0f:b5:
                    c1:aa:d6:d6:a4:84:75:8a:a4:19:7e:16:54:86:2a:
                    d0:21:84:91:1d:96:bc:da:3c:a7:ef:a4:e2:55:1e:
                    d4:41:07:c5:ef:0b:31:5d:76:a4:b5:bb:de:df:3d:
                    a5:29:58:b1:9b:23:e6:ee:fa:db:b7:5a:da:b3:a1:
                    0a:29:c7:2b:f8:a4:b5:30:25:f2:b5:53:a4:70:d1:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:99:61:F6:9B:35:DF:6F:A4:7B:05:A7:20:CE:62:FC:AA:84:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ecebaaa-c585-439d-98c2-1c1833c1aca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35f6::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:39:05:41:81:c6:6b:91:aa:72:7e:d5:18:d9:f5:e3:78:87:
         d6:95:1d:f3:df:f7:30:bd:2c:9d:d2:ed:b1:7b:d6:27:53:4b:
         a2:ce:96:74:d8:24:4c:d5:7d:26:97:df:7e:45:7f:c4:87:5c:
         76:3c:72:35:5e:02:12:b7:0e:27:5e:bc:f0:cc:3d:56:10:41:
         7a:70:77:1c:6a:88:c8:98:dd:91:b2:91:52:bf:43:f9:50:25:
         31:9e:ed:46:07:51:0a:d7:3e:35:10:59:92:ae:1e:e2:dd:b4:
         d7:47:ee:96:71:15:ab:7b:da:4a:46:38:72:3c:6e:b6:65:97:
         be:57:e5:e6:be:6a:2e:fb:66:a7:b4:05:d1:2d:94:db:df:b1:
         7b:b3:d9:d0:96:4f:31:22:3f:b5:3e:e2:e1:9d:a3:2c:c9:4c:
         e0:8e:b4:8c:13:80:9b:8e:ff:c3:b2:eb:15:b3:84:65:d5:2a:
         26:a0:ca:2f:9d:fe:34:fa:f1:56:84:30:13:99:2e:6c:0f:95:
         c8:47:d4:1a:4d:a8:b9:fa:de:ad:52:63:b2:7b:89:ff:e5:79:
         00:b6:c0:57:6c:fc:b3:f1:51:c7:94:22:a8:a7:bc:25:9b:fb:
         a4:aa:0e:9d:6e:31:48:68:94:fe:81:28:e6:0c:fb:0e:d8:ca:
         93:7e:13:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:27 2026 by rpki-client