Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f0825a9-0757-47ea-9740-6a2e0f959ea0.roa
File:                     6f0825a9-0757-47ea-9740-6a2e0f959ea0.roa (raw, json)
Hash identifier:          4GRg97T60RZJyf0lUbKFYKwd2GQDpWKtVWKK/7mI3os=
Subject key identifier:   99:D5:0D:F4:A3:5A:7C:36:F7:DD:77:0C:48:EC:64:04:89:AE:66:46
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72C589661568ABE6AC487214F76CBE0F87CA5086
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f0825a9-0757-47ea-9740-6a2e0f959ea0.roa
Signing time:             Thu 23 Jul 2026 04:51:08 +0000
ROA not before:           Thu 23 Jul 2026 04:51:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ed6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:89:66:15:68:ab:e6:ac:48:72:14:f7:6c:be:0f:87:ca:50:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:51:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=96414ff96697a8a82b6acd95849608c82a3da0da800cef3d512e23b07cec6846, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bb:00:13:58:73:f1:fa:60:41:2d:f5:c1:a0:
                    2b:36:5b:4a:1f:7f:2d:59:78:d2:04:48:69:3a:5b:
                    9b:b5:fd:ca:0c:16:2a:33:44:bd:c9:ca:0a:19:d3:
                    7f:3f:8e:2b:dc:03:97:6d:52:d8:89:12:e1:fb:dc:
                    1e:7f:a9:91:10:0b:43:5a:10:6f:f6:f3:dc:0a:5b:
                    3a:ec:92:39:6f:5e:67:2b:db:39:99:a3:5e:d9:ab:
                    ba:1f:ca:43:ba:a2:de:3a:e5:e8:f6:06:0f:d0:96:
                    d7:32:82:4d:67:45:e9:b1:03:5f:54:d8:a3:5c:cb:
                    49:d2:80:12:0e:e7:dc:97:07:e0:61:bd:03:e7:2e:
                    41:e4:ff:56:ae:89:ae:f8:fa:07:69:8e:64:25:c0:
                    4f:ea:12:ab:9a:39:e4:a8:20:0e:8a:05:cb:c5:ae:
                    ef:31:d8:73:08:9b:f0:de:46:45:50:3b:92:2f:1d:
                    9a:30:36:73:db:28:5c:ce:e0:91:5e:9f:47:44:c2:
                    55:bc:89:2f:0a:7c:ae:8d:bb:e3:bf:a0:19:96:d5:
                    ff:21:29:84:43:78:aa:93:64:77:19:8c:5b:ac:af:
                    8d:b2:9c:00:50:34:b1:df:a8:63:77:80:99:32:16:
                    df:f9:1e:b4:e9:11:87:ef:82:c6:4c:14:f2:c8:91:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:0D:F4:A3:5A:7C:36:F7:DD:77:0C:48:EC:64:04:89:AE:66:46
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f0825a9-0757-47ea-9740-6a2e0f959ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ed6::/47

    Signature Algorithm: sha256WithRSAEncryption
         b5:fd:0a:13:3a:8c:71:ae:8f:6e:6e:95:de:e6:55:89:04:0d:
         ad:16:cd:49:b9:ce:c9:23:9f:f9:7d:0d:d5:b3:0b:06:63:56:
         d8:dc:9d:f6:b1:7d:82:c5:3f:03:b1:9d:21:c4:b5:8e:fd:b0:
         a4:2d:e4:11:0b:d5:13:96:87:d5:5f:5a:08:b4:b9:3c:1f:ff:
         0d:3e:ca:fe:b2:56:1b:49:98:2e:f8:2d:83:86:e2:7d:45:de:
         2d:f4:80:11:4a:84:93:f9:a0:75:06:c7:11:16:15:90:6f:69:
         f3:fd:68:c3:54:7c:a2:f8:88:70:00:e3:db:34:b4:27:76:1a:
         9a:06:16:5a:ea:21:ea:68:f3:db:9f:f6:8d:a6:25:04:d6:72:
         24:fc:1a:86:03:31:56:71:3a:7f:91:77:e9:56:d5:12:30:cb:
         cc:8c:f0:f0:05:ba:e2:41:2a:c9:43:93:7a:20:63:d6:dd:16:
         cd:fc:72:d5:8d:c8:92:73:5f:f3:2e:04:8e:3f:d3:2c:e2:17:
         2a:39:45:71:d1:25:63:96:ef:4e:8e:46:27:1c:f0:62:99:a0:
         da:6d:f9:c7:aa:73:7b:5b:4b:51:e3:f0:1b:4c:cb:23:6c:db:
         a4:43:67:65:82:d3:07:20:48:c7:1d:43:ad:12:ea:7c:f6:54:
         c1:42:04:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:06 2026 by rpki-client