Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823d1e91-684b-4aea-9667-66b0a01ca60c.roa
File:                     823d1e91-684b-4aea-9667-66b0a01ca60c.roa (raw, json)
Hash identifier:          wq2v6HnTQWZNF2lILG0OkhGQ4HBDIJ7oKgPTSYNG+Pc=
Subject key identifier:   D6:AA:66:C0:22:73:A9:31:C0:82:91:AE:C2:4E:D5:1C:C6:9B:82:8E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       07132211F0E219B0392C6371353479EB901830D4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823d1e91-684b-4aea-9667-66b0a01ca60c.roa
Signing time:             Thu 23 Jul 2026 13:02:13 +0000
ROA not before:           Thu 23 Jul 2026 13:02:13 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a8c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:13:22:11:f0:e2:19:b0:39:2c:63:71:35:34:79:eb:90:18:30:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:02:13 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fa05361c5d863d780ab0b097d4104fd3ef0ed3d00c373a2b995d224c4dad43a3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:60:09:8f:67:4e:6b:46:5b:86:43:bc:14:
                    4f:a6:7c:a8:c3:71:bd:f3:fa:64:d9:2f:58:dc:db:
                    58:cc:7d:21:d4:ae:63:e7:44:13:48:25:bc:4c:74:
                    91:73:71:2d:c5:ef:33:d1:c7:4e:6b:90:b3:0e:94:
                    69:79:20:b8:72:17:dd:f8:d9:c8:e3:3b:fd:be:5a:
                    4c:f1:a7:19:98:85:1a:cf:36:a0:dc:b9:0c:16:d5:
                    2f:92:05:60:ed:99:4f:e3:1d:21:50:83:9e:70:60:
                    eb:75:2d:b8:93:a1:ea:b6:07:cf:b3:44:1d:bb:48:
                    3d:2c:d8:b3:1d:2a:a4:e6:b5:b4:12:1f:12:55:3f:
                    54:77:0a:25:da:62:1d:39:e2:e4:5e:9e:0c:b5:76:
                    25:6a:47:27:86:2f:9a:2e:b5:7b:be:84:74:bc:55:
                    49:7c:36:dd:45:b2:dc:c1:3a:b8:b8:51:f8:d6:6a:
                    bf:97:f0:6e:2e:fb:bf:c3:a5:75:71:20:f8:fd:c1:
                    40:32:ae:51:95:d4:07:71:66:ce:8f:00:1f:b9:6c:
                    4e:20:76:4d:3a:ff:18:c3:1f:8e:db:4f:ca:8b:47:
                    55:bd:5f:9c:1f:61:47:56:d3:c9:b6:c9:7f:65:62:
                    37:05:0c:63:64:a7:1a:cb:88:c3:e0:a4:62:19:28:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:66:C0:22:73:A9:31:C0:82:91:AE:C2:4E:D5:1C:C6:9B:82:8E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823d1e91-684b-4aea-9667-66b0a01ca60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a8c::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:61:53:0e:48:13:73:0b:23:8d:8f:ae:f3:4f:32:ac:fc:
         bc:43:1a:d8:d5:a0:60:d4:6b:d3:30:a7:9e:1c:97:9e:46:0e:
         50:8d:0b:40:c2:5f:8b:11:c1:a2:a6:d5:ba:8c:f0:c4:01:eb:
         aa:97:eb:a8:c6:05:d7:84:a5:ab:6a:a4:cf:e4:e2:57:c8:4c:
         b2:8a:c3:d3:2a:89:50:1a:49:c1:e9:bb:7d:13:b3:33:ed:90:
         91:d6:0e:6f:ab:e9:41:0c:a1:de:e4:5d:c6:15:a4:d9:e3:e6:
         d4:78:de:c2:60:75:20:15:f9:75:c8:44:bb:43:77:61:99:67:
         b5:bb:49:d0:24:c5:12:b2:8e:05:38:66:3b:14:da:74:f0:9f:
         62:f5:68:6d:e1:8c:a3:85:8d:2a:fb:71:9b:52:83:a0:d9:21:
         d2:24:50:03:f9:9e:78:6a:a7:ff:c8:3d:35:14:9e:dd:40:50:
         10:84:0c:3f:0c:1b:fb:ce:be:1a:b0:bd:10:89:38:da:87:7f:
         60:fc:81:cd:c6:24:0b:7a:6b:e1:bd:c1:13:58:a8:6b:e9:84:
         e8:ea:25:bc:88:52:a6:07:7a:ab:74:af:45:f3:8f:99:44:f0:
         ad:b5:c9:21:64:92:2c:d4:5e:3d:61:04:80:f6:66:16:f7:55:
         83:c3:5e:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:55 2026 by rpki-client