Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/678c7a6d-83a3-4fe3-97ef-f3a47546f55b.roa
File:                     678c7a6d-83a3-4fe3-97ef-f3a47546f55b.roa (raw, json)
Hash identifier:          I2nuUAE76VP/e0308fzB9SjKZ7UV2affDzDE8yYqt94=
Subject key identifier:   71:E7:2D:7D:87:B6:8E:91:9C:8C:9C:6A:D2:FE:19:C8:A5:3E:F2:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01F00F6F1994F1D79F05BF171EABF897B4790797
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/678c7a6d-83a3-4fe3-97ef-f3a47546f55b.roa
Signing time:             Thu 23 Jul 2026 02:50:06 +0000
ROA not before:           Thu 23 Jul 2026 02:50:06 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f34::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:0f:6f:19:94:f1:d7:9f:05:bf:17:1e:ab:f8:97:b4:79:07:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:50:06 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ab0118912ea50be4e6310b5f1fe8c3b7c4a85f88e0a22e98806c474e46c7a100, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:b1:18:95:60:0f:a3:2f:87:91:e4:26:35:
                    5f:68:b3:2b:dd:c3:64:bd:ae:01:23:e7:1e:6a:91:
                    85:6b:51:7d:43:0f:f2:0b:5e:90:f5:aa:5c:69:c9:
                    ad:63:18:3d:ed:6a:e1:46:5b:08:b8:89:84:6e:1b:
                    8d:df:f9:e5:10:44:3a:f4:43:12:30:df:f9:52:51:
                    7d:aa:02:dd:8d:4f:0f:ba:46:43:2f:47:fa:68:98:
                    05:b8:89:10:1c:9a:55:27:10:88:31:1a:ac:12:7d:
                    ab:78:ee:06:c7:45:7e:aa:88:f2:ef:2b:e3:f8:78:
                    31:5d:01:21:c4:bd:f3:8a:e6:73:02:80:89:84:46:
                    61:3d:0b:1f:bd:95:82:a3:95:79:29:55:5c:a3:59:
                    23:06:fa:f6:e1:5f:75:ec:93:ab:ee:fe:39:5e:9e:
                    e0:d3:95:cd:88:80:16:4a:ea:f5:25:28:71:2a:97:
                    84:e2:97:cd:13:11:31:12:04:44:4c:fc:78:3e:98:
                    15:00:e7:5d:31:d0:4b:9b:91:8e:67:69:cb:39:59:
                    ca:06:f3:59:cb:7d:38:c2:40:f8:7f:d4:22:01:d7:
                    41:e1:b6:b7:22:91:30:95:14:94:86:ee:8d:c9:36:
                    5f:29:6d:74:b7:db:bc:35:6b:32:b6:97:1d:59:8d:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:2D:7D:87:B6:8E:91:9C:8C:9C:6A:D2:FE:19:C8:A5:3E:F2:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/678c7a6d-83a3-4fe3-97ef-f3a47546f55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f34::/47

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:f2:34:a4:4b:eb:f2:d9:31:3f:24:52:21:fb:6b:7d:d1:
         a9:60:e6:26:f6:f8:01:ec:8e:ca:59:2f:30:03:86:b7:90:02:
         28:7d:cd:83:1c:3b:46:8a:fd:b0:7f:db:de:88:d4:87:25:6a:
         ce:17:27:c5:74:c3:9b:50:b3:0c:77:9d:5b:5b:fb:3f:c0:64:
         4f:90:5a:78:59:a5:2d:9d:cd:8f:71:18:29:70:1a:23:a8:b6:
         14:f0:c7:14:3f:a2:bd:7f:d0:17:da:ea:55:46:f7:f7:a1:d8:
         a7:69:89:36:b8:a7:3f:d3:78:df:7f:71:b9:1d:40:8a:f5:4a:
         20:e0:69:3b:88:45:be:52:38:59:78:0b:72:c5:9d:70:34:22:
         7d:e7:72:8b:ae:8b:5e:ef:f0:ca:15:43:87:b6:a3:5d:43:21:
         a2:ae:c8:50:18:ee:4b:21:df:ae:ed:af:3a:29:41:41:2c:ae:
         c7:db:f8:f2:3e:db:e9:8f:9b:04:2c:ca:e9:9b:1c:8e:bb:2a:
         7f:7a:8f:76:d5:30:9b:99:bc:35:13:ce:e2:04:bb:b9:3c:39:
         4f:65:b0:8b:ab:7f:98:0a:6e:9b:65:5e:58:01:5b:21:22:14:
         54:c2:1a:95:f4:97:4e:67:ca:bb:02:e4:2e:e2:96:8d:c4:5f:
         db:c8:a0:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:39 2026 by rpki-client