Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7b6dcc-e05a-4479-949d-d8d15ba1e8f8.roa
File:                     7b7b6dcc-e05a-4479-949d-d8d15ba1e8f8.roa (raw, json)
Hash identifier:          UBZAwVApSVOdvtEx1JdRrNLRLpdfh7xjp20lAwJLqWI=
Subject key identifier:   26:0A:C8:DD:FC:9C:37:8C:52:06:8B:23:89:74:32:74:EA:26:AE:6C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7071B6579FA44DA203577DCD9DF1907AB8FD8CA7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7b6dcc-e05a-4479-949d-d8d15ba1e8f8.roa
Signing time:             Thu 23 Jul 2026 08:51:03 +0000
ROA not before:           Thu 23 Jul 2026 08:51:03 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:365e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:71:b6:57:9f:a4:4d:a2:03:57:7d:cd:9d:f1:90:7a:b8:fd:8c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:51:03 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ec140007103890790efd9b1692f3cd101e25ade6be6f52d918c1586c9e6b945d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:02:18:5f:8a:48:2e:d9:8b:00:c5:eb:07:
                    1f:e5:74:44:93:a3:fd:4e:da:04:d4:b6:02:33:00:
                    46:2e:f8:8e:bf:f4:f0:cf:ea:aa:4e:a1:29:c3:b6:
                    7b:b0:26:7f:2e:f9:e0:31:bc:e7:c1:02:36:8d:a4:
                    65:0e:89:c0:fc:f8:46:04:40:4d:9b:7c:aa:09:ed:
                    f8:be:4f:cd:4c:a6:14:42:44:f6:ee:78:5f:d7:af:
                    d4:55:78:45:48:46:09:7d:6d:cd:f5:fb:f0:ad:73:
                    20:9c:5c:72:93:8e:dc:37:bf:f1:3d:44:75:d3:81:
                    6c:a5:9c:29:dc:87:aa:55:c8:13:4f:9e:03:ad:c5:
                    e5:8b:01:35:d3:e6:64:3c:a7:19:ed:15:21:63:0e:
                    22:b1:42:8d:1b:27:8d:8d:31:d0:fa:17:82:73:ab:
                    40:b3:37:c0:ae:2d:69:be:a2:6b:e4:6d:e9:61:f3:
                    58:ef:05:74:81:18:ae:57:f5:2a:95:97:c2:7a:77:
                    35:23:6d:8b:ac:78:4b:ac:91:3e:85:6c:d2:46:e3:
                    b8:49:19:c8:87:a8:47:f3:a3:03:93:a3:46:aa:5f:
                    80:3b:6b:cd:c7:d9:f1:cc:77:b2:d4:1c:d0:9a:31:
                    c4:1e:d7:f4:23:e0:6d:24:5c:72:54:f0:7c:57:3c:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:C8:DD:FC:9C:37:8C:52:06:8B:23:89:74:32:74:EA:26:AE:6C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7b7b6dcc-e05a-4479-949d-d8d15ba1e8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:365e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:66:57:d0:ae:e1:b1:3d:1c:88:92:df:4c:94:77:d5:a6:
         af:b4:9f:0a:88:2e:2e:eb:9f:4b:4a:f3:b8:cc:8d:7f:dd:51:
         45:16:51:b7:5b:c8:c9:7e:95:8a:b2:53:17:ad:30:91:64:81:
         57:72:9e:72:72:80:bc:98:4c:41:de:39:10:ca:6b:df:91:84:
         b5:63:58:ea:b7:21:32:be:85:e6:d9:6d:7e:d3:af:c2:ca:df:
         50:01:64:20:da:e8:6a:c2:fd:07:b5:29:e2:f4:6d:40:a1:9c:
         26:5f:60:92:20:c2:02:67:db:2f:80:14:59:fb:de:75:90:ad:
         da:c7:91:b0:db:ac:b0:86:bb:91:67:0d:d9:53:e5:c0:e9:cc:
         9e:a6:ea:ed:b8:ad:7c:05:be:26:a8:d4:93:b4:31:14:cd:b1:
         fb:17:2b:34:38:f3:60:49:a9:24:26:6f:93:e1:5a:e7:9f:08:
         e4:86:ae:23:74:5d:a3:7b:3a:cb:98:4c:c4:5d:3f:d6:bc:e8:
         dc:31:f3:f0:26:9f:4a:b1:98:0d:b3:55:22:f0:e6:6f:e9:2c:
         dd:b4:26:53:f3:e3:6c:69:96:08:fe:37:03:01:68:ff:5a:6c:
         ae:37:6d:9b:2d:7f:75:14:d7:e6:d7:f2:59:1a:83:1c:55:e4:
         86:22:75:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:24 2026 by rpki-client