Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6536b31d-25a9-450a-8160-d42d5ee2924c.roa
File:                     6536b31d-25a9-450a-8160-d42d5ee2924c.roa (raw, json)
Hash identifier:          OEwXhXMNKrhlLOEIPR9yaMlxGQl6XBBf5NbQ8xOfHU4=
Subject key identifier:   23:69:66:49:D5:91:64:0C:8F:3C:53:BB:8A:77:0F:F3:FA:9A:90:6B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       24B4E6E17B1BD6E7CD525328B3DC7DC0E696E73E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6536b31d-25a9-450a-8160-d42d5ee2924c.roa
Signing time:             Thu 23 Jul 2026 04:31:51 +0000
ROA not before:           Thu 23 Jul 2026 04:31:51 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:390e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b4:e6:e1:7b:1b:d6:e7:cd:52:53:28:b3:dc:7d:c0:e6:96:e7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:31:51 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0d7f03aaca26ad81d544cc03d73a26a8bab31d7001f45b854f3e623fdf4c651c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:8a:05:61:1c:c7:fe:28:16:80:06:fa:30:
                    6c:ce:d8:7e:38:98:38:aa:7c:df:b4:ed:7a:6b:f5:
                    ca:f8:a5:dc:f4:c4:40:df:ef:65:b9:be:f3:58:60:
                    26:b5:e9:4c:39:8e:59:3a:01:a9:c3:ab:14:bc:02:
                    37:f8:59:d5:42:d5:0c:c5:5d:ec:ac:02:d1:0a:3d:
                    a8:0a:53:4f:ea:86:92:09:07:3e:f2:21:2e:3a:88:
                    bd:28:8d:00:c8:9e:dc:12:f8:74:69:cc:8d:25:ec:
                    9b:82:b9:64:c3:f4:8e:92:f8:ee:10:5c:14:bd:e8:
                    0b:ba:69:cb:2b:9d:4f:63:01:ca:42:87:ab:90:a2:
                    33:21:2d:79:12:54:6a:70:6e:0c:3f:08:ea:af:40:
                    bb:2c:ca:a8:a9:cd:fa:90:6e:f6:bf:c5:f6:78:8d:
                    d7:33:c1:3c:bd:da:7f:70:13:2b:62:fc:cd:af:21:
                    35:4e:1a:30:4e:56:7f:2c:38:0a:5c:64:78:13:8a:
                    2f:d1:3f:c8:77:f2:5f:d9:da:a6:15:81:53:d1:e7:
                    b4:18:5e:77:8d:c5:4e:04:bb:7b:49:ff:44:bb:64:
                    44:a3:4b:ac:26:16:5b:ff:58:8f:82:d5:7a:96:eb:
                    0a:8c:75:da:45:23:38:a0:70:51:63:d1:3a:d3:93:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:66:49:D5:91:64:0C:8F:3C:53:BB:8A:77:0F:F3:FA:9A:90:6B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6536b31d-25a9-450a-8160-d42d5ee2924c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:390e::/47

    Signature Algorithm: sha256WithRSAEncryption
         47:38:a5:04:e7:52:e1:2b:31:c1:56:0b:68:de:c4:71:cc:ae:
         ab:8d:37:05:ca:e6:bf:87:4c:54:c6:87:19:e0:7c:18:14:7a:
         d3:f0:df:2a:4d:2d:73:88:08:93:17:f8:04:d6:77:49:55:38:
         8e:84:df:b3:e0:74:ef:d6:bf:0e:23:a6:8b:70:91:08:f3:d3:
         dc:47:cd:8b:25:bf:81:7e:29:84:52:b8:4c:26:01:2d:32:6f:
         0b:ab:ba:70:f5:85:1b:af:a9:23:c2:55:59:12:df:da:56:da:
         8e:ce:b8:cb:df:19:9a:83:9d:7b:0b:ab:40:ff:69:88:d3:fc:
         20:4d:c0:c0:e4:94:e0:ec:07:0b:ff:3b:a9:8b:3f:83:a1:53:
         a6:b0:8d:75:f8:b4:33:99:79:9d:99:96:eb:e4:35:5d:0f:21:
         21:3f:94:22:f9:e3:60:8f:05:5a:00:81:38:93:6c:a0:1b:fb:
         33:5c:3d:4c:0b:12:82:eb:aa:b7:20:10:48:e4:b7:86:b1:f5:
         fa:dc:50:ae:94:22:0e:80:c4:c6:4b:52:af:04:63:cc:f8:48:
         42:db:c1:a7:0b:6f:d3:33:ee:cf:97:58:5a:e7:92:a3:e7:11:
         5a:99:2c:75:1f:10:ce:01:c4:a5:32:01:90:0b:74:3d:81:47:
         3d:9b:6a:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:30 2026 by rpki-client