Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75e7bd9a-e082-4a0e-abc0-e933d83decd1.roa
File:                     75e7bd9a-e082-4a0e-abc0-e933d83decd1.roa (raw, json)
Hash identifier:          KNThJwwhb3BeGw1iO63sxN1W/z9QCD+uESQmBCPYiqw=
Subject key identifier:   04:CF:05:AD:F4:4A:CF:75:F5:33:D7:76:A9:DC:68:A2:B3:B8:BB:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       70D7E55D7DD9C7C8744BC491045596019776DEEA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75e7bd9a-e082-4a0e-abc0-e933d83decd1.roa
Signing time:             Wed 22 Jul 2026 02:31:07 +0000
ROA not before:           Wed 22 Jul 2026 02:31:07 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e2c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:e5:5d:7d:d9:c7:c8:74:4b:c4:91:04:55:96:01:97:76:de:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:31:07 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=0a07bdb2cd147f94241445e417c7fbb7563c343d931398572c0e5d18080d37fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:60:26:70:b0:81:54:0e:f1:b4:84:3a:03:
                    dd:88:d5:11:cc:2e:85:f2:29:2e:ea:14:6e:69:f8:
                    fd:0b:2a:48:20:8b:3e:0b:90:0e:06:82:18:e7:15:
                    d2:cb:c8:ff:0b:ba:0e:ee:9d:02:e5:35:0a:b2:12:
                    6a:55:3d:34:f4:51:1e:7e:99:7d:72:93:43:28:b7:
                    70:5c:05:02:6d:be:22:2c:cc:6d:a8:98:52:b9:28:
                    08:43:11:90:4e:e7:80:b5:d0:f6:1b:4a:39:ee:fd:
                    0b:ec:94:3a:60:c2:de:c9:52:0f:03:ce:df:15:28:
                    2e:6f:95:b0:36:df:c1:f9:19:49:26:c1:9c:8e:54:
                    4d:b8:d7:d1:35:34:d6:4f:10:e6:5c:ba:ba:1d:72:
                    5f:81:4f:80:2e:8f:bd:25:2c:83:46:10:fb:dd:9d:
                    04:29:7a:9f:8c:4f:18:64:1c:6c:f0:9e:b5:88:df:
                    52:00:6a:7e:73:f7:50:92:c2:96:0c:63:9d:a4:e7:
                    ae:ea:ac:ab:2a:0e:47:85:a7:01:60:f7:84:9b:3a:
                    cd:81:ea:85:10:97:27:5f:74:19:f3:1e:03:f0:fc:
                    43:e2:29:5c:57:91:db:ea:1b:19:4a:3e:80:21:25:
                    c6:13:5d:d2:6e:9b:a7:ba:de:7d:94:6e:a6:48:d2:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CF:05:AD:F4:4A:CF:75:F5:33:D7:76:A9:DC:68:A2:B3:B8:BB:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75e7bd9a-e082-4a0e-abc0-e933d83decd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e2c::/47

    Signature Algorithm: sha256WithRSAEncryption
         34:86:1c:56:62:90:81:50:45:4e:32:6d:dc:b5:2c:3e:c0:14:
         f3:78:a3:75:1c:e2:2f:d0:aa:f0:f5:a4:a3:d7:ad:15:9a:1c:
         ff:a3:11:d2:2e:57:2c:ee:f8:76:26:d1:f9:cd:43:25:b2:e9:
         7e:f4:fb:26:57:9a:20:c2:46:ab:60:3d:60:c6:f6:20:cc:cb:
         59:eb:5d:3d:66:7c:fe:72:5a:81:ee:5f:eb:f8:eb:f8:c8:1c:
         57:ef:1c:c8:2e:fd:60:bd:3b:c9:a9:3e:8b:19:2a:de:b5:79:
         d2:c1:33:af:7e:bf:12:32:22:f3:98:a1:e4:bb:df:c5:f7:d9:
         ee:e8:e2:6f:e7:40:fa:1e:c6:19:c9:78:9b:73:98:36:52:fd:
         a3:7b:b5:ee:c2:90:09:68:a5:cf:74:a3:28:42:12:17:23:1e:
         0e:06:e5:33:f3:5b:95:34:a7:b4:9a:a3:7f:57:6a:42:8e:c2:
         da:96:f5:b2:fb:4e:bd:d1:63:4f:c2:99:14:4a:13:99:92:f8:
         b5:94:f8:22:e2:a6:c6:4b:c9:68:a7:83:65:20:b9:11:bb:a0:
         34:ed:e1:eb:11:0e:d1:39:0e:35:b5:48:92:7c:de:78:83:ae:
         8e:c7:c2:89:c3:66:53:f8:cc:9d:a7:2e:03:53:04:59:80:8b:
         b5:bd:12:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:13:16 2026 by rpki-client