Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59aa3897-c591-437e-8e45-a3078d2b1c51.roa
File:                     59aa3897-c591-437e-8e45-a3078d2b1c51.roa (raw, json)
Hash identifier:          Znvtr54qBlPFwH5T4DNQIcC3YfQhReT6Sn6KXA7vNWw=
Subject key identifier:   23:EB:87:BD:E6:3C:A8:10:B2:22:CB:E6:31:77:67:B1:28:D8:A9:60
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2E8D1506D67C4C5B22E78C6CDEDFD8CA4B15D7EF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59aa3897-c591-437e-8e45-a3078d2b1c51.roa
Signing time:             Thu 23 Jul 2026 08:00:12 +0000
ROA not before:           Thu 23 Jul 2026 08:00:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:361e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8d:15:06:d6:7c:4c:5b:22:e7:8c:6c:de:df:d8:ca:4b:15:d7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:00:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=7028173383d4b7f4dbf72c649e676542bfd10603ee27762fa5f901af9559a8bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:7f:93:1a:ef:78:a7:e2:9b:92:7c:c2:74:
                    be:b5:9c:e9:09:f1:14:38:b5:3b:bd:61:41:ea:49:
                    32:cb:bf:c7:e3:e7:83:f7:ed:e1:5d:65:42:d2:c5:
                    34:a3:da:b5:2e:5e:67:ad:21:ed:75:24:4f:4c:f2:
                    07:8d:d8:6e:2e:fe:cd:f5:f0:3b:34:9c:75:78:c5:
                    22:d7:ae:1a:14:7f:e0:78:2e:dc:dc:2b:af:e1:e2:
                    b8:90:13:6b:45:14:37:5a:42:26:78:7b:2d:57:23:
                    52:01:24:81:91:ad:91:31:c1:fb:27:f8:c0:c9:23:
                    aa:46:45:64:14:3a:98:c7:ad:a8:c2:f0:c9:80:15:
                    98:1c:8c:48:44:8f:33:e7:13:44:d9:29:67:14:d9:
                    45:60:be:f0:04:0c:83:9f:5f:43:92:20:c3:5f:e8:
                    4f:51:12:6d:d2:4c:fe:cf:fc:06:5d:ab:7e:e2:46:
                    db:70:e2:a5:64:6e:54:af:0f:98:e5:53:d1:d5:2c:
                    9f:ab:df:0f:4f:33:2d:6e:c2:37:93:57:0a:d9:6c:
                    88:26:21:2f:d9:a9:cf:17:92:6d:b6:fd:c9:bf:a6:
                    79:b6:29:f8:33:4d:9d:5d:eb:2a:d5:6c:db:92:84:
                    a0:2b:a1:06:34:a4:df:68:41:16:2a:da:20:dc:ca:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:87:BD:E6:3C:A8:10:B2:22:CB:E6:31:77:67:B1:28:D8:A9:60
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59aa3897-c591-437e-8e45-a3078d2b1c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:361e::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:57:a8:06:76:3e:2d:95:ff:b5:ba:e6:1f:37:42:78:7d:
         b9:04:00:83:3e:92:b0:14:1a:36:7c:58:f4:f0:d1:10:93:39:
         7e:c0:15:38:a4:7b:4f:e8:90:e6:a0:8a:30:f8:b2:41:1a:9f:
         97:f6:33:21:56:c3:9d:63:57:c8:7e:24:94:18:4f:e1:7b:c8:
         a7:f3:7c:8b:ee:a8:dd:19:84:7e:ee:5b:0c:84:49:80:5e:61:
         a4:6c:9f:8d:db:96:ff:26:fa:1d:68:6b:63:52:ea:5e:f4:15:
         a5:bf:8d:2b:cb:a5:a3:e7:87:0c:44:28:46:51:23:24:84:e9:
         fa:b9:f5:f5:79:70:f2:e3:5d:9b:66:d1:d0:17:20:59:61:e7:
         7a:d2:bf:a1:ae:1b:c2:1e:73:5a:cd:dd:73:8c:3d:96:8b:bb:
         62:c3:08:b6:aa:52:06:52:cd:99:6a:f2:a0:83:d9:c5:f2:7b:
         9d:27:97:32:d9:e0:75:35:d8:e8:e2:92:dd:15:dc:38:19:e6:
         58:ff:ef:ef:e8:7d:06:57:b9:4f:8b:2b:62:b4:5e:e7:62:e6:
         62:14:ed:38:39:1c:6a:ad:01:8a:57:cf:cc:ba:15:9c:2c:c2:
         fc:eb:d7:25:57:4a:60:4e:2b:86:1f:5b:fb:81:c6:a4:33:07:
         25:d2:97:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:08 2026 by rpki-client