Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa
File:                     46960a3e-81ff-4962-9e3d-7c59196b0650.roa (raw, json)
Hash identifier:          6P/JekFUOcQ+j9jjpM0CmdsV9FBCKQ4tkTwjo1h13ZU=
Subject key identifier:   AE:92:CA:30:1C:93:B8:4B:4C:BE:95:C4:E3:99:0B:C6:52:8B:5C:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33710E03D0CDE5F858B9213DA8E7CAC90668CFDC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa
Signing time:             Wed 22 Jul 2026 01:40:39 +0000
ROA not before:           Wed 22 Jul 2026 01:40:39 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f4e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:0e:03:d0:cd:e5:f8:58:b9:21:3d:a8:e7:ca:c9:06:68:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:40:39 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=d70dae6779cf11390aa4458e96cfba890517a3d4284ef8e7f242a9911a34e80f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:db:d4:20:1f:6c:8d:c2:cb:ed:12:db:15:
                    20:18:ef:95:4f:b0:d7:04:69:0c:a4:00:cb:46:c0:
                    39:c9:93:a6:4f:49:73:06:dc:e3:40:95:3f:9d:a5:
                    fd:97:b3:e2:69:4d:be:af:62:12:fc:79:75:f5:9d:
                    fc:26:bb:cf:9c:98:22:59:cf:33:b0:88:57:d8:a7:
                    eb:8c:9f:76:3d:2d:7f:85:98:45:32:17:bb:f5:68:
                    7f:20:12:88:43:1d:3e:fd:72:5f:d2:ea:74:fb:a2:
                    ec:22:30:ff:aa:12:0d:b7:45:de:c0:90:ab:5f:9e:
                    cb:1f:e8:ba:00:86:bd:77:36:16:f4:d0:75:f1:23:
                    cc:64:33:ec:fd:a3:7a:c5:50:2d:17:1d:84:1e:3e:
                    0d:8a:df:3b:64:72:43:af:27:c1:87:d1:95:52:e2:
                    b5:30:1f:4e:62:23:9e:eb:78:f3:b4:b1:93:07:79:
                    4d:88:4d:66:f7:0d:25:56:13:e1:14:80:02:a2:cf:
                    0e:98:62:45:1e:3c:d4:5a:6b:4e:c3:4a:be:53:cb:
                    66:98:4e:98:4b:37:d4:36:74:69:a3:76:55:db:1f:
                    33:b3:50:bd:66:16:59:74:29:fe:66:2c:d3:16:3e:
                    9f:eb:74:75:58:cf:ad:5f:ac:4d:1d:30:fe:7d:a3:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:CA:30:1C:93:B8:4B:4C:BE:95:C4:E3:99:0B:C6:52:8B:5C:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46960a3e-81ff-4962-9e3d-7c59196b0650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f4e::/47

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:28:a4:04:7a:f4:3e:98:24:01:bd:9c:01:7c:00:8b:61:
         3e:9b:13:49:d9:d6:55:e1:9f:66:e1:a1:c3:19:33:6b:ed:72:
         a4:8e:9c:9c:7f:83:c1:11:12:dd:ef:d2:3a:75:53:0f:c6:6b:
         7d:43:12:77:b1:cb:a1:bc:1e:92:19:6b:23:e9:4c:af:c8:d4:
         13:a0:2c:a7:f9:ed:57:b6:9f:34:f5:d3:c2:55:cd:8d:6d:95:
         8e:a8:c6:a8:2c:96:d3:d4:a2:40:07:61:92:75:5f:ae:cf:23:
         ad:3c:34:8f:b4:5f:c4:46:aa:1e:a1:a7:a1:50:2e:9b:58:24:
         21:87:e3:8a:b0:30:10:5b:2d:a2:c0:41:a2:bc:02:59:69:13:
         f0:d1:fa:7a:4f:b2:8f:28:ea:e6:48:48:25:ad:f2:cf:98:e3:
         61:1b:4b:eb:2c:e8:94:39:b6:55:16:dc:b5:94:14:c6:6a:f1:
         0e:eb:3c:e3:f9:5e:6a:4c:59:e3:9e:54:d8:87:04:24:89:44:
         7d:35:05:51:d7:99:23:31:ac:89:e2:cd:cb:6d:7f:fe:ed:b9:
         68:f4:98:4e:52:05:f8:06:06:6b:00:dc:fe:c4:e3:1c:6e:62:
         d1:51:e9:b9:c8:f4:a9:60:5e:f3:39:85:08:92:44:a5:4e:60:
         01:fb:39:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:47 2026 by rpki-client