Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5404cec5-22bf-46d3-bc70-d823b343ce87.roa
File:                     5404cec5-22bf-46d3-bc70-d823b343ce87.roa (raw, json)
Hash identifier:          D6PjAXzlj71LOyMWL4p4pF9enstSsv/MLJBzp9E344A=
Subject key identifier:   E4:46:46:AB:F4:EA:1E:93:41:0F:A7:5B:70:03:57:E0:E6:A4:30:FA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       57DF1DF074916872E6876A535FF71A553721CF9D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5404cec5-22bf-46d3-bc70-d823b343ce87.roa
Signing time:             Wed 22 Jul 2026 03:01:26 +0000
ROA not before:           Wed 22 Jul 2026 03:01:26 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c68::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:1d:f0:74:91:68:72:e6:87:6a:53:5f:f7:1a:55:37:21:cf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:01:26 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=72e93f78caa996a57c14eb0dd0bb87d985059e0ec73d31b3f5dc82f68e3fc239, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:6e:40:98:76:66:e5:d9:0f:f0:44:3f:b7:
                    e0:f0:49:06:d1:34:d2:87:9d:2f:89:3b:36:49:07:
                    65:85:66:63:a2:ed:97:90:7f:15:22:2c:9d:c6:1b:
                    30:1e:6e:4a:c3:bb:b4:25:98:28:2c:10:5e:c0:4e:
                    bc:35:be:c6:4b:78:34:84:43:16:19:1e:a4:49:f8:
                    a5:af:2e:c4:2a:56:5c:b8:07:31:9a:4e:5e:62:4e:
                    70:b7:e1:f7:49:71:cd:70:d7:2d:ce:59:4a:f4:0c:
                    44:b1:c5:cd:6b:38:9d:0d:cb:7f:89:c2:84:47:97:
                    c2:f8:f4:1c:25:cc:e3:c6:92:69:de:54:2d:66:99:
                    0a:94:0f:22:5c:32:41:f5:07:1a:69:7d:fd:87:82:
                    1d:6f:20:99:ec:47:3d:98:82:6e:95:b0:c0:ac:60:
                    fc:33:e4:65:23:99:25:1f:d2:2c:dc:72:43:53:e4:
                    3f:ce:b2:a6:88:8e:89:25:ff:36:b6:f1:c6:20:4b:
                    6a:c1:84:b9:35:07:96:28:c0:58:8b:90:60:29:34:
                    12:08:27:f7:c6:69:d3:d4:9d:b2:27:db:45:83:f0:
                    c2:55:e5:e2:fb:17:37:94:72:9b:aa:f7:82:de:dd:
                    81:14:b5:24:7b:26:5c:b3:46:89:73:5c:f4:fa:51:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:46:AB:F4:EA:1E:93:41:0F:A7:5B:70:03:57:E0:E6:A4:30:FA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5404cec5-22bf-46d3-bc70-d823b343ce87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c68::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:a5:5f:26:d0:91:a4:78:20:fd:f7:a0:1d:a3:02:f2:9a:
         72:13:a1:a9:57:e5:a1:16:b2:fa:b1:fc:73:78:8a:88:7e:ee:
         ca:d8:b2:c6:75:4c:98:77:66:66:bd:f0:fc:b7:bb:44:15:3a:
         5e:e6:aa:f6:b1:6b:5f:14:96:b3:fd:f6:1a:73:2a:c3:90:1f:
         a3:bd:93:ef:77:07:fb:d6:3f:ef:f1:fe:11:4b:c5:16:eb:4f:
         e9:ab:39:c5:00:d2:2e:d4:92:88:21:0d:19:3e:c8:38:77:01:
         19:bb:17:c0:df:4a:da:5a:29:d3:ae:2e:f1:fb:ad:53:b2:66:
         4b:de:01:06:ef:74:17:ac:79:e6:0c:36:b7:ce:ff:36:df:cf:
         4c:53:52:f1:f2:57:a2:46:71:dd:58:76:a5:45:d9:91:17:71:
         7c:bc:e9:a2:d2:19:0e:5c:f5:0a:c7:cf:8a:23:45:de:ab:bc:
         94:f5:2c:5c:44:12:e8:dd:52:38:78:12:d6:0d:71:84:9f:b7:
         5c:aa:43:24:9d:65:18:98:06:45:8a:72:8d:9f:be:08:c0:6b:
         81:86:88:5f:2d:1d:ef:bd:ea:54:32:bc:d9:0c:5d:98:12:d5:
         a8:7f:dd:8f:0a:e3:fe:a5:07:6d:9b:d8:11:fd:5f:50:c2:94:
         da:f0:46:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:47 2026 by rpki-client