Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa
File:                     7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa (raw, json)
Hash identifier:          tTSmNRayTOpMXdvDhda6QJn2mkWRHCa6sDSb0AciIPo=
Subject key identifier:   7C:DB:18:08:AB:24:8B:EF:6C:49:F4:EE:B9:05:2C:EF:38:C1:CB:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E896952BD821BE1C73344313C5A2FCA031F4BDB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa
Signing time:             Thu 23 Jul 2026 13:32:03 +0000
ROA not before:           Thu 23 Jul 2026 13:32:03 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3780::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:69:52:bd:82:1b:e1:c7:33:44:31:3c:5a:2f:ca:03:1f:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:32:03 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=a2a725c8795add263b35eae76aee008d5e40a3195c54285d07664b37d4ffb91d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:54:c8:64:46:6e:00:52:16:e4:7d:93:15:
                    ef:44:c7:c6:fa:a1:48:49:f2:b9:96:f4:29:22:95:
                    1e:d6:1f:a2:95:14:ae:8f:9c:68:f6:91:20:a2:12:
                    7f:59:0d:15:94:ed:2e:aa:b2:04:df:5f:3c:13:04:
                    23:14:72:44:7e:c4:9e:f2:b8:2c:2e:db:aa:c8:c5:
                    74:39:75:9c:68:c9:bb:d8:a8:62:5d:3b:3e:a8:fc:
                    ca:49:29:95:cd:78:1b:f7:c2:5f:60:3d:4d:9f:5c:
                    b7:aa:bb:c5:43:b1:66:34:fe:32:18:0d:c5:a1:97:
                    b3:50:0a:2e:58:bb:c8:c2:ba:b6:64:5b:ec:d6:49:
                    cf:98:68:d4:80:14:e9:9e:62:2e:42:af:33:c5:7c:
                    74:d4:10:7f:b8:ae:f1:10:7d:cc:88:92:c9:29:43:
                    df:97:d2:c9:ef:42:42:a5:86:24:bc:d0:87:d8:01:
                    34:ba:dd:a1:aa:9f:4e:e0:de:ca:65:06:b4:d1:d1:
                    61:ae:6a:3b:81:2b:ff:98:5b:1a:dd:3b:cd:91:be:
                    da:a8:cc:b8:95:f2:08:42:98:70:53:5c:aa:e0:e8:
                    3e:cf:ab:f9:3d:c3:de:91:3a:34:21:a5:2f:d6:2b:
                    84:6c:7a:93:ef:4e:af:6e:35:af:79:47:86:a6:eb:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:18:08:AB:24:8B:EF:6C:49:F4:EE:B9:05:2C:EF:38:C1:CB:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3780::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:c2:6b:27:93:55:9c:3d:5d:e8:56:c7:ff:f9:91:06:68:
         2c:74:f3:14:fe:e5:60:57:77:01:7d:03:f5:8e:13:a0:fa:74:
         f5:f2:87:c9:d7:ba:3c:96:a8:77:88:59:3a:34:c6:01:21:d8:
         7a:e1:17:46:ad:b5:b9:92:f8:1a:00:ef:d2:c7:49:51:f3:a2:
         86:4e:7b:58:37:78:92:19:8b:73:64:cb:8f:60:6d:ea:c4:93:
         d7:62:47:06:91:35:46:45:b3:7a:06:ee:2a:e5:eb:73:a5:57:
         90:86:58:0b:77:a0:8d:32:d8:32:22:3d:7a:c3:6b:7b:c6:6d:
         96:ef:a7:2b:39:c4:b8:dd:2e:6a:d3:0c:a5:dc:fe:bd:13:da:
         ba:72:15:c6:74:de:1d:fa:f6:0d:1f:ad:ca:2b:80:a5:7c:2a:
         a7:d5:e2:39:40:4d:f4:7d:e4:3b:0b:19:6c:a3:b3:6e:26:9a:
         45:22:29:56:c3:e3:ac:e1:62:fe:8d:1a:6f:36:70:19:af:b6:
         93:50:b3:f3:57:40:38:a6:d9:56:b0:47:84:9b:44:3f:bd:bd:
         7d:fb:f4:cd:ad:4d:5c:23:ec:0e:42:00:b6:e5:06:06:b5:a0:
         b1:1b:6f:b6:92:86:03:ed:51:1b:ca:61:d6:cf:3a:30:81:76:
         b0:9f:8b:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:34:29 2026 by rpki-client