Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87f0e28d-0b9b-4a6d-8286-c5e535b04295.roa
File:                     87f0e28d-0b9b-4a6d-8286-c5e535b04295.roa (raw, json)
Hash identifier:          gmJUXYEE0tHl3lfWCkIyD4EV15g719U1xf1jiUMUQi0=
Subject key identifier:   92:6F:C4:45:A8:66:99:17:F2:10:64:96:CE:A2:34:6A:39:18:C1:00
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4616210804B7DBA942BC5643CA1F8C1DB2AC4C95
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87f0e28d-0b9b-4a6d-8286-c5e535b04295.roa
Signing time:             Thu 23 Jul 2026 05:31:27 +0000
ROA not before:           Thu 23 Jul 2026 05:31:27 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3224::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:21:08:04:b7:db:a9:42:bc:56:43:ca:1f:8c:1d:b2:ac:4c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 05:31:27 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=025283fc41403ba1ed43d43e0b4d6c7256762d4b9d82058857f89f6b6e72b1d5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:c7:54:2c:b1:29:0a:b0:cd:ff:cf:71:89:
                    fa:45:2a:02:d7:15:6d:ac:5f:e5:63:bc:32:4b:2a:
                    a4:b1:26:ab:38:ea:98:61:66:bc:60:46:fa:d8:e3:
                    7f:52:f8:54:5f:b7:bb:4c:43:18:bf:5f:f9:be:53:
                    e8:df:83:ee:eb:96:93:c3:0c:bb:ca:f6:b1:30:9c:
                    11:52:61:3c:7f:c8:b3:b3:8a:0b:a3:c9:90:0d:1e:
                    02:b2:c3:05:c2:45:e5:6a:e4:be:c8:69:92:2e:41:
                    1e:1c:1c:5e:ad:a5:91:96:3c:09:7b:4f:29:43:d6:
                    e8:26:33:40:6f:d7:8e:71:d9:cb:d0:d1:6b:86:87:
                    b3:31:3e:ac:98:7a:21:bb:7b:7c:c0:b5:96:f4:d3:
                    c2:d0:0a:f4:41:fe:01:e5:8f:47:d6:94:ed:bf:b9:
                    00:89:60:cd:75:91:c9:c9:75:6f:1a:82:7e:a5:a2:
                    d1:a7:db:8c:db:10:af:dd:24:99:43:4d:80:f9:7b:
                    d5:37:51:3c:32:da:54:af:4a:70:1a:f3:d3:6d:ad:
                    05:c6:17:7e:a2:31:d4:85:55:ce:80:b8:43:ed:a4:
                    55:2d:b2:8e:13:e3:16:68:0b:19:2d:4a:d3:e9:7e:
                    40:d3:25:65:a5:ca:87:81:d1:cf:6d:9b:27:76:c8:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:C4:45:A8:66:99:17:F2:10:64:96:CE:A2:34:6A:39:18:C1:00
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87f0e28d-0b9b-4a6d-8286-c5e535b04295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3224::/46

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:75:cf:0b:18:df:8f:93:06:2e:43:0a:92:a5:fa:a4:63:
         cb:2d:7a:62:4a:b9:df:58:c7:44:55:d6:22:d9:47:86:4c:57:
         37:f5:70:fd:f6:36:f7:e6:e2:be:53:77:c8:18:8b:53:38:d7:
         c8:a4:77:f0:cb:24:c7:9e:98:93:ce:77:3c:12:98:90:cc:dc:
         80:d0:0a:4d:dc:9f:e5:fb:0a:e6:7c:72:43:18:42:4c:08:c2:
         c2:64:5c:f8:25:1c:0d:3f:b4:f5:ce:8a:5f:62:62:c0:93:9e:
         ad:e3:5d:3e:25:9d:7f:44:a6:16:6b:93:45:e4:28:e1:94:23:
         54:d3:b6:45:20:0d:08:d8:e9:67:cc:a4:0b:43:c2:30:42:aa:
         cf:40:6f:30:ed:b9:26:b6:c5:46:27:58:a4:93:ca:f0:57:d8:
         f4:20:a3:6f:c0:94:99:5a:22:d4:17:18:22:a7:2a:fe:b5:71:
         b2:1c:95:c5:2f:3e:9d:ee:29:5d:43:8c:49:b5:3e:94:dc:37:
         67:02:9e:e6:f5:a8:e2:ae:43:79:19:ed:f2:da:6a:8b:02:48:
         d7:54:19:43:66:04:80:9d:e9:2d:71:2b:4b:df:1a:b9:e9:13:
         76:1f:3f:b2:62:9b:cc:61:34:61:9f:b2:4f:70:11:62:30:6b:
         02:84:c2:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:13 2026 by rpki-client