Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b46cd21-ba2a-4661-afc1-aad7bef1f044.roa
File:                     8b46cd21-ba2a-4661-afc1-aad7bef1f044.roa (raw, json)
Hash identifier:          6ZMN0daxiHWtpQy8ASqOLIrdqB0C0S3ToYGzCKMMhSA=
Subject key identifier:   A4:C9:D2:9B:C9:E7:95:21:9F:92:04:6E:3B:D0:1F:67:E2:5E:6E:B8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1CF66F7E345DC948599F335DBD0B30AD79029D8D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b46cd21-ba2a-4661-afc1-aad7bef1f044.roa
Signing time:             Thu 23 Jul 2026 06:51:37 +0000
ROA not before:           Thu 23 Jul 2026 06:51:37 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2da0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f6:6f:7e:34:5d:c9:48:59:9f:33:5d:bd:0b:30:ad:79:02:9d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:51:37 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=20ce6a5c3110c18ec07e4b0bb945c22c6bdc227e550f1069943e719d2801bcdc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:8b:67:60:9f:47:32:26:a4:23:c1:b3:88:
                    bc:0d:f4:b3:26:85:5e:26:74:6d:e3:28:69:c0:70:
                    a8:e6:b0:02:10:40:2b:77:04:a6:70:75:c7:6d:fb:
                    b7:c3:18:a3:87:1c:ee:a1:9c:0f:74:fc:13:c0:4b:
                    53:4d:b4:6b:e2:08:3b:72:bb:4a:ac:12:35:20:44:
                    b8:dc:05:a8:ab:e2:bb:f0:8e:2d:86:e7:34:e7:af:
                    af:1d:82:54:02:bf:63:69:f7:86:44:d8:92:2c:39:
                    ff:6d:82:3b:e6:44:40:8e:6f:34:39:76:1b:b7:e9:
                    59:a2:0e:67:83:88:f7:c3:88:94:a2:9a:bb:03:aa:
                    5d:a4:00:dc:15:d3:6b:d3:a1:25:1b:e2:d5:c3:c9:
                    80:6e:7f:cd:3a:0c:66:d0:ba:e7:ba:d5:2d:44:fe:
                    e5:79:c0:c8:c7:79:60:b1:52:1b:47:3a:c7:a8:d0:
                    31:1d:34:5b:8c:22:ef:71:58:9d:af:a7:57:7f:b6:
                    be:a5:cd:61:d7:61:ab:89:4c:cf:b4:44:6a:12:ea:
                    47:1f:1b:6b:73:19:c8:f5:62:bd:b0:9c:6c:d0:aa:
                    11:87:88:02:e9:21:d7:f6:91:cf:21:79:ad:fa:c8:
                    d3:e4:39:e0:f1:96:f2:b8:ef:33:e1:e7:37:31:09:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:D2:9B:C9:E7:95:21:9F:92:04:6E:3B:D0:1F:67:E2:5E:6E:B8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b46cd21-ba2a-4661-afc1-aad7bef1f044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2da0::/43

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:b4:85:ce:9c:8f:96:15:17:42:a6:14:bf:b6:a9:a2:48:
         89:3d:f5:b1:4d:8d:95:ae:57:c9:6b:a4:ce:30:97:2b:0a:db:
         c7:a4:d1:b9:87:c8:47:96:eb:9d:a0:59:13:60:59:16:80:51:
         bb:5d:a2:26:aa:72:e8:d8:22:c3:98:c6:8a:31:b1:0c:b3:fb:
         0a:35:62:69:f1:01:0d:50:7f:2b:ba:dd:3c:42:2c:7b:9b:10:
         18:c3:1c:33:d7:a3:db:d6:68:2b:56:49:c4:bb:07:9c:1e:58:
         ac:53:bd:d5:ab:dd:c9:11:4e:d4:d7:d8:77:3a:00:ca:e4:f8:
         be:f4:34:f7:27:a3:fc:1e:54:a5:0f:aa:32:ae:ca:1e:3e:10:
         e3:ff:cd:50:ef:c2:bc:c9:dc:5f:7e:0e:b3:21:dc:17:e5:08:
         3e:c8:66:2f:c9:37:b6:91:23:3d:58:da:d0:74:62:74:a2:96:
         34:40:84:0d:41:9b:88:ff:41:c7:e4:6a:41:ec:2b:44:d0:fc:
         48:48:2e:fa:fc:d4:f5:f2:bc:44:d9:e6:e6:c7:32:e3:98:66:
         ad:75:d9:52:b9:67:0c:c7:2a:40:60:11:a8:77:73:b0:ef:fe:
         ce:60:56:98:61:68:ce:92:a1:18:09:92:4f:2b:cc:26:a9:4c:
         ea:c3:af:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:42 2026 by rpki-client