Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/856c6feb-2e94-417c-904b-eca8060c0640.roa
File:                     856c6feb-2e94-417c-904b-eca8060c0640.roa (raw, json)
Hash identifier:          YufYDxq5JrQ9zdqylLr1WiOdRwcHRmCSQSZtY4gXt+U=
Subject key identifier:   22:49:14:99:D3:0C:07:6E:5C:E5:B1:80:C3:3E:BC:2F:4C:3D:05:68
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       198DDEE067D6065C58D822415024372E8D514230
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/856c6feb-2e94-417c-904b-eca8060c0640.roa
Signing time:             Wed 22 Jul 2026 03:21:22 +0000
ROA not before:           Wed 22 Jul 2026 03:21:22 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31ba::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:de:e0:67:d6:06:5c:58:d8:22:41:50:24:37:2e:8d:51:42:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:21:22 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=55d6f17ddf97960991ca2ea57920fe22fac19bf6b17d4ab3292dca666919759c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:5c:d9:04:89:01:52:b7:73:55:c2:1f:c0:
                    33:98:b5:11:f2:06:22:1d:91:a9:67:78:fa:79:fe:
                    87:43:73:61:1e:c4:cd:c1:03:a8:61:eb:b8:6c:79:
                    91:48:0c:52:b0:90:1f:53:4c:a9:93:c8:9a:20:5c:
                    d7:3e:cc:88:50:d7:6f:0c:20:14:e4:c4:20:6c:21:
                    11:87:d4:fa:73:d8:db:e6:38:c4:da:9f:b5:01:64:
                    c9:93:9f:e5:0d:a4:8c:3e:33:da:55:d0:95:ce:0e:
                    98:ae:12:a1:6c:bd:fe:16:65:ea:20:6c:0b:c8:8c:
                    45:21:dc:39:a2:a4:d8:0e:ff:ab:c7:3b:cc:a7:62:
                    93:19:9d:ad:e9:8b:e8:4c:37:29:9b:56:12:b8:35:
                    49:5f:7a:3d:48:cb:4d:0a:8b:03:fe:81:15:8f:8e:
                    11:99:dc:5c:57:84:7f:d6:c9:44:4f:b1:ba:2a:de:
                    a8:a8:bc:c2:d7:46:02:ac:9b:c6:f3:2b:35:08:8c:
                    9e:5b:42:f9:12:fd:98:01:cd:a9:cc:6b:96:bd:a3:
                    c1:a7:17:79:06:c0:3d:03:b2:23:4f:71:14:5c:51:
                    9a:b5:36:45:7e:b1:bd:31:c7:e7:10:2e:3c:8a:be:
                    f0:57:9e:d3:95:9a:a6:9d:2e:51:21:5f:b1:3c:f3:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:14:99:D3:0C:07:6E:5C:E5:B1:80:C3:3E:BC:2F:4C:3D:05:68
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/856c6feb-2e94-417c-904b-eca8060c0640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31ba::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:a5:2a:96:84:62:2a:6a:55:34:a8:7e:a2:da:81:0a:0f:
         08:dc:17:16:36:c4:75:df:0e:a9:7d:8e:a6:cf:d5:6f:d9:97:
         0c:6e:75:dc:bc:13:47:60:eb:f1:9d:41:e1:c5:cc:d8:19:0b:
         b5:17:0f:f6:f2:e6:68:05:b9:9f:eb:98:f0:4c:c6:b8:a8:3d:
         a8:16:5f:3f:9b:d2:dd:bf:ce:59:53:c6:54:07:dd:27:db:41:
         b0:ca:de:fa:a7:78:98:a0:f2:aa:2e:45:07:fe:32:70:d4:43:
         aa:14:4b:3d:d2:75:12:0b:c8:22:3e:48:d2:cf:47:27:6e:7c:
         c0:4c:31:5e:4c:1c:94:98:00:bd:3c:9f:53:8f:57:e6:aa:b5:
         90:ae:3e:2f:73:27:9f:93:3e:84:88:48:97:1c:d8:68:9c:50:
         62:44:be:82:8a:44:ab:ff:82:9d:e7:b0:5c:aa:d5:8b:7e:e4:
         20:d5:b1:a1:47:f0:1d:3d:ff:e4:aa:e5:11:60:40:ef:36:68:
         d1:fd:15:8e:32:1e:41:05:1b:91:5f:22:e6:27:84:32:e9:51:
         5a:a7:83:a8:c3:c8:de:54:3f:0a:ef:29:1b:e8:3d:4d:ce:d5:
         6e:b4:86:1d:da:d4:a1:51:d9:91:1b:48:8a:2e:ab:45:56:58:
         c6:e4:dd:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:51 2026 by rpki-client