Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5078f630-017f-43ee-96a6-69acb51b3044.roa
File:                     5078f630-017f-43ee-96a6-69acb51b3044.roa (raw, json)
Hash identifier:          VvPd/dxRHWpO7F9sZ328AI1TDYioEViZFN/7LvbygiI=
Subject key identifier:   CE:0B:11:B8:31:CA:55:11:41:FC:3D:22:65:3D:CA:6C:79:A3:39:7B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1893E01FA7705C4D44D52AF96609133F96FE5C21
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5078f630-017f-43ee-96a6-69acb51b3044.roa
Signing time:             Thu 23 Jul 2026 12:41:29 +0000
ROA not before:           Thu 23 Jul 2026 12:41:29 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3260::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:e0:1f:a7:70:5c:4d:44:d5:2a:f9:66:09:13:3f:96:fe:5c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:41:29 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fc45c2a5077a7275209b7636a08a12597e14e4701e56d8abdffad2acedf1326a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:1f:97:f7:ac:b2:48:66:ed:c2:58:0e:65:
                    2a:af:3f:70:db:02:26:48:58:ab:38:5b:7a:f7:c6:
                    40:c6:30:cb:16:96:ce:75:00:fc:af:4b:53:0a:4b:
                    42:c7:d8:e0:15:b8:04:e1:b2:53:d7:5a:38:e4:14:
                    0b:9e:61:b1:36:e5:1a:b7:47:5d:17:1c:e9:52:30:
                    d1:0c:bc:50:9a:13:ea:c2:44:60:3f:5b:39:11:20:
                    dd:2e:fa:d6:b0:b4:9c:91:7b:6b:d5:9b:4b:eb:f9:
                    8a:2c:d9:18:e3:db:58:e1:dd:a9:f6:ff:e2:f2:36:
                    07:a7:b6:01:18:21:fb:20:b4:bb:79:83:1b:90:85:
                    6e:3a:65:11:e9:0c:06:55:a2:29:8d:cf:b4:eb:35:
                    56:09:48:07:cf:d8:db:3a:a8:0a:d1:fe:3b:40:f0:
                    7f:60:16:42:bb:7d:ad:93:0d:2b:95:dc:54:a8:9c:
                    8a:10:5d:8e:f2:e4:97:ac:b3:66:f2:e3:1f:42:ae:
                    ce:e0:d1:3c:5f:06:a2:fe:00:fe:19:f9:f4:3f:9b:
                    16:b1:a3:98:c1:98:32:aa:5c:4f:9a:96:0c:8a:43:
                    1c:ca:75:55:ad:f0:47:ec:ec:b5:c4:8a:f6:1c:b9:
                    4e:8f:3c:da:c2:da:e2:fb:fb:bd:bc:fe:97:3c:17:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0B:11:B8:31:CA:55:11:41:FC:3D:22:65:3D:CA:6C:79:A3:39:7B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5078f630-017f-43ee-96a6-69acb51b3044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3260::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:30:4f:81:ea:2a:db:07:7a:c2:a5:d4:9f:ef:e3:9c:11:8e:
         4c:69:7c:f3:d9:c9:c4:d6:99:79:2a:9f:ee:0d:03:fd:40:b0:
         ac:f6:99:5b:10:37:f5:f9:48:69:73:9e:96:dd:ea:88:fd:00:
         90:d8:4c:ec:b6:33:30:57:3a:47:16:2f:63:8f:c9:0d:8b:62:
         39:72:cb:68:60:fe:f2:51:84:28:e8:42:85:ed:c3:ac:ee:52:
         5d:51:b1:f5:cf:6c:06:e3:8f:34:06:f6:c2:33:b9:0b:aa:8a:
         eb:e6:77:b8:d5:87:5d:40:f4:0f:f2:31:c2:6b:03:75:8f:2f:
         55:a6:73:65:d4:d2:8c:1b:a3:f3:c4:0d:62:40:41:99:6d:b7:
         8b:8d:13:a5:25:dc:a3:65:fe:e3:35:90:06:ec:33:06:ec:75:
         9c:f7:04:ff:d2:c2:02:99:cc:60:34:79:79:a6:e0:44:77:82:
         ec:f5:50:a9:8b:a3:79:11:03:b2:41:ae:2b:13:bb:d0:fb:ad:
         ac:41:a3:50:00:ea:99:70:bb:5b:9c:33:f7:7e:9d:15:9b:7d:
         ec:df:6c:64:0e:7f:f3:ac:11:e3:f0:5b:8e:4d:bf:6e:ac:8d:
         79:02:91:6d:d4:8a:38:f1:6e:07:a3:9f:89:ac:e5:12:c0:67:
         66:e2:3b:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:35 2026 by rpki-client