Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d6760-fd18-4fe1-89b9-1a722a899305.roa
File:                     427d6760-fd18-4fe1-89b9-1a722a899305.roa (raw, json)
Hash identifier:          J8P5/DeeQMzWJUrQh7xbMshPrQPmxdFjuq/pRRX46QM=
Subject key identifier:   DB:E6:6E:FB:A1:29:00:81:55:98:2A:17:07:26:84:C4:04:A5:2B:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5040471B6C45F49385F43BBA7CBE1A7E4DA283F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d6760-fd18-4fe1-89b9-1a722a899305.roa
Signing time:             Thu 23 Jul 2026 02:40:52 +0000
ROA not before:           Thu 23 Jul 2026 02:40:52 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:40:47:1b:6c:45:f4:93:85:f4:3b:ba:7c:be:1a:7e:4d:a2:83:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:40:52 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0f747462250c726d9e17e1c1ba46f8d219a34908b06a431ff3ddc3c95d8a264f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:78:f1:b9:a3:be:63:cf:64:a2:05:dc:c0:
                    77:3a:26:27:fd:7f:23:89:35:fd:0c:34:c3:fa:03:
                    3e:a3:f4:00:1c:f3:33:e5:67:50:dc:f1:89:66:0c:
                    7e:3b:f9:d5:8e:37:0e:80:16:3f:91:c5:c2:63:7f:
                    61:82:09:6f:ff:b5:43:89:6c:1d:ae:c0:8b:07:be:
                    b6:38:72:e9:35:ae:bc:8c:f5:40:77:72:25:4e:15:
                    8f:99:06:fa:da:e6:3d:46:fb:28:6e:00:90:aa:3e:
                    21:6a:b4:6e:01:26:5e:89:9a:7d:02:3d:15:f3:b3:
                    1b:0f:41:9a:ce:0c:e1:e7:b6:ee:34:8a:d7:db:6b:
                    e9:8b:4c:ce:3d:16:b9:26:3c:33:d2:d7:25:24:ae:
                    77:ec:1b:27:11:d1:82:c6:dc:2e:76:bf:9b:93:3f:
                    1a:99:c4:8f:f6:fa:cc:de:f1:b4:78:f7:85:8c:37:
                    5a:bb:97:27:40:0f:59:b8:13:ba:e9:9a:57:f4:c1:
                    12:39:f0:52:36:d5:d7:29:f0:1d:64:db:97:cb:db:
                    5b:de:9c:3d:64:33:ad:f4:e8:e8:4e:f7:6b:0e:0f:
                    b6:db:a5:91:73:4c:4e:8b:bc:3b:37:11:53:5d:92:
                    8a:25:40:46:b9:ea:c3:cf:60:8e:23:ec:95:99:0d:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:6E:FB:A1:29:00:81:55:98:2A:17:07:26:84:C4:04:A5:2B:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/427d6760-fd18-4fe1-89b9-1a722a899305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3330::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:27:81:18:ab:c3:b6:c8:6c:66:c2:8b:c0:ad:ea:b2:0a:
         78:bf:e6:db:d3:1d:7a:42:70:b7:62:50:01:e6:2f:2e:93:5d:
         ea:e4:1a:d0:35:87:76:ef:a2:70:0f:e9:1a:ee:f5:84:9b:bb:
         c8:4f:47:f9:be:6c:66:84:8c:4a:b1:b0:dd:8a:fb:46:3c:7b:
         a8:8e:62:ea:f7:83:57:e7:f0:02:28:5b:e1:51:9e:39:64:3c:
         16:80:b8:a2:b9:7c:59:78:51:4f:49:fe:93:3b:43:7e:0b:01:
         72:23:d0:5b:4b:c4:fb:3c:6e:ee:0e:34:e2:be:56:ed:32:5b:
         e7:e8:fd:e8:12:70:ad:d0:52:98:fe:9c:63:15:a3:a5:f6:01:
         7e:13:8c:51:0b:31:33:81:ee:bb:59:8f:81:74:fe:fc:e8:f2:
         77:11:a9:00:69:e5:21:d2:fb:a8:d8:0b:00:91:93:4c:25:19:
         5a:c3:14:24:61:14:18:25:9b:8c:ed:c4:0a:26:06:65:00:94:
         45:3e:2c:76:0a:91:af:d9:b8:92:bb:86:43:1a:f2:98:b2:71:
         64:ba:e6:82:27:c3:af:4a:a1:35:f7:0f:5b:ce:90:ca:25:27:
         a0:00:e0:01:0e:24:5d:41:aa:af:76:96:79:9d:0a:8e:02:77:
         e9:71:f5:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:14 2026 by rpki-client