Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82837a38-6117-4b0e-9f5b-73cab22fdd1c.roa
File:                     82837a38-6117-4b0e-9f5b-73cab22fdd1c.roa (raw, json)
Hash identifier:          t/wf2l+ISCqgpcZIoLNhvHssU/0IhfZkce7HiVK1Kq8=
Subject key identifier:   6E:19:AB:23:88:C5:14:F0:DB:5F:F9:49:B9:37:DD:09:C8:D7:AE:63
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       737370FD1B6276CF7D1F9480FDA003F65464C2E8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82837a38-6117-4b0e-9f5b-73cab22fdd1c.roa
Signing time:             Thu 23 Jul 2026 12:00:51 +0000
ROA not before:           Thu 23 Jul 2026 12:00:51 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36c8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:73:70:fd:1b:62:76:cf:7d:1f:94:80:fd:a0:03:f6:54:64:c2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:00:51 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0d7ae8eef147a6b1c15f280f61019ce9d1eef64eee95eff38f04dca1bfdcdbc4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:dc:ea:40:3b:62:13:a7:67:0d:fe:ba:d2:
                    83:b1:18:6b:73:42:e9:fd:b3:8a:00:69:26:06:50:
                    fc:00:1b:72:fa:a9:82:c0:2e:4f:bf:32:82:ce:84:
                    c8:c9:1c:52:c7:6a:03:00:ab:37:0b:f3:e2:bf:70:
                    c8:20:12:cb:11:0f:46:dd:d4:eb:2a:e7:12:d4:67:
                    c8:d8:67:a4:14:39:e0:cb:9d:08:e9:02:83:fc:9d:
                    9b:92:51:f6:90:60:ec:13:e1:fb:43:7d:54:14:5e:
                    ac:2f:49:98:11:fb:d4:76:92:85:15:95:af:30:15:
                    d8:83:54:e5:7d:e8:fc:dd:4d:0f:dd:25:f4:dd:cd:
                    5c:5a:ad:9e:13:c6:e1:79:6d:11:98:27:c0:45:3b:
                    52:c4:d6:dc:3c:07:03:0b:05:5d:ac:c8:c9:86:fa:
                    95:87:6f:81:a4:04:5f:13:1b:fa:97:65:41:a7:d0:
                    67:03:54:2e:12:d5:cf:8f:4a:d4:3d:ee:13:7d:58:
                    fe:14:58:c5:42:c1:21:87:d8:2e:07:94:f9:ba:3d:
                    da:89:57:9f:e2:d8:67:d0:3a:b5:ed:d1:58:f0:2b:
                    4e:b7:1b:8e:64:d9:51:7f:ae:91:9d:03:37:f7:d6:
                    ce:05:55:4e:65:e2:00:c8:bd:6d:4c:27:a1:7a:7a:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:AB:23:88:C5:14:F0:DB:5F:F9:49:B9:37:DD:09:C8:D7:AE:63
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82837a38-6117-4b0e-9f5b-73cab22fdd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36c8::/46

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:12:6c:d5:70:67:e8:ee:4f:af:60:da:c9:34:53:d9:ab:
         f2:25:d3:29:25:26:9a:49:33:23:d6:90:fb:c9:15:a6:6d:59:
         ee:b7:6b:9b:a3:e4:d8:c5:9f:88:fc:41:81:9a:3c:3f:31:3e:
         53:b5:28:a2:3d:b3:5b:8b:81:dc:d4:9d:d2:8e:bf:9e:38:5c:
         51:c0:d6:e8:fc:74:5c:ef:15:02:48:d9:d3:1d:f3:c2:2b:35:
         48:31:e0:ab:39:f9:36:9c:18:7e:1d:1e:13:21:44:ea:bb:49:
         09:71:eb:14:b5:38:19:43:0e:92:1a:e2:ae:d7:b8:a0:6f:58:
         21:2c:87:33:67:39:a7:61:1b:3b:66:17:f4:82:1e:2f:ac:66:
         79:6b:32:9f:d1:e0:44:f5:cb:36:0a:9b:69:29:22:36:79:13:
         e7:43:a0:b4:06:a7:19:78:f1:a1:61:f1:be:8e:d4:bd:21:80:
         c7:4b:f8:93:b3:95:c9:d5:42:b5:40:bd:a4:7d:4b:87:86:5b:
         ae:96:47:3b:f3:e2:60:5d:4a:ee:3c:13:a9:d5:14:71:9c:33:
         7d:6a:38:1f:b2:90:18:52:4e:4c:d6:c5:91:ad:76:cf:ff:d4:
         03:08:db:ff:4d:94:c4:c9:ef:bd:8d:e6:41:1f:9d:85:49:ac:
         c4:3a:f9:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:38 2026 by rpki-client