Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa
File:                     961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa (raw, json)
Hash identifier:          GasZlAguDwIWAWN40PQO1NgMJqzElIOMx+NjOgThLoc=
Subject key identifier:   EC:62:6E:79:B1:32:03:72:44:E4:F9:A6:05:C4:05:1A:1B:B0:D7:C3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B1ABADAE31D3A9C2F0E82DA8E106CC1A6BA580A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa
Signing time:             Wed 22 Jul 2026 01:30:16 +0000
ROA not before:           Wed 22 Jul 2026 01:30:16 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1a:ba:da:e3:1d:3a:9c:2f:0e:82:da:8e:10:6c:c1:a6:ba:58:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:30:16 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=237be6fe78b78e8568188f47000c052494051824ce70f72d5011a551149e690e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:38:b4:bc:8f:db:58:8d:53:b1:f1:4b:e3:
                    38:3d:08:ab:3b:14:eb:ec:88:bd:10:3d:64:79:73:
                    a9:94:9c:10:89:94:59:07:b0:ce:ee:5e:83:13:6f:
                    59:2a:e2:de:f8:3c:56:c2:07:90:cc:38:72:6c:7b:
                    6d:17:58:73:55:cf:91:a3:ff:08:70:08:41:d1:0b:
                    15:ba:ec:90:47:f1:cb:b8:cd:41:87:ef:75:55:a1:
                    94:28:40:25:77:cd:83:e7:70:b9:47:25:5f:9d:87:
                    65:8b:4a:80:58:4e:ed:bb:48:66:ac:85:2d:91:c8:
                    94:f9:97:4b:93:b6:af:48:f1:86:18:45:ca:c3:16:
                    74:03:a2:93:50:e6:a0:7f:7b:d7:2c:0d:f6:2d:17:
                    b8:5a:21:b8:45:4b:ad:3a:20:1c:c6:d7:fa:cd:1c:
                    18:9d:96:a6:24:6a:ac:71:6a:d3:a5:3c:1b:f1:07:
                    72:dc:ef:01:e9:b9:70:b5:77:51:55:51:e6:d8:51:
                    98:38:1c:34:45:b8:50:21:9a:d4:4c:21:f4:41:f0:
                    c9:3a:63:32:53:f0:30:be:02:be:2c:c7:07:4e:7e:
                    fb:75:ea:97:6b:0c:ac:40:1d:11:4a:a4:1a:28:f5:
                    c9:70:a1:f0:44:c9:f9:ac:cf:0d:ce:53:24:54:5e:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:62:6E:79:B1:32:03:72:44:E4:F9:A6:05:C4:05:1A:1B:B0:D7:C3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e18::/47

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:83:17:18:86:de:4d:f0:e6:2e:24:d0:4e:0a:1c:08:76:
         f2:3b:f6:28:99:ad:96:bf:3b:f0:5f:a7:aa:c1:09:15:59:b5:
         f8:7a:a1:bc:72:4f:f4:c6:41:61:95:7f:1f:60:a3:6c:75:42:
         f3:73:10:65:24:02:6f:51:5a:72:18:4c:12:0c:75:54:6e:57:
         fd:9b:a5:b1:7e:a5:f8:ad:f3:85:09:d2:0b:cf:42:5c:83:e0:
         81:aa:ef:0a:63:34:e8:ca:e5:a7:d6:bb:ec:d6:cf:9a:b9:5e:
         79:dd:c6:41:d6:18:4f:df:c9:2c:ff:ec:8a:f5:9a:93:cb:7d:
         66:39:13:5c:6f:60:e9:7e:92:ce:01:67:3d:d2:bc:9b:09:5c:
         fe:83:2c:46:1d:14:0f:dd:b6:28:89:4b:c5:11:cb:b5:c2:ac:
         05:90:4c:3b:4a:0c:27:47:af:ac:fc:ef:ac:cd:78:6b:f5:35:
         a6:cf:09:ba:ac:79:e0:35:26:aa:34:97:3a:b1:d8:18:67:ec:
         87:8c:26:8c:39:6c:94:b2:a9:de:04:eb:b4:26:cd:e2:9f:ee:
         ac:ff:91:25:16:cc:0f:6d:36:37:b7:ea:b7:fb:61:e0:01:f6:
         c5:e0:4d:70:77:5d:b4:5c:1e:64:45:e6:19:3d:7f:7a:a7:45:
         fb:3f:f4:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:48 2026 by rpki-client