Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4eda834d-b461-470c-93c1-3706aeeed09f.roa
File:                     4eda834d-b461-470c-93c1-3706aeeed09f.roa (raw, json)
Hash identifier:          uuAEXibYF+ZiPJnjoYTZTmGKUlrmMkYkgJJ8I6UZVvQ=
Subject key identifier:   C6:F9:66:93:CB:56:C5:14:6C:A5:15:4B:C2:AC:E8:50:11:61:81:E6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6319F12B5F483EDCA3749637ABDB36A75630B0E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4eda834d-b461-470c-93c1-3706aeeed09f.roa
Signing time:             Wed 22 Jul 2026 03:01:46 +0000
ROA not before:           Wed 22 Jul 2026 03:01:46 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bb6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:19:f1:2b:5f:48:3e:dc:a3:74:96:37:ab:db:36:a7:56:30:b0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:01:46 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=e62c570ca3c84a866d44e51177221999c28006f44740e858532e8aae884c8f8d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:43:9f:c9:47:65:72:6b:3a:61:1f:b1:c6:
                    32:fb:2d:57:75:2d:4d:9f:20:6f:e4:a0:12:dc:bb:
                    62:d2:ff:a4:87:a2:98:19:3c:0f:d1:ce:8a:91:cb:
                    f3:97:8a:bf:34:62:8c:f2:03:01:66:f0:9f:90:d0:
                    85:52:0c:83:d0:97:96:3d:10:71:43:3d:e4:15:55:
                    d1:f2:b3:1d:0c:f9:3a:29:55:53:49:31:86:9b:86:
                    af:bb:6e:d0:12:bd:e6:1b:f2:ca:18:d2:3c:58:1b:
                    ec:34:3d:86:c6:71:fd:d6:ac:16:f2:d8:ba:6d:c9:
                    69:11:60:57:84:4c:d9:ef:5e:ff:03:15:27:93:b3:
                    88:a5:d4:7a:9c:a4:21:b5:8b:e2:e9:78:14:59:43:
                    32:1e:e8:d3:5b:95:a8:a4:c9:b8:74:4d:6c:58:fe:
                    ea:37:65:2d:80:6d:9a:a8:2c:0f:10:69:92:56:3a:
                    2f:62:7e:3c:e1:0e:0e:4e:5c:0c:66:6c:89:73:31:
                    61:4c:0f:25:f5:50:7a:8b:ce:29:98:7a:30:0d:5b:
                    50:12:ac:cd:03:5e:55:ba:28:35:d7:0d:68:35:4d:
                    9a:2e:33:f6:ca:ab:0f:ff:22:89:3d:be:44:ef:05:
                    da:4a:d2:03:42:69:bc:66:03:9d:cb:83:da:af:26:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:66:93:CB:56:C5:14:6C:A5:15:4B:C2:AC:E8:50:11:61:81:E6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4eda834d-b461-470c-93c1-3706aeeed09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bb6::/47

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:4d:f3:0a:c7:3d:db:8c:3e:4a:91:01:e2:5b:6f:64:23:
         14:a6:2b:33:fd:2d:5e:98:6d:b5:76:80:18:16:fb:d2:61:10:
         4c:74:39:5e:a6:3b:a5:3b:80:14:fe:61:5b:de:fd:78:7b:cc:
         98:14:eb:73:bb:eb:c9:ea:68:25:a0:2b:24:1b:48:c7:84:41:
         af:56:35:1d:9b:cb:a0:f0:40:19:5a:b5:5e:3d:48:76:ac:1f:
         b2:cc:85:5a:20:77:fe:90:b2:89:0b:5d:12:e4:7d:01:5f:d1:
         1b:7e:ce:ae:18:7c:4e:54:10:db:da:d7:c5:62:c7:02:8b:24:
         bd:b9:cf:86:83:54:89:fb:f5:e8:87:4a:3f:10:9a:51:00:ab:
         38:b7:15:ad:0b:bb:b4:0b:79:de:43:82:ae:ba:3d:3b:31:00:
         70:aa:3c:8a:ec:fb:61:58:f2:ab:8d:ba:51:46:8a:43:f0:c0:
         e6:82:31:0d:eb:28:6a:c2:d5:02:82:2c:74:6a:9a:d1:8d:ea:
         95:33:6f:16:84:ea:4b:c4:71:0b:28:a7:c0:32:55:9b:71:c3:
         72:94:ab:f9:bd:59:b9:24:1a:d7:71:28:f3:d2:ba:7f:fe:47:
         50:27:c2:f5:23:0d:a2:17:a6:5b:3b:bc:49:2f:93:b8:93:3b:
         2a:16:28:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:44 2026 by rpki-client