Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c96f919-831c-4faf-906e-1b3f12287560.roa
File:                     8c96f919-831c-4faf-906e-1b3f12287560.roa (raw, json)
Hash identifier:          OYAB4FOcs3cQvBoLGz3e8w3vgYz2m2gImoG8fvaYGrM=
Subject key identifier:   79:1A:D6:1E:F7:C0:57:F3:0B:E6:20:A5:32:ED:0B:7F:53:2A:36:88
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4C1B48A394E1E354CBE7FFF6B113368281B6A652
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c96f919-831c-4faf-906e-1b3f12287560.roa
Signing time:             Thu 23 Jul 2026 09:41:36 +0000
ROA not before:           Thu 23 Jul 2026 09:41:36 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39a0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1b:48:a3:94:e1:e3:54:cb:e7:ff:f6:b1:13:36:82:81:b6:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:41:36 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=eea41e73b748054c6affc9302d01ce39dc3bb73b49f5df6a8eb948e57a841f1c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:27:22:28:98:c0:b3:b6:b7:b5:a5:21:03:
                    c8:f8:fa:b6:1b:ba:8b:80:05:d7:ec:40:07:77:92:
                    6c:ad:4d:cd:7c:a8:1d:44:3e:d1:40:fc:eb:f8:4d:
                    1c:a7:50:de:1a:d5:92:5a:71:44:11:47:26:3c:24:
                    27:5e:e1:31:f4:25:20:6a:fd:53:80:a0:7c:ea:1e:
                    ea:ac:d4:5c:5a:39:86:e4:f8:69:55:4e:47:64:18:
                    1a:ed:72:60:29:a2:eb:17:43:f4:a6:ec:d8:80:a3:
                    7d:97:57:94:ed:55:b4:04:9f:94:77:a5:fb:2a:fb:
                    2b:99:ef:9d:80:20:de:c4:73:fe:80:30:33:d1:e4:
                    31:e0:5a:c2:ea:52:4b:e3:5b:40:0f:9b:6c:b2:4b:
                    eb:a7:36:5a:ed:ab:9d:48:b0:a2:15:42:48:08:b7:
                    10:55:b6:63:47:ef:c4:c9:da:44:12:5d:c5:a4:3d:
                    d2:62:1c:86:da:8c:6c:d3:88:cb:0b:d2:f9:10:ad:
                    d4:a6:48:e7:ea:46:7e:14:b7:92:9b:83:fa:7c:8c:
                    5e:13:1b:18:75:3b:fa:3e:f3:85:36:21:9c:5c:4a:
                    a0:8b:ac:9d:26:c1:e0:da:7a:66:17:a6:80:7d:1a:
                    93:a9:6e:4c:ac:76:12:2c:18:26:e6:c5:e2:61:42:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:D6:1E:F7:C0:57:F3:0B:E6:20:A5:32:ED:0B:7F:53:2A:36:88
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c96f919-831c-4faf-906e-1b3f12287560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39a0::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:44:bc:04:17:06:e6:3f:91:c3:e6:ba:6d:7c:51:18:81:
         7e:d7:8d:f0:41:be:96:01:21:47:74:fb:1b:50:9e:32:93:57:
         fa:5b:77:71:a6:2e:27:ca:b6:4f:d6:a2:7f:04:ee:80:61:e8:
         b5:cd:ec:21:0b:f9:a3:96:d8:85:71:8c:50:23:26:bb:6d:c7:
         35:63:a9:cf:5b:a1:a4:f9:da:a6:bb:33:84:c8:77:ef:8f:a7:
         9f:57:0d:ab:8f:45:42:42:c6:c1:b3:28:a4:21:06:42:65:8e:
         06:cb:9c:60:62:c3:11:c6:98:48:6a:41:22:a9:cb:da:05:b9:
         16:c3:76:d4:43:84:1f:f1:0b:ab:03:57:23:af:88:fd:2e:19:
         2f:52:23:4c:0a:aa:93:54:6a:d4:64:f9:ea:0c:36:44:c0:58:
         03:37:0e:50:aa:4c:a8:d6:59:7a:08:96:7a:39:b3:a1:45:93:
         45:0b:14:5d:bf:cc:51:ec:90:3d:be:bc:f1:31:1f:7b:3d:5d:
         22:64:c2:b9:14:33:6f:69:ea:1a:f7:95:57:f5:ce:42:2e:fc:
         a6:e9:30:eb:d2:f7:2f:4a:b4:75:b4:41:83:cf:08:7d:80:9f:
         5c:5c:52:c8:f5:91:f0:da:a2:f1:01:c6:d6:6a:37:7f:19:71:
         58:7a:95:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:15 2026 by rpki-client