Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a854068-a031-4953-a71f-68432e22bd4e.roa
File:                     7a854068-a031-4953-a71f-68432e22bd4e.roa (raw, json)
Hash identifier:          p5JUOwQj1j9zgiw0xUaH85PjkJCKYVYj/hXMYEqtQjc=
Subject key identifier:   24:69:3C:51:0C:DE:EA:5B:71:FD:B2:53:BF:D0:4A:ED:D4:A8:41:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22CC690651CD469686A7216BD7E449FBECE268
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a854068-a031-4953-a71f-68432e22bd4e.roa
Signing time:             Thu 23 Jul 2026 04:50:34 +0000
ROA not before:           Thu 23 Jul 2026 04:50:34 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c80::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cc:69:06:51:cd:46:96:86:a7:21:6b:d7:e4:49:fb:ec:e2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:50:34 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=7df0e762cd9b0bac8f53a8be0d12099d29806d26fc3c94920a1d37688a053a9a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:ce:b6:e7:2d:50:dc:4d:39:7f:53:ac:32:
                    0e:d5:d0:86:56:f3:a8:1d:fe:82:76:35:95:0a:76:
                    c2:f6:25:7b:00:81:85:1f:b9:64:b7:cf:a6:69:fb:
                    8e:df:81:59:2f:a1:13:b5:48:74:6b:b0:6a:70:d7:
                    46:40:b3:d5:ac:bc:be:8c:80:d5:47:dc:ae:fa:85:
                    89:39:0c:80:9f:dc:2c:8c:53:dc:f5:4f:9d:a2:3f:
                    d8:a9:a5:9c:0c:25:4d:ba:e3:46:8b:ad:99:03:28:
                    6b:02:49:5e:24:28:ba:ad:96:21:90:c3:02:6a:bf:
                    32:a8:50:a4:04:fd:f5:83:0f:d3:1b:66:8a:40:59:
                    b2:66:b9:76:75:e6:f0:6d:91:73:f4:b7:97:73:ab:
                    12:06:9e:2c:1d:d8:d4:15:8e:7e:f6:c3:df:d9:26:
                    8e:7c:3b:d7:91:ac:06:48:9e:96:a9:67:02:1d:61:
                    3e:72:5e:66:67:47:78:53:e3:bd:2d:14:0f:d6:9e:
                    9d:03:7c:dc:60:48:8a:1b:cb:24:99:4c:6b:69:c2:
                    2b:ef:02:8a:dc:90:65:d0:f7:a4:b8:dd:67:0f:26:
                    5f:12:eb:9a:e9:99:f7:ff:2e:93:f1:af:77:a2:67:
                    f0:b1:e5:46:17:c3:d4:58:ba:6d:c4:83:ec:ff:9b:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:3C:51:0C:DE:EA:5B:71:FD:B2:53:BF:D0:4A:ED:D4:A8:41:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a854068-a031-4953-a71f-68432e22bd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c80::/46

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:98:2a:00:24:2b:c0:e2:7e:d8:cb:12:71:a0:7a:87:46:
         ad:89:92:27:d6:ff:ac:53:aa:fd:2f:5f:13:e3:7a:4c:dd:96:
         94:f4:2a:05:8f:2d:d9:95:ec:41:f0:8e:3a:53:c9:cc:b4:45:
         4f:a5:4b:df:0d:d5:9e:11:81:b7:a5:f2:23:0b:41:d8:bd:db:
         29:b9:a4:f2:be:2c:3c:99:b7:c0:90:40:a7:28:ed:32:98:be:
         57:4c:9a:55:20:69:37:ff:ad:ea:48:1e:99:f1:67:30:41:49:
         0d:3b:8c:f7:61:fd:15:92:fe:ec:c9:42:0c:5c:0d:88:0b:3c:
         e1:3a:ab:01:d8:ed:44:c0:3c:26:c5:21:45:d9:a1:7c:c0:c9:
         c4:65:7d:ad:5a:9c:ca:0d:92:89:f0:11:8b:83:47:1b:a7:4d:
         38:b9:a6:5a:9a:07:ed:c7:d2:87:70:b0:41:91:8e:92:01:e3:
         a7:3d:e3:46:cb:ad:ad:28:2b:af:be:b5:cc:c9:7b:60:12:e5:
         fb:e0:ac:2a:73:aa:9f:f5:bb:71:77:44:a1:19:91:bc:14:98:
         04:b9:d4:39:77:06:9c:33:e9:e3:be:7f:bf:9e:41:42:a6:2d:
         44:ee:44:42:04:9e:36:d3:3e:0b:03:09:f3:b7:51:ac:5f:ce:
         1a:4c:ca:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:40 2026 by rpki-client