Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/470405d8-1807-43a0-9860-deef62b50d3b.roa
File:                     470405d8-1807-43a0-9860-deef62b50d3b.roa (raw, json)
Hash identifier:          WqVLj2KD5yMBbXYx58vsw4S4sk7dN3QL6mHG7c84FbU=
Subject key identifier:   D5:C4:6B:F2:59:80:12:62:A8:26:C2:80:CC:E9:D0:8D:FE:04:C0:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       442725D7F723EA8397AE53B134FB93D128C6335D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/470405d8-1807-43a0-9860-deef62b50d3b.roa
Signing time:             Wed 22 Jul 2026 02:10:41 +0000
ROA not before:           Wed 22 Jul 2026 02:10:41 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2aa8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:25:d7:f7:23:ea:83:97:ae:53:b1:34:fb:93:d1:28:c6:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:10:41 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=0a443f46ab1c2d19e0d13ed912e3b04a7606a3d32505b4e3790301c8cf920330, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:22:69:c9:e4:80:13:de:46:3d:68:35:47:
                    89:84:bf:56:29:2a:ce:c0:87:92:05:ac:8b:ba:87:
                    09:1a:81:d4:81:be:31:3f:ae:b9:30:02:30:a8:71:
                    49:8f:55:1b:d4:e1:e5:6c:d2:43:07:f6:b7:82:33:
                    65:a7:06:a6:d1:67:35:6d:0e:22:43:18:85:d6:e8:
                    75:8d:a7:df:e2:c9:61:36:96:17:a4:f1:90:22:16:
                    59:f3:cf:c2:44:fd:50:d8:bb:8d:9b:24:a8:56:20:
                    11:f1:9d:b9:40:7f:a4:d9:15:1b:39:7e:05:42:9d:
                    ae:ce:e8:9c:0b:fa:0f:b2:5a:24:da:38:e6:3d:fe:
                    b8:9b:f4:f9:68:5e:58:a9:b9:ee:5f:84:c3:2c:22:
                    1b:7f:97:07:e8:df:72:e0:ab:21:40:ad:0e:20:89:
                    c9:0e:f7:ad:c8:6a:52:d3:a8:44:e6:7f:2c:e8:6c:
                    e1:13:08:42:e9:4b:75:52:98:48:3b:12:c3:9a:4c:
                    dd:c8:b1:1d:3f:db:69:f7:c2:92:69:b3:c8:3c:30:
                    1f:70:d4:c2:5b:a4:b2:cd:7d:41:57:3e:b4:de:e5:
                    87:7e:0e:eb:22:c0:3e:82:2b:90:b6:e4:ec:ae:be:
                    15:5c:c3:e8:2d:59:83:1d:cc:67:0e:46:3a:27:76:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:6B:F2:59:80:12:62:A8:26:C2:80:CC:E9:D0:8D:FE:04:C0:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/470405d8-1807-43a0-9860-deef62b50d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2aa8::/47

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:e4:93:b4:4f:e0:59:df:73:90:c0:07:53:2d:36:b4:e8:
         1b:4a:09:a9:b6:2a:5d:a5:e5:ac:a1:d2:60:55:8f:db:eb:2d:
         28:f5:c1:ae:9e:16:ea:66:95:6f:0e:5c:db:50:60:d5:64:63:
         2a:7f:b0:e7:a7:6b:69:c7:e4:70:ae:68:73:74:64:b4:73:f8:
         b0:24:d3:ab:9c:1d:e0:01:5d:d9:d9:03:19:68:4d:65:a4:09:
         29:56:88:29:28:b9:05:49:52:e9:28:1c:eb:8c:8c:e6:dc:43:
         38:6a:d5:87:32:4d:1d:8a:4f:52:47:d0:39:fb:b2:c6:6e:29:
         d5:d4:fd:1d:ad:25:9f:86:52:4f:de:df:03:f8:5b:1b:de:e7:
         3e:72:62:da:9d:fb:a2:51:73:5e:37:98:fe:62:48:ae:70:d1:
         39:93:da:3e:47:12:8e:ae:a5:d1:22:cd:e6:9a:a8:cd:a8:a7:
         9b:c3:49:25:2b:09:6e:0f:8b:bc:fa:ec:49:20:08:29:ed:1f:
         fd:78:61:b2:67:02:66:c2:92:a9:0d:72:c7:b6:01:97:9e:d5:
         ef:ab:c0:93:a9:b8:79:a4:24:c7:90:dd:10:ab:eb:1b:09:87:
         01:2e:98:87:34:ac:c0:ef:91:00:9e:da:34:d2:d3:85:28:7d:
         f2:2d:1a:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:54 2026 by rpki-client