Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64bbc004-6072-4050-a26e-7c4472201de2.roa
File:                     64bbc004-6072-4050-a26e-7c4472201de2.roa (raw, json)
Hash identifier:          2o3U6XydvHfwTUUDBV/akGh4C3nRmQekB+/R1LglnWE=
Subject key identifier:   DF:66:DE:74:2E:DF:3B:89:A1:9F:97:77:C3:C3:E2:4E:A0:ED:59:19
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1C79D163D46D5249EE5B80B48C4FE18D2ADE22EE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64bbc004-6072-4050-a26e-7c4472201de2.roa
Signing time:             Wed 22 Jul 2026 02:51:57 +0000
ROA not before:           Wed 22 Jul 2026 02:51:57 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3268::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:79:d1:63:d4:6d:52:49:ee:5b:80:b4:8c:4f:e1:8d:2a:de:22:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:51:57 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=5b73f0da3d7c6349866e58f33f1afb74f37f8fb9299ffd684301b2515bcb0bda, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:10:c3:82:98:33:4d:1d:a0:b5:b1:d1:6c:
                    e5:a4:98:1b:e7:7a:91:0d:e4:95:14:5a:0b:86:88:
                    97:70:da:43:95:a5:0c:9c:ac:b9:d1:3f:fa:9e:7b:
                    c8:3e:60:a2:eb:74:d3:17:7b:69:36:d4:3c:48:b0:
                    15:71:64:4c:6d:2f:11:32:75:a0:f0:49:9b:26:2d:
                    5d:b1:d7:67:bc:71:a8:63:e7:4d:78:6d:5d:e0:a3:
                    d0:31:ea:13:78:69:69:e0:05:4f:6f:08:d2:03:5b:
                    f9:52:d0:a6:f8:5d:d5:75:24:80:5e:6c:82:40:95:
                    7e:07:bb:57:98:c7:f1:90:58:05:e7:dd:59:fc:c5:
                    92:6d:20:82:8e:c2:27:dc:21:45:7f:f3:a5:18:61:
                    ab:78:d8:80:b1:c5:f8:7b:a0:90:0b:0f:4b:b0:ea:
                    6d:1b:4a:4d:42:3a:3b:e4:d2:da:d5:73:c9:8b:48:
                    a8:2e:0e:8c:1f:b6:18:b5:50:8d:4e:bf:b2:5a:59:
                    15:86:98:02:20:0f:67:9b:70:31:21:5c:13:b7:8d:
                    11:12:b2:06:2d:3a:8b:82:8c:f9:a3:89:48:a2:44:
                    73:e4:5c:64:ba:2b:31:32:0d:7e:41:75:f5:4b:3c:
                    38:a5:b7:40:c0:fa:09:a1:5b:8e:35:cf:9a:f2:6f:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:DE:74:2E:DF:3B:89:A1:9F:97:77:C3:C3:E2:4E:A0:ED:59:19
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64bbc004-6072-4050-a26e-7c4472201de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3268::/47

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:3f:f6:6a:4d:6f:8e:63:a3:e5:cc:cf:e0:cb:d1:72:b7:
         12:b6:b4:0d:d0:58:5d:1d:66:86:dc:9a:60:58:fe:37:98:71:
         40:ee:9a:fd:c2:86:a4:5a:c0:2a:49:94:46:99:3a:ed:98:e2:
         fc:c3:d3:ac:88:10:5c:f0:18:79:74:8c:7d:a9:da:f6:11:58:
         be:7e:95:fb:9d:34:6a:77:23:d3:58:fa:96:b9:ee:8f:c3:f0:
         c0:43:af:76:77:a0:2a:fc:61:e7:1f:68:af:eb:8c:b8:87:41:
         61:90:d1:c6:15:80:be:b1:90:a5:04:03:d3:c9:63:87:54:11:
         68:1e:24:d8:24:98:5f:72:51:ed:67:82:ac:ea:9c:fe:91:2b:
         80:3e:1e:36:7c:b4:39:73:6b:59:70:54:5f:4e:3c:34:8e:75:
         fd:1c:02:41:49:d1:42:d3:78:c0:ac:dd:54:ac:4d:7f:94:31:
         ad:2d:16:be:84:aa:50:07:15:90:79:35:e0:37:9a:39:79:d5:
         3e:e4:18:b1:98:c1:01:bf:b9:1f:7b:73:53:e5:50:be:de:15:
         e0:72:a7:66:c5:57:10:e6:f8:be:75:01:f0:fb:42:79:34:30:
         94:13:ca:2c:2a:b9:7e:a6:96:a9:09:33:13:01:0d:41:4a:3c:
         f5:35:dc:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:56 2026 by rpki-client