Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad5419a-0515-4765-ac0c-46e01c26dbf4.roa
File:                     4ad5419a-0515-4765-ac0c-46e01c26dbf4.roa (raw, json)
Hash identifier:          H55WiV6elTjzBXMzWxYIhLLLTeeAHHBt4h5mOfMQPAo=
Subject key identifier:   66:F8:D0:39:20:DF:DF:57:7F:3C:11:88:E2:31:EE:1B:B2:BD:16:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0DFF1B4F47C30C4694ECBF25C2A8D364F91F3ACE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad5419a-0515-4765-ac0c-46e01c26dbf4.roa
Signing time:             Thu 23 Jul 2026 13:12:10 +0000
ROA not before:           Thu 23 Jul 2026 13:12:10 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ca8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ff:1b:4f:47:c3:0c:46:94:ec:bf:25:c2:a8:d3:64:f9:1f:3a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:12:10 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1550cc81d332c09498f35a050f61102326a2f6b53a5545555175c786ca364c3a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:4b:00:56:88:95:1b:f5:71:6a:38:7a:39:
                    a8:da:2a:78:c2:f7:af:58:dd:c9:5c:44:e4:ca:9c:
                    de:8b:88:72:aa:b7:d9:8a:ac:2c:ea:93:e1:15:d6:
                    ce:cc:82:32:17:aa:0f:94:e6:40:bc:98:15:7c:c1:
                    95:55:24:76:80:7b:97:4e:f0:de:17:7c:b5:f6:78:
                    78:c2:ae:6c:ef:2b:8f:56:8f:b8:31:ce:51:ec:91:
                    5f:4f:9e:0b:c1:fe:98:ef:c5:ac:cf:47:30:da:80:
                    96:4f:24:84:da:c5:71:e5:c8:36:cd:e4:2c:91:1e:
                    b1:36:0e:22:b3:c3:1a:ba:44:17:50:1c:ae:89:1c:
                    35:d3:c6:7d:ae:97:cd:67:bc:52:57:c8:f1:c6:09:
                    34:33:c8:2a:cf:05:26:bf:3e:bf:eb:09:a1:47:96:
                    b0:83:65:3d:0d:20:d6:fb:88:bf:02:17:9f:7a:e5:
                    ec:4f:91:95:ad:87:07:14:50:ef:83:c4:1f:43:d5:
                    1b:9d:87:27:62:d5:5b:ba:e8:52:05:9e:72:f6:84:
                    fe:ae:95:69:35:9d:c2:ea:78:59:8a:ea:42:0d:3c:
                    b1:8d:33:c2:69:b6:70:f0:da:09:3e:25:6b:1c:8e:
                    74:d7:36:8f:cf:10:44:52:9c:2f:44:0a:65:ef:99:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F8:D0:39:20:DF:DF:57:7F:3C:11:88:E2:31:EE:1B:B2:BD:16:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ad5419a-0515-4765-ac0c-46e01c26dbf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ca8::/45

    Signature Algorithm: sha256WithRSAEncryption
         33:89:9a:6c:2f:9f:db:12:73:0f:02:f8:c2:54:4d:27:7e:e3:
         eb:3d:48:98:6e:99:c8:4a:e6:ae:8b:b4:18:ca:59:e1:7d:b6:
         24:9c:e8:df:e0:76:27:e7:14:e0:81:fa:52:e7:93:55:a5:12:
         7c:3b:75:e1:25:3a:74:20:65:9b:c2:23:74:44:57:45:2a:16:
         20:61:dc:ed:65:10:df:d8:d1:cf:e0:ed:ac:fb:fc:e1:7c:fd:
         55:48:30:5b:c2:af:9b:85:5f:53:16:34:dd:2e:a3:25:7a:86:
         a3:c2:ce:11:28:ae:3c:f0:4e:a4:25:6e:86:d5:66:1d:99:29:
         eb:ce:93:9d:37:83:4b:a1:f4:50:4d:81:0a:9f:50:ea:9e:03:
         61:4e:2c:01:21:98:b2:cb:27:e5:49:bd:fe:ae:0c:2f:cc:78:
         4b:86:d0:f1:a1:c3:25:36:80:8d:a6:82:4e:ba:ce:89:df:ec:
         42:8b:a7:97:e5:9d:83:86:ed:07:e7:a2:a6:87:67:15:6f:17:
         ea:bc:90:b4:1e:79:6a:62:1d:eb:39:e1:34:a4:69:5d:2d:f8:
         d5:51:4e:7e:1a:d8:f9:cd:8d:32:30:19:89:43:b5:10:18:23:
         d2:bf:7f:4b:79:12:1c:57:5a:75:76:0a:2b:45:fe:0d:4e:6e:
         ea:cc:d4:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:52 2026 by rpki-client