Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d5750c0-6ce9-46f6-bf7c-80398cb6ebf8.roa
File:                     4d5750c0-6ce9-46f6-bf7c-80398cb6ebf8.roa (raw, json)
Hash identifier:          jKCdXjiTmyDVZ+W+tyKpjt6rafEQwnj/cxkuwDwhjWU=
Subject key identifier:   5B:40:0B:D0:87:E8:5E:C0:76:A4:15:12:29:0C:26:5C:87:9C:79:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4F900CB1DF91FE885EC6CC001EC4C7D360BF1E53
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d5750c0-6ce9-46f6-bf7c-80398cb6ebf8.roa
Signing time:             Wed 22 Jul 2026 01:30:57 +0000
ROA not before:           Wed 22 Jul 2026 01:30:57 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f14::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:0c:b1:df:91:fe:88:5e:c6:cc:00:1e:c4:c7:d3:60:bf:1e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:30:57 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=b19cbd8a317b5b3e91eb668261bc1aa6de20ecef3f0cd7ad71a98c8aa5555696, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b8:e1:a5:0f:c5:49:75:2e:c6:62:b9:78:9f:
                    b2:7b:c0:ba:94:16:50:6a:e1:24:85:1f:c0:df:fa:
                    96:fe:47:9b:1b:fa:77:6b:93:f5:c6:bc:fb:d4:c7:
                    c2:d3:53:88:5c:6e:ec:fc:00:a4:b0:95:19:b0:9b:
                    0d:59:be:76:96:a5:06:d5:1c:48:45:f3:b3:d0:5f:
                    80:ae:d9:e5:be:e3:2b:56:44:b4:a9:16:0e:23:70:
                    6a:a1:20:24:9d:19:a5:2a:8a:19:71:48:c9:6d:f8:
                    a8:e6:65:3d:68:44:35:84:60:b3:c0:42:2f:3b:a9:
                    bc:c9:3e:10:c5:7e:32:5e:28:cd:d5:b4:5d:70:de:
                    66:17:73:a4:ba:05:00:bc:fc:ff:f3:d3:47:3d:4e:
                    85:0d:68:4b:82:fe:ff:e2:51:23:d4:f5:4c:ac:54:
                    d0:89:31:5c:0a:2f:6c:03:4d:93:f5:c7:1e:3d:79:
                    fe:d2:12:8c:70:47:ef:87:4e:b5:43:4e:8b:b5:16:
                    b0:41:dd:a4:35:bd:13:64:e5:57:53:42:b7:0d:0b:
                    fa:df:7c:ad:0e:fb:6b:09:5f:60:9b:68:8b:bb:82:
                    6f:dc:8f:11:c4:cb:d8:47:ba:45:95:55:d0:e9:24:
                    22:b8:f8:95:b1:ba:fe:37:e1:a2:72:f6:61:c2:8a:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:0B:D0:87:E8:5E:C0:76:A4:15:12:29:0C:26:5C:87:9C:79:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d5750c0-6ce9-46f6-bf7c-80398cb6ebf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f14::/47

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:a1:61:a7:ba:0d:4d:eb:ff:1b:eb:ed:db:f7:59:be:9c:
         70:68:32:d1:d3:1b:64:a0:06:9f:40:83:31:85:57:e1:b8:fd:
         5b:77:1f:f9:e6:09:6d:9c:1c:dc:fc:74:01:7d:7a:84:69:93:
         11:7a:95:45:7b:ba:b5:d5:47:07:6b:e3:8f:1e:47:61:37:c7:
         31:3f:1b:4f:91:af:c9:e7:ea:67:b0:91:60:5b:bd:89:2c:75:
         71:cf:b4:61:a7:96:0c:b1:a8:3d:c7:67:ca:e8:d1:b5:c4:b2:
         d9:96:41:1d:fb:8d:84:4a:f9:ea:c3:37:d4:a7:4c:90:a9:ac:
         ae:fa:57:33:59:8d:94:77:ac:bf:93:89:21:5a:db:08:5e:de:
         f0:ac:c5:4b:fa:1c:4a:66:3c:83:72:1e:fa:50:e1:0f:1b:c2:
         10:6a:f3:b7:ce:4a:06:a2:b1:a7:90:a7:4c:92:ea:16:7d:e1:
         f4:58:63:46:e3:17:6b:88:1c:23:27:0e:cc:6a:6c:1c:7d:4e:
         76:13:50:e9:e1:dd:b6:f4:7c:ef:db:0e:e7:ec:57:5b:4c:6d:
         83:c6:c4:8a:80:8a:7d:43:23:87:72:16:5b:19:22:79:9e:c6:
         a0:a4:e9:f8:76:e9:9a:a4:b4:35:de:35:2e:0a:8d:92:bc:81:
         8f:06:03:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:18 2026 by rpki-client