Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa
File:                     56ececec-04c8-4cfb-83f5-1dc00105cc66.roa (raw, json)
Hash identifier:          foX1K0hLijfswX4Cp8ouo4mSb/kdI482TJV4DMw7f1w=
Subject key identifier:   D0:DA:41:37:DE:58:C4:CD:3E:3C:3B:BF:77:40:91:C9:9A:1E:C5:AE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3B259DC8B23936E5BA44A35BD895898DCD1EA025
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa
Signing time:             Thu 23 Jul 2026 13:11:38 +0000
ROA not before:           Thu 23 Jul 2026 13:11:38 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:25:9d:c8:b2:39:36:e5:ba:44:a3:5b:d8:95:89:8d:cd:1e:a0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:11:38 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fae23bfa8c5632adef5b059b1d06296bd5a2062f9739407c9fd8e976dc5744ec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:74:6b:b8:58:30:2d:df:a1:7e:0d:f5:6c:
                    86:3e:11:a6:cf:76:cb:7d:be:c6:d0:44:bd:0d:5d:
                    31:77:43:2f:f9:2d:0d:e7:81:d0:bb:99:0e:28:ab:
                    fe:f2:77:9b:80:96:ae:83:95:aa:30:77:fe:24:30:
                    a9:a8:68:1b:0a:6e:30:49:67:b6:b3:56:5f:9c:77:
                    9c:74:a2:2d:e0:0d:f9:76:7c:07:90:47:df:0e:ca:
                    ce:e4:26:c8:3d:84:7e:1f:d8:5a:fb:dc:61:e3:9d:
                    1a:8d:08:c2:3d:1c:63:ee:72:d0:56:0d:43:57:62:
                    f4:58:5e:52:c6:ee:17:b7:4b:d1:8a:96:4d:ca:77:
                    ce:84:b7:6c:42:ce:99:84:39:f9:d5:67:2d:af:04:
                    7e:c6:6d:48:fa:f9:d3:fd:c8:86:29:a1:ba:be:4a:
                    73:eb:37:26:39:1a:4d:d6:39:36:b6:31:cb:fe:8d:
                    14:66:13:92:35:55:ae:b9:d2:1d:5e:6c:9d:7a:b5:
                    b0:69:7e:1d:6f:0e:1a:40:6d:ab:5b:50:ec:d7:d6:
                    66:18:bd:2f:27:a9:d0:e0:6f:6c:24:8b:52:92:7e:
                    c0:63:74:67:4e:2b:1c:b6:10:7c:ca:25:62:01:8a:
                    7e:43:05:59:e3:9e:9f:39:39:0a:ab:37:fd:ef:31:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DA:41:37:DE:58:C4:CD:3E:3C:3B:BF:77:40:91:C9:9A:1E:C5:AE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56ececec-04c8-4cfb-83f5-1dc00105cc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3000::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:df:84:85:e9:c3:55:0e:6d:bc:e0:23:32:58:82:b7:89:95:
         81:26:86:59:05:52:bf:aa:f7:ce:2d:33:88:89:d7:b0:21:ef:
         3e:b3:5f:90:30:f7:60:5f:43:48:cc:ad:6d:0a:cc:9e:5a:db:
         39:07:34:2c:08:7c:d2:82:f5:9c:44:57:ea:65:90:78:ac:af:
         6b:a4:56:41:68:4f:d7:9c:a4:98:bb:57:0d:f9:b5:e8:6c:c1:
         b8:b1:ce:3b:a4:c1:2a:33:b3:41:43:20:71:79:e0:d5:00:9a:
         f0:2d:46:2c:44:8c:16:48:a4:35:a6:fc:41:83:2a:25:59:72:
         c0:bb:19:09:04:e2:52:72:98:03:b8:26:8f:a0:f8:28:7a:3a:
         1b:03:30:9e:e3:59:bc:e9:42:53:d7:1b:b3:69:6a:fa:81:e0:
         9d:df:b2:6c:b2:c7:92:d8:0e:33:4a:b2:52:6f:ba:69:d5:a4:
         e1:b8:75:6b:c1:e4:eb:b5:8a:01:56:db:f6:c7:db:68:70:43:
         85:7a:35:0a:b0:f9:6b:2f:94:6a:e3:0d:3a:a5:f9:ec:d8:2e:
         87:c3:1b:d6:58:ef:cd:c3:0a:2f:a0:84:70:8e:9b:3f:f3:76:
         4d:04:b3:0c:70:95:3a:17:e3:2c:2d:7d:59:36:c0:69:fb:30:
         ec:b4:b8:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:54 2026 by rpki-client