Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5087c411-999a-4d8e-a222-f21cbcae9800.roa
File:                     5087c411-999a-4d8e-a222-f21cbcae9800.roa (raw, json)
Hash identifier:          MNFpRktDmu94P3AB+QgxskvAeDUlWTxBSNsc/KF4EDw=
Subject key identifier:   EF:B0:8B:BD:8A:EA:60:43:14:E3:00:93:6D:AF:1F:48:E8:09:33:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4CB491681C11CC36EECFA4BFB93F43F8E292588A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5087c411-999a-4d8e-a222-f21cbcae9800.roa
Signing time:             Wed 22 Jul 2026 01:01:13 +0000
ROA not before:           Wed 22 Jul 2026 01:01:13 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ece::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b4:91:68:1c:11:cc:36:ee:cf:a4:bf:b9:3f:43:f8:e2:92:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:01:13 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=cf9c3d2802ee3fbe92f0664ae298cfa1fa6bf5fe0d35d334f65764a1c6321b83, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:9c:37:e3:59:fd:56:87:46:0a:71:44:f1:
                    75:bd:ab:89:0c:6b:59:40:5b:db:c1:84:e6:47:00:
                    f8:81:67:79:09:74:69:22:47:0f:d2:25:4a:1b:b0:
                    65:d5:c5:fa:9d:62:aa:ba:3c:fa:9a:4e:68:ac:40:
                    28:5f:8b:50:27:2b:7c:2e:86:45:e7:47:64:c5:2b:
                    f6:97:37:eb:34:d6:80:27:6e:4b:cc:f9:a9:bf:58:
                    aa:b2:48:23:3e:99:32:dd:bc:77:9e:59:16:e9:41:
                    60:86:68:af:1a:c7:51:37:b9:94:80:47:18:f9:11:
                    d3:e1:e9:d1:cf:39:9e:4d:91:b0:53:26:69:b1:77:
                    df:a9:51:65:d2:6a:f3:e3:f9:1e:90:ab:73:14:70:
                    b1:7b:99:f5:e7:d2:04:91:f5:d1:4d:95:6f:d0:d6:
                    0a:d0:59:b4:80:fc:5e:fb:23:1d:5a:a7:65:04:14:
                    9b:5a:f2:d5:92:23:27:da:58:bc:c8:0e:71:fd:6f:
                    10:13:61:ca:46:05:57:a1:21:dd:85:c3:f6:8a:8d:
                    05:47:89:5c:1a:ce:a1:ee:11:ad:c4:a9:a4:7a:9c:
                    4d:54:b3:2f:21:7d:a6:90:d1:47:ef:52:8a:ea:c4:
                    5f:e8:a4:f9:7b:7e:63:0e:8c:25:1f:d7:76:6f:88:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B0:8B:BD:8A:EA:60:43:14:E3:00:93:6D:AF:1F:48:E8:09:33:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5087c411-999a-4d8e-a222-f21cbcae9800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ece::/47

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:24:e1:3f:3c:9c:df:49:0a:c4:b0:39:f7:55:86:03:6f:
         2c:08:e7:37:76:18:69:4f:e3:b0:d2:b7:79:07:83:d5:f8:eb:
         7b:fa:78:5a:50:6f:df:2a:9c:ee:9d:66:7a:19:04:78:c3:db:
         01:64:22:d3:b2:ec:2d:96:55:00:91:99:a0:df:46:09:0f:c1:
         b9:6f:01:4c:ef:95:ff:f5:41:99:6b:70:7c:49:88:1f:f9:23:
         7f:f8:7b:45:df:70:66:40:81:62:39:b9:27:b7:f1:b8:21:aa:
         3c:4a:47:a3:7f:c5:47:2d:99:6c:7d:b9:85:09:03:a5:74:c8:
         55:2f:35:ec:a8:06:dc:de:16:fd:2d:00:07:77:83:0a:fa:44:
         0c:15:2e:3d:53:4c:65:98:0a:eb:ec:bd:99:a3:63:c5:95:ad:
         bb:f3:33:60:db:9a:24:97:b7:75:ca:e8:98:a0:d0:9e:a2:ad:
         27:c5:82:02:ee:8c:61:35:09:d3:1a:49:53:ba:c6:18:6e:7a:
         a4:59:80:64:10:81:33:3a:40:6c:93:14:8d:24:e7:ff:3e:5b:
         66:ab:58:b6:cd:f7:2a:12:c7:2e:fe:13:4b:59:fc:62:8a:58:
         01:72:7f:e5:76:a2:aa:0b:b9:e7:b8:d1:a0:05:49:ba:69:ba:
         10:e4:92:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:04 2026 by rpki-client