Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78caa650-5d9e-4d8d-b565-2efdcbfed90e.roa
File:                     78caa650-5d9e-4d8d-b565-2efdcbfed90e.roa (raw, json)
Hash identifier:          kjZSsZy8ECw7dOL/HqDFDBWShJTMkRcxoGF/pH0lBco=
Subject key identifier:   74:D9:A5:F5:06:4D:4C:03:28:52:B2:EB:4A:F3:99:C6:44:8E:F0:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       51F5245B4B39B59E3A2E8117F56ECF6697155B15
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78caa650-5d9e-4d8d-b565-2efdcbfed90e.roa
Signing time:             Thu 23 Jul 2026 11:00:59 +0000
ROA not before:           Thu 23 Jul 2026 11:00:59 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3708::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:24:5b:4b:39:b5:9e:3a:2e:81:17:f5:6e:cf:66:97:15:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:00:59 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c933c1cc13bab80f8d18d7cbd656aa3496f2156b99dd741c76857ea5709c5753, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:fb:62:73:42:18:c4:e2:c2:1d:5a:98:ca:
                    b9:0e:40:e5:83:f7:50:ad:78:05:a0:63:2f:46:36:
                    99:4e:dd:09:92:fb:35:26:ec:72:7b:aa:57:28:7d:
                    2a:cd:83:bf:fa:ca:4b:b7:cf:f1:19:e5:7e:6a:91:
                    2f:78:ee:4a:b8:a8:cf:f5:ea:e7:e1:e0:60:dc:c8:
                    ad:ff:fb:26:2d:32:06:fd:a9:76:c9:e7:8f:e9:66:
                    d8:1a:82:30:30:c5:14:98:32:5c:87:3b:b2:53:8d:
                    60:9c:65:c1:e0:56:f0:29:f9:50:4c:e5:89:38:7c:
                    a4:af:d1:27:49:b6:5a:b2:2e:4a:9e:63:d7:ae:9c:
                    b7:3c:09:49:3c:f0:81:53:d0:3e:53:3f:69:9d:38:
                    65:4f:e9:34:dc:6e:10:81:01:24:11:5a:64:e0:db:
                    b0:68:2a:1f:21:9d:eb:e0:b1:aa:f7:4d:4f:af:c6:
                    5f:fa:27:ce:89:1c:04:db:7c:ed:39:40:80:92:57:
                    92:be:0d:ca:a1:82:5a:81:15:9f:b5:01:51:17:cd:
                    f4:fe:a3:b7:7d:ec:7f:f1:df:85:10:f1:66:32:2b:
                    19:53:eb:3e:77:1c:83:60:18:bc:6a:fd:df:b3:63:
                    cd:f4:16:13:f7:2d:8e:69:36:36:1c:62:a9:c5:14:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:A5:F5:06:4D:4C:03:28:52:B2:EB:4A:F3:99:C6:44:8E:F0:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78caa650-5d9e-4d8d-b565-2efdcbfed90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3708::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:01:a7:9e:90:e1:48:59:2b:c4:a8:fd:f8:9c:6a:b1:f0:
         c4:19:66:16:14:b3:70:e3:c3:61:0d:e9:d6:54:cb:56:d9:24:
         9c:38:ca:a6:f7:3f:7f:34:15:80:4c:3a:bb:3f:04:92:f0:a4:
         af:c3:64:aa:40:45:a5:af:f3:a0:f6:28:12:2d:83:33:1e:81:
         82:f1:7b:58:c5:f3:04:8b:0e:2e:04:cf:3e:a1:04:ea:e9:8f:
         69:4e:72:1d:a4:f3:f4:41:17:86:03:b7:6f:ca:83:b6:2a:70:
         9e:36:0e:15:fd:6f:c7:68:88:31:a7:fa:96:a9:e2:fc:d0:9a:
         36:27:bb:11:7d:eb:c0:bc:ae:b7:a4:44:11:85:32:b9:39:0e:
         fb:eb:40:df:ff:a8:f8:03:84:83:21:bd:c3:a6:77:c1:4c:b1:
         b3:83:67:8f:5a:d7:30:72:a8:19:3b:60:e2:3d:73:4c:10:f7:
         bc:d2:aa:44:61:d5:45:e4:4c:02:ab:bb:56:a7:4f:7c:2f:03:
         a9:54:d8:ad:f2:12:54:2c:5b:e9:ff:18:4d:7d:31:3e:9b:f1:
         51:c8:f5:6c:ab:19:ca:fb:a1:90:14:e7:ab:52:64:24:56:a1:
         53:65:80:85:ee:8d:36:0e:db:53:84:65:14:f2:11:5c:d8:20:
         24:4c:47:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:56 2026 by rpki-client