Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa
File:                     53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa (raw, json)
Hash identifier:          Mh52rKfAE3hp6sl/xWHmosW/aNmLuStwTw3SCZ9d1m8=
Subject key identifier:   43:4D:24:08:99:CF:FA:5B:6E:68:06:C0:1C:EA:DE:A9:04:4F:A1:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0BF06FF0F9A29C546E841871A5D834F16541EF9E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa
Signing time:             Thu 23 Jul 2026 02:41:23 +0000
ROA not before:           Thu 23 Jul 2026 02:41:23 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f0:6f:f0:f9:a2:9c:54:6e:84:18:71:a5:d8:34:f1:65:41:ef:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:41:23 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1a980ff19b135442f067aa33731b2159f229ad86d3f598bf45c9e2448fe6c06f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:b4:c8:00:77:2e:a7:ea:22:ed:f5:96:a3:
                    6c:d9:ec:4b:14:f0:f5:b4:e0:b4:1a:a2:14:a0:6c:
                    ad:cc:86:ec:bf:29:bf:09:c7:6c:4a:07:32:5d:2f:
                    a5:e9:43:34:3a:29:eb:26:bd:6a:ee:27:a0:ca:a5:
                    a7:44:65:01:ce:f0:e8:80:80:f2:32:40:c6:c4:9f:
                    e1:06:33:cd:8f:3c:a2:19:fb:e1:ec:3b:16:43:66:
                    0c:10:ee:19:78:4f:95:a0:ee:75:a8:45:d0:32:b9:
                    6a:96:a4:c6:40:45:10:18:c9:a2:ba:34:d9:fc:8e:
                    e3:a8:4d:25:e1:84:f9:fa:79:5c:ed:d3:9c:39:e5:
                    83:79:63:87:b0:fe:08:1c:30:38:fe:b5:de:e3:e5:
                    ca:eb:7c:41:97:17:ea:22:a6:04:64:de:0f:2a:cd:
                    cf:98:d4:8d:7d:01:35:d3:77:45:ae:16:6f:93:9d:
                    8e:61:83:02:10:37:fc:c8:24:1e:cb:fe:5e:d6:e6:
                    23:64:50:5b:69:05:7b:7b:3a:43:0b:61:9d:6e:ac:
                    39:3b:bf:a8:c7:f4:9c:86:d2:da:59:f4:fa:18:b7:
                    7c:55:ae:91:b0:da:f7:a0:fc:eb:46:99:cf:71:fc:
                    fc:f2:e9:0e:a2:a8:b9:10:9e:d8:ea:2f:1f:b6:24:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:24:08:99:CF:FA:5B:6E:68:06:C0:1C:EA:DE:A9:04:4F:A1:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/53723d46-3544-4ee1-9eda-5c5a9d30e2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:45:32:b2:12:b1:d9:ee:3d:7f:26:27:c5:9f:41:52:d8:
         3d:d0:b7:40:5b:96:ed:b9:be:25:2f:dd:76:b0:b1:39:da:b9:
         0d:3c:e6:17:0f:d7:89:b2:8d:15:77:3a:f4:3d:91:d4:ad:24:
         6e:8c:ec:46:f3:dd:9b:e3:13:26:f0:69:ba:6e:10:b3:6c:ab:
         93:e3:94:22:cc:9e:66:5a:c1:7c:da:4c:7a:7e:e7:d6:c6:16:
         fd:7b:10:ca:dc:73:28:93:ea:df:f4:3e:9f:a3:fc:d3:3b:69:
         26:53:72:95:4f:11:f3:e1:20:f0:01:7c:04:0e:d4:39:f3:c6:
         ff:d1:f4:0c:11:78:a5:c1:a0:c8:55:12:01:19:1b:0a:2b:51:
         37:2e:ff:af:29:34:a0:d9:b6:cc:c1:19:4b:51:37:e9:84:b4:
         b0:3d:a0:9a:82:22:2f:f1:e9:23:9d:83:a7:3f:ff:f1:ff:71:
         76:f6:66:27:88:97:a7:29:84:f5:14:2d:4b:81:4b:b0:20:01:
         1e:0f:44:c8:f7:7c:29:43:e5:f0:e7:17:33:09:f6:82:df:3e:
         96:03:23:5e:33:7a:09:e2:f6:8f:65:3c:ce:0d:20:24:be:36:
         52:cd:e7:ff:7a:6b:7d:7e:6f:d5:fa:96:1d:35:ff:85:21:ba:
         61:a1:50:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:24 2026 by rpki-client