Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c15e999-efc8-48f4-aa69-9eb9c9b8f113.roa
File:                     8c15e999-efc8-48f4-aa69-9eb9c9b8f113.roa (raw, json)
Hash identifier:          tH7xdUbnDj6cRieOSQSLF1DK7vtI9iyT90tHkg+xpMA=
Subject key identifier:   CF:69:71:1F:6C:E4:5F:7A:15:3C:C3:63:9C:6E:38:83:62:86:D2:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7EE3DADA738B13B29F7E1A4790B01D8377E0D2FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c15e999-efc8-48f4-aa69-9eb9c9b8f113.roa
Signing time:             Thu 23 Jul 2026 07:50:05 +0000
ROA not before:           Thu 23 Jul 2026 07:50:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3338::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e3:da:da:73:8b:13:b2:9f:7e:1a:47:90:b0:1d:83:77:e0:d2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 07:50:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=2384d63ea65a8f3518c353b815e6372e0929df01a96a5d7197938fe6184cc257, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:4f:50:bf:47:10:04:40:3f:67:a3:1a:97:
                    0f:cc:08:15:b1:2d:4a:5b:7a:2f:43:4b:af:06:d9:
                    c7:b5:99:e0:7a:75:30:a7:7e:0a:13:b5:3c:ac:21:
                    99:ca:8f:c2:bd:60:fb:0d:2f:f0:25:f5:5f:68:2d:
                    b8:42:bc:55:d5:80:1f:a6:18:2d:7c:f1:5e:e5:a1:
                    b1:f0:03:18:fe:86:ba:30:f9:73:69:1d:02:e9:d8:
                    54:6a:8e:83:2f:6e:0e:8f:eb:c8:4e:aa:58:a7:87:
                    25:51:82:94:e8:27:80:62:54:9a:86:e1:a0:3c:96:
                    81:d9:0e:35:bd:52:41:67:11:10:15:ac:d1:61:37:
                    b4:a8:e2:51:dc:88:29:75:26:18:a1:38:37:4e:b3:
                    07:4e:cd:3e:68:99:35:e9:5a:ae:b2:c3:36:62:f6:
                    15:73:89:5c:68:73:c7:2f:88:66:74:fb:6b:2e:48:
                    1a:68:cb:fc:f1:bf:a3:34:c9:e9:de:f4:a7:f1:0b:
                    23:9f:4b:08:4a:60:0a:23:94:5e:0c:a3:72:61:7c:
                    25:dd:72:f4:89:c4:00:27:c4:84:53:ef:c2:4d:64:
                    78:cd:e6:dd:fc:4b:eb:54:42:5b:eb:3e:3c:4b:f1:
                    a9:05:15:60:72:10:ab:49:73:2b:f6:c0:db:28:cf:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:71:1F:6C:E4:5F:7A:15:3C:C3:63:9C:6E:38:83:62:86:D2:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c15e999-efc8-48f4-aa69-9eb9c9b8f113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3338::/45

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:e1:10:7d:f5:43:ed:27:b6:39:02:23:25:0e:ee:89:6a:
         05:1c:b3:fa:a4:ac:a2:00:65:27:72:d2:b0:5d:bd:d5:ed:97:
         ad:3b:9d:9e:55:ab:68:5d:63:86:d4:66:fb:fb:10:5d:8e:1f:
         05:00:33:90:15:53:cc:e2:2a:67:a0:3b:a4:1d:da:ea:73:45:
         a5:11:6a:53:a3:bd:8d:6e:ce:a0:d1:a0:5f:6a:89:6f:77:03:
         d1:08:85:c6:22:58:a0:63:44:0d:b2:b9:2c:d5:23:0d:b8:85:
         80:ac:2b:f4:59:a3:5c:51:97:40:8f:42:64:25:cb:c6:1b:bc:
         3c:69:e4:18:00:a5:ac:0c:f2:38:f1:07:52:c1:81:a1:e8:59:
         ff:17:19:e8:58:fc:37:15:9f:4b:d8:99:73:9e:ee:6f:13:a7:
         c7:2e:e2:69:4a:2f:55:36:31:77:49:c3:d7:eb:d9:8a:bd:bd:
         7b:de:38:aa:ac:08:62:10:d3:74:a7:6f:e9:82:05:ae:e1:87:
         7f:50:05:ad:75:b5:ea:21:b1:11:27:6c:af:41:44:b6:a2:03:
         08:0e:cf:58:15:75:f1:ad:10:a0:dd:bf:6d:95:76:26:ab:1c:
         68:92:ad:04:96:06:a8:a8:9c:9e:0c:e1:0b:f7:71:82:4e:b3:
         65:6b:69:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:51 2026 by rpki-client