Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ce9ef8-4c63-4001-979b-273b7d27d1f3.roa
File:                     91ce9ef8-4c63-4001-979b-273b7d27d1f3.roa (raw, json)
Hash identifier:          WFJTLDBUlHllS9H7N23YJx/YrmlDk68xQGgK34aOSDg=
Subject key identifier:   A4:71:12:75:0F:F8:9B:10:8C:4E:17:AD:BA:DB:A9:DD:A5:27:18:D2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C67BA2531AE221B8324471D8DF3030F6B907208
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ce9ef8-4c63-4001-979b-273b7d27d1f3.roa
Signing time:             Wed 22 Jul 2026 01:51:13 +0000
ROA not before:           Wed 22 Jul 2026 01:51:13 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d06::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:67:ba:25:31:ae:22:1b:83:24:47:1d:8d:f3:03:0f:6b:90:72:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:51:13 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=6230697959c301cdf66bde132f48d793183f269f6c0cf21f7843f0675ff580a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:f3:46:a2:7d:62:e3:63:ed:d5:bd:38:a5:
                    ba:36:ed:03:81:08:0d:0c:15:c3:e2:ce:11:f5:dd:
                    c2:8f:0a:c4:45:c4:ab:9f:38:98:37:b3:74:fc:ed:
                    95:1c:ac:75:1e:78:4f:75:ee:95:7f:fd:70:f7:d4:
                    08:82:f8:b3:18:bf:93:b4:ad:d7:3e:b9:39:8e:4a:
                    3d:80:99:e7:c6:43:f0:f5:d7:26:77:28:e8:7b:83:
                    63:3f:af:20:39:1e:79:63:0c:c2:d0:70:ab:ac:e0:
                    a4:6e:e0:ad:92:9e:8d:5c:c4:ea:d5:ec:b5:a9:03:
                    1c:0d:37:e3:99:70:55:ca:8c:08:ae:8a:03:02:ac:
                    9c:16:d4:ac:b9:a4:d3:a0:47:87:bb:ea:00:00:d3:
                    42:6e:85:16:6f:d9:6b:ed:70:1a:97:45:03:3a:3c:
                    1b:6e:5e:91:22:ad:e2:f2:cd:30:5a:57:8d:9a:1a:
                    b9:66:cd:f0:4a:af:c9:98:79:0b:c3:65:19:cb:89:
                    7d:df:9d:8c:b2:98:09:a0:3c:a5:6d:da:50:ff:f0:
                    18:ea:cc:ab:9a:a3:43:1b:24:8e:e9:58:4d:0e:2a:
                    ff:f4:68:33:c4:e3:42:b1:43:0c:c9:8d:9d:d0:6d:
                    69:ec:fe:a3:3f:51:15:54:37:2a:c1:24:54:fb:10:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:12:75:0F:F8:9B:10:8C:4E:17:AD:BA:DB:A9:DD:A5:27:18:D2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ce9ef8-4c63-4001-979b-273b7d27d1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d06::/47

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:5a:03:f5:f4:4b:37:53:d7:da:59:85:f9:fc:f8:de:22:
         a8:4f:9b:ef:58:05:60:dc:dc:5f:7c:6f:53:57:42:3f:1f:92:
         88:33:4d:d8:ad:7a:37:b6:2c:0b:9d:06:b2:f7:e6:db:a0:86:
         63:7f:bc:ee:e9:87:1e:5b:cf:2f:47:18:f6:2e:ed:f4:56:36:
         34:88:10:4a:4a:8d:ed:ac:fd:87:76:c7:ed:0c:52:8a:9a:7c:
         c4:e8:2f:d6:08:0c:14:ca:35:96:fc:64:6c:5d:0c:f5:1e:a7:
         df:a6:02:b5:50:52:26:73:e8:c6:5f:f4:af:11:c4:b1:c2:95:
         16:de:1f:50:af:a7:0e:5d:fd:2c:66:ff:bf:9f:1a:ad:f1:3d:
         a5:19:96:7b:c6:78:07:b8:49:8a:d4:32:a4:e7:8e:5d:ef:91:
         e9:48:53:c8:81:be:fa:fa:c8:2a:ad:5f:7d:a3:da:4f:dd:fe:
         5e:0e:c4:43:8c:0e:64:bd:bc:6f:c7:27:e6:ae:42:54:45:bc:
         e1:48:00:6e:7a:b0:67:6a:6d:6e:87:32:ac:1f:79:03:bf:bf:
         63:f0:b3:3c:f8:fb:ac:f3:da:93:35:ce:4d:5f:d6:02:cc:36:
         ba:53:8d:13:8b:00:fc:58:1b:5b:3c:43:19:22:64:b9:ce:76:
         96:54:3a:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:13 2026 by rpki-client