Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8078e42b-3f1e-41c1-9dbf-424f2785d2e2.roa
File:                     8078e42b-3f1e-41c1-9dbf-424f2785d2e2.roa (raw, json)
Hash identifier:          zhgfGUyLyiI7tceeHGmrhinREb28jIm7fnsUMzvDzsE=
Subject key identifier:   45:73:BE:40:A9:8B:79:F3:04:C4:5A:42:88:1C:D2:B6:26:B3:F1:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6EFCC6DC2905DBA6CAC1156F0EA2EC90D2E3EF55
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8078e42b-3f1e-41c1-9dbf-424f2785d2e2.roa
Signing time:             Thu 23 Jul 2026 13:21:55 +0000
ROA not before:           Thu 23 Jul 2026 13:21:55 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fc:c6:dc:29:05:db:a6:ca:c1:15:6f:0e:a2:ec:90:d2:e3:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:21:55 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=94ddf06d5688f35431dc1ac04cedd0c47a9731254080c9266a693592d8cb9062, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:07:3d:18:5a:b9:90:70:b6:46:ae:18:78:4a:
                    d2:cb:55:5b:bd:8e:af:fd:09:bc:6c:09:a9:81:6c:
                    f4:01:d7:bd:1b:14:b4:ae:f1:fc:cd:28:13:dc:73:
                    2d:4d:63:0f:9a:8f:b4:ab:57:29:fa:ec:d6:1f:c9:
                    e9:e9:6e:3c:9c:5e:6d:10:d5:bb:6c:40:2f:f4:a8:
                    d1:8f:23:4e:ac:1e:84:4a:10:7c:d5:e4:d6:2d:e3:
                    77:a6:b1:0c:9d:4a:af:96:96:a0:bb:47:57:a3:f4:
                    5c:5b:b2:00:2f:59:21:89:69:b9:0b:f7:70:64:14:
                    d8:c4:5a:24:d2:72:8d:e8:87:85:ec:75:a5:be:43:
                    c7:8f:52:b8:7a:97:55:72:97:34:ff:45:8c:38:ba:
                    10:52:2c:71:1f:79:cf:22:8a:95:13:24:fe:ae:99:
                    2f:81:24:6c:82:07:fa:1e:16:de:d4:6c:d6:1b:14:
                    df:09:7a:4b:17:e4:34:85:05:7c:c2:ee:a2:74:b4:
                    ae:0a:d3:b5:3a:98:bd:0f:36:61:79:d4:c6:7d:c6:
                    07:8b:5e:50:24:97:de:26:c9:76:37:bc:a2:2e:30:
                    01:9e:41:55:10:38:ac:83:17:9f:97:e8:96:73:18:
                    5b:24:18:1b:40:c5:c2:0e:90:9d:19:d6:50:4b:54:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:73:BE:40:A9:8B:79:F3:04:C4:5A:42:88:1C:D2:B6:26:B3:F1:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8078e42b-3f1e-41c1-9dbf-424f2785d2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f4::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:d4:e0:01:3b:83:c7:71:e8:33:ec:ca:1c:b6:81:d9:8e:
         53:2f:2a:5d:6f:65:ce:ca:19:4f:d2:20:89:6a:ef:b2:61:cc:
         02:fd:13:13:8c:3f:5d:f0:62:31:6e:32:c0:4e:73:24:96:a5:
         7f:52:a8:7a:bc:fe:b4:a5:4b:40:2d:a3:63:fe:23:60:1a:07:
         fb:4e:d8:17:a0:48:df:d9:ca:3e:80:78:71:26:45:05:00:2e:
         03:04:61:0d:62:3f:c0:41:19:9f:85:5e:28:e2:e8:e2:1c:1b:
         bd:c9:9b:a2:d2:5a:dc:d5:13:0b:a6:fc:cb:78:26:79:87:29:
         9f:f3:23:ed:59:63:d2:30:21:6f:36:d8:f7:6f:06:db:bd:41:
         a1:9b:c1:5c:47:ee:c7:7c:20:a2:77:d1:aa:41:d6:69:43:84:
         b2:f3:85:b3:14:05:47:4b:a4:76:67:de:6e:c6:0c:23:ee:05:
         64:fa:00:87:7d:64:6e:45:c5:30:d7:df:8c:01:61:d5:c2:6a:
         12:ee:57:57:d1:4f:d9:7b:c7:dd:13:95:c2:49:b9:dd:16:d3:
         54:30:b2:34:f4:54:d9:02:95:14:9e:47:7b:4e:81:ee:33:b1:
         7e:06:c6:bb:e1:91:10:7c:32:3f:65:30:23:3d:de:da:aa:f9:
         60:4d:54:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:52 2026 by rpki-client