Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9042250b-1262-408a-87ab-67df5707378c.roa
File:                     9042250b-1262-408a-87ab-67df5707378c.roa (raw, json)
Hash identifier:          /W36j2uX6MYSIib8Ntk39LaTHO5BQOTwGu0+OXkieqY=
Subject key identifier:   CC:EA:56:DC:DD:D7:77:C1:64:3D:B8:2E:58:0D:2D:C2:34:7D:C6:55
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0A55D5E4848DA05E7821BD98DF9F54C0DB983FEF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9042250b-1262-408a-87ab-67df5707378c.roa
Signing time:             Thu 23 Jul 2026 06:50:05 +0000
ROA not before:           Thu 23 Jul 2026 06:50:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f60::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:d5:e4:84:8d:a0:5e:78:21:bd:98:df:9f:54:c0:db:98:3f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:50:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=7f2ef046ae2b6bd585bc26e8dc006ca019a00394d5fddafaed8686842f17addc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:93:86:aa:dc:cf:6d:02:a8:58:14:74:60:
                    ba:ac:08:ae:8f:08:01:05:73:bf:31:34:74:b1:83:
                    8a:46:df:64:1f:bc:17:6f:2b:3b:9c:8a:d3:2b:2b:
                    26:db:60:8e:d3:8c:9b:27:5e:2c:53:1a:b9:5a:c6:
                    65:22:84:d8:a5:68:1d:2d:25:ef:3c:45:ef:ea:3c:
                    66:fb:48:63:de:a7:89:6d:93:f3:89:15:f6:e3:e7:
                    89:56:47:8d:83:3f:d4:48:eb:8b:08:86:e5:ac:06:
                    cd:d3:29:be:09:56:d3:7e:20:f5:0c:c6:74:8a:09:
                    54:e4:08:40:01:56:7b:39:17:23:a0:d6:e1:4c:e6:
                    31:be:45:8a:4e:b2:80:61:01:90:dc:a3:06:38:85:
                    6c:14:3d:58:fe:17:c4:a0:13:de:67:75:09:75:86:
                    c8:9b:58:a8:b3:98:ee:8c:59:58:63:bb:8e:5a:c9:
                    b2:e8:d9:8d:28:84:fd:a7:e1:f9:83:3f:11:2f:5d:
                    20:04:0c:76:74:a3:59:8e:e3:3e:a6:43:bd:d3:99:
                    9a:2a:92:6e:47:85:72:9d:1e:36:40:6e:ca:07:93:
                    f4:74:1a:07:41:10:db:2f:58:3a:b3:24:09:35:e7:
                    fa:0b:ea:ea:a4:21:59:c7:76:8d:9d:bf:4f:15:d8:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:56:DC:DD:D7:77:C1:64:3D:B8:2E:58:0D:2D:C2:34:7D:C6:55
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9042250b-1262-408a-87ab-67df5707378c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f60::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:7f:bc:e2:8c:2f:25:68:40:28:82:94:bf:3b:70:91:80:
         d4:d9:d4:7a:26:67:eb:b3:17:0f:42:ed:c1:a8:7c:33:4d:cb:
         e7:39:e8:b0:ea:6c:6a:19:c8:6c:b5:90:2a:75:8d:c4:a0:f8:
         01:c8:0a:06:58:1b:fd:f3:74:71:20:f6:41:32:21:53:31:f7:
         99:5d:bd:e5:d9:d9:f2:aa:94:d8:b0:51:af:99:e3:90:9b:1b:
         64:23:b1:86:0e:1a:01:29:17:d7:88:e4:4e:b5:d9:51:85:af:
         6a:f4:be:05:bc:38:8e:45:6d:0c:f3:77:dc:01:3e:d1:58:cd:
         2e:91:7f:de:5a:65:c2:37:9b:30:42:94:50:a6:b6:95:24:e9:
         bb:fb:c3:cc:23:f2:62:48:94:8c:89:0d:70:4a:52:21:99:c7:
         a0:40:36:cd:ca:27:8b:4e:1a:6a:cf:07:a5:01:1c:e1:f2:75:
         8b:6b:0e:62:10:1f:14:4d:4b:cd:7c:c2:37:b0:b8:f3:ac:96:
         90:c0:32:5e:67:f6:19:ad:9a:22:6a:13:a0:23:4c:47:b4:1b:
         5e:1f:c5:1f:b4:75:64:d0:94:fa:ed:27:93:9d:59:37:ee:0e:
         2e:81:aa:9f:c6:0b:af:69:25:37:ce:93:8e:ea:c4:5e:e1:5a:
         fa:80:56:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:57 2026 by rpki-client