Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa
File:                     48380b3c-35a3-4417-b1cb-016ae2956bb6.roa (raw, json)
Hash identifier:          g7TwaVXFGQxjDXRcenVrmhk5fsNuNuus5n2qznKvMsg=
Subject key identifier:   57:DD:B4:E0:3C:5C:90:FF:76:B5:24:D9:AD:34:CF:92:98:17:05:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0FA66D9E056B70C19ED898D2257597D04FF389A8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa
Signing time:             Wed 22 Jul 2026 01:21:57 +0000
ROA not before:           Wed 22 Jul 2026 01:21:57 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:219c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:6d:9e:05:6b:70:c1:9e:d8:98:d2:25:75:97:d0:4f:f3:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:21:57 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=ae4e3d0c43d872e7b486b7e0f69d35a9287390cf40d94db202563051cbb0a67a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:53:19:7d:b2:78:c7:51:8a:03:89:46:a9:
                    66:60:7b:0a:4e:d9:b4:9d:97:b7:01:ca:ed:69:95:
                    c0:c9:04:50:1b:e4:cf:2b:51:c2:ba:5f:33:5b:21:
                    3c:ee:9a:50:36:c6:4a:66:e9:dc:e7:3f:e5:38:b0:
                    44:16:e9:d9:bc:1a:f5:4d:93:be:af:35:04:c3:d7:
                    c9:3d:33:ff:f1:e9:8c:a8:3e:29:a4:09:78:82:23:
                    bb:a1:17:7e:c5:38:b4:13:91:84:ed:04:f0:20:fd:
                    d1:9d:24:9e:6f:5c:7b:cd:ce:6a:48:d9:80:69:25:
                    be:9f:ce:ab:98:e1:ff:f7:d2:92:7a:7b:70:09:95:
                    8b:13:ab:c6:06:13:46:80:09:4a:d5:67:ec:86:25:
                    5f:40:3d:53:fc:bb:18:cb:51:b9:94:97:35:6b:de:
                    18:6c:17:f0:4f:c4:26:16:6a:31:b1:38:1a:e0:9a:
                    40:3b:22:0b:1a:31:00:a4:28:44:78:12:a8:9a:6e:
                    d7:2d:03:72:03:34:32:52:21:0d:81:6b:25:4d:65:
                    02:20:a1:49:09:b4:04:6c:ff:12:13:da:45:95:b0:
                    ff:78:81:50:71:84:f9:6a:32:07:96:4d:97:06:66:
                    ef:aa:88:4a:9f:85:99:a9:ef:a8:e0:4c:7f:df:58:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DD:B4:E0:3C:5C:90:FF:76:B5:24:D9:AD:34:CF:92:98:17:05:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:219c::/46

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:7c:87:9d:82:ce:43:65:67:2c:46:22:8f:fb:33:f1:66:
         21:68:70:34:5c:57:15:5b:1d:89:63:9d:74:0a:61:53:fd:d0:
         ef:86:a4:f0:65:7b:e1:7f:67:58:f4:f6:68:9c:84:b4:c7:ff:
         fe:3b:1c:bc:98:5f:4e:d3:0d:b6:a3:f9:58:e0:76:e9:6d:99:
         d2:74:ee:30:33:61:8a:5d:54:6c:a2:04:0f:cc:3e:19:58:1a:
         d7:bf:8f:49:28:65:45:23:b1:84:24:de:29:cb:91:65:ca:6f:
         b8:42:9a:08:ad:59:1c:50:01:29:af:0d:dd:08:e1:dc:dc:a6:
         06:d1:c9:87:f0:38:fd:9e:fa:4e:cb:a3:35:56:a0:f4:73:20:
         db:49:7b:6c:1a:96:f7:44:33:0f:a1:3f:dd:5b:5f:34:e1:3c:
         92:a7:6b:f2:a7:d0:b7:9e:49:95:93:6a:9c:8f:55:e8:10:81:
         81:e4:9f:41:63:f0:13:b6:1c:a4:38:06:e4:6e:e2:7b:18:8c:
         35:44:d6:70:3f:1e:5e:11:0e:ad:1e:06:23:ae:31:c8:af:80:
         d1:68:91:c3:48:6f:78:aa:41:50:48:84:ff:29:67:86:34:5a:
         e3:a7:05:cb:d4:89:ab:78:5d:d8:bc:1d:b2:a9:e0:a8:cc:09:
         42:49:d6:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:54 2026 by rpki-client