Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/49f461cd-4514-4b81-8a1c-c9009d98fe97.roa
File:                     49f461cd-4514-4b81-8a1c-c9009d98fe97.roa (raw, json)
Hash identifier:          S1b4g68+lOhoKPHcCAVCjwpQLll7fDFV9hjr0Hasw5s=
Subject key identifier:   E7:6C:A7:81:EF:2A:33:5C:02:AA:6B:CA:95:1A:73:59:DD:BF:FE:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C8AC7204B73F001DFECF6C53E987AA0E140C7A8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/49f461cd-4514-4b81-8a1c-c9009d98fe97.roa
Signing time:             Thu 23 Jul 2026 10:01:27 +0000
ROA not before:           Thu 23 Jul 2026 10:01:27 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e9e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:c7:20:4b:73:f0:01:df:ec:f6:c5:3e:98:7a:a0:e1:40:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:01:27 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=08603a031b5d0f1a9038fe9cbc96a13ec53985acd1239d4873569255a6feb0d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:e6:12:26:b6:94:ab:4c:5e:4e:43:cb:ec:
                    6c:a5:68:81:73:06:06:e4:1d:55:76:3b:81:71:11:
                    c9:c6:b7:38:02:41:81:a5:ee:be:07:41:8e:48:ed:
                    87:2f:27:9b:79:7b:6a:1c:9e:61:33:b5:14:08:81:
                    c6:4c:d0:ce:79:68:79:d7:06:68:37:7e:94:08:f5:
                    6e:2a:a0:66:2e:42:2a:99:3f:83:ad:e3:2f:7f:e5:
                    c5:5d:c8:2b:b6:32:4e:ba:6a:ff:e1:09:4a:b9:a8:
                    08:b4:de:0f:76:84:da:2d:a8:2c:92:c7:65:c8:f1:
                    8b:88:51:09:35:92:bd:4d:44:b5:96:13:17:17:4b:
                    0a:36:b5:f2:94:ec:32:0f:07:be:1e:38:08:ff:56:
                    2c:9f:1e:61:65:db:a8:60:bb:4c:ae:5c:f5:54:02:
                    2f:ca:b2:3a:5a:a6:cb:c4:42:d8:b6:3e:51:f7:98:
                    33:93:ee:04:ff:39:12:99:e3:4b:27:06:91:22:6e:
                    df:21:23:da:cb:7c:0c:c2:02:35:5a:08:31:c2:a5:
                    18:17:78:64:d6:74:a5:dc:e3:06:87:07:dd:e5:42:
                    f2:d8:c1:29:7f:2c:83:4f:f4:b4:37:1b:e9:e1:a1:
                    c5:85:f2:98:cf:16:cd:df:51:92:4a:b0:40:74:92:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6C:A7:81:EF:2A:33:5C:02:AA:6B:CA:95:1A:73:59:DD:BF:FE:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/49f461cd-4514-4b81-8a1c-c9009d98fe97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e9e::/47

    Signature Algorithm: sha256WithRSAEncryption
         be:a6:da:11:34:bb:4a:39:f1:83:dc:7e:4b:e1:9c:ed:dd:94:
         b5:90:0e:aa:42:6e:17:7e:97:b4:28:f1:ee:67:2f:88:e4:72:
         e4:fd:8c:53:b9:37:72:7e:c5:b3:1a:2b:e5:cd:db:4f:b8:c3:
         8a:28:35:94:99:e9:eb:24:b5:be:64:f2:91:f2:22:ba:d8:ee:
         d5:56:a9:1f:38:85:c0:1a:8d:fc:5e:07:94:e7:67:36:21:39:
         bd:cd:b8:7e:53:85:a7:7c:ae:1a:23:3e:68:2b:62:e7:f5:92:
         f9:e0:40:17:be:c9:96:a3:5c:98:f9:83:bd:06:3d:d3:6f:b3:
         fe:89:2e:52:dc:26:e7:c6:8b:28:db:03:e2:57:51:04:17:f0:
         ab:82:be:86:ab:3f:53:e9:f2:f9:d3:e5:88:79:81:68:0d:a5:
         06:84:ed:40:9a:0e:60:19:c8:dc:f1:8c:de:6a:d4:1e:61:8c:
         14:1b:b7:a2:34:c8:62:4e:a9:6c:31:e8:f4:0c:a9:64:09:aa:
         e4:61:f5:f9:6f:48:a8:3a:25:4e:28:0f:8e:64:20:27:17:f9:
         c7:77:46:fe:21:eb:dc:53:f3:44:f9:3b:5d:31:ae:08:56:4f:
         58:82:0c:26:7e:28:cb:eb:65:28:9e:cc:ae:6e:59:db:bb:52:
         ff:96:fb:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:14 2026 by rpki-client