Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c480eec-148b-44b6-9c83-c55c08d50152.roa
File:                     9c480eec-148b-44b6-9c83-c55c08d50152.roa (raw, json)
Hash identifier:          AS4GLqMEHqkJ7jheUFTcGzhuQy9CqiCTUPZDanM4R1w=
Subject key identifier:   B5:0D:92:44:E2:4D:7D:B6:85:96:84:E6:CE:92:2D:29:73:03:38:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5641527A4D9F1BA95DB88CE56B4C10DBE93716D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c480eec-148b-44b6-9c83-c55c08d50152.roa
Signing time:             Thu 23 Jul 2026 11:31:29 +0000
ROA not before:           Thu 23 Jul 2026 11:31:29 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3650::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:41:52:7a:4d:9f:1b:a9:5d:b8:8c:e5:6b:4c:10:db:e9:37:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:31:29 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=48e50f1cd96ebd895f9c2aaeb85b15b5ff179684fceea788dd891dd174b32232, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:11:12:d3:bf:dc:b7:32:00:cd:5c:ce:4c:
                    1b:fb:39:08:23:3d:39:bf:87:74:9c:58:fa:75:6d:
                    1d:10:bd:77:1d:bb:5c:4e:6e:e0:44:d2:42:11:e4:
                    34:c6:8f:4b:41:76:57:a1:51:27:f5:a5:1a:95:8c:
                    5c:ee:12:2c:63:41:28:a2:a9:29:03:15:5a:d0:aa:
                    8e:c1:32:f5:fa:a1:07:77:01:23:c9:ce:6c:b1:cb:
                    83:58:4b:07:e2:bb:59:d9:1a:eb:74:36:38:d7:55:
                    22:34:1b:83:90:b4:6c:51:dd:ef:44:79:e9:b1:d4:
                    2b:0e:2c:42:c1:44:5d:d5:34:cd:9f:5c:f0:d1:1f:
                    28:9f:d1:06:6f:df:ad:06:51:05:4f:22:4c:6c:fa:
                    cf:db:50:0b:52:39:c7:98:df:30:e8:48:65:d0:85:
                    ba:01:31:81:39:cc:46:de:ac:e3:03:eb:b5:94:8b:
                    ba:02:69:f6:fa:a2:fa:36:7a:da:37:55:2c:d1:53:
                    63:79:48:de:f9:ae:05:e2:5f:72:59:0e:cb:31:01:
                    3f:49:4c:82:83:ba:0c:af:03:c6:54:dc:83:c3:db:
                    e9:87:8b:d4:c5:36:4a:44:78:7e:a4:e9:59:fd:94:
                    6b:f4:f8:b5:60:25:3a:e7:f8:08:32:c7:cd:c5:21:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:92:44:E2:4D:7D:B6:85:96:84:E6:CE:92:2D:29:73:03:38:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c480eec-148b-44b6-9c83-c55c08d50152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3650::/46

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:a3:e6:61:ac:8e:4c:79:46:75:d2:9d:f1:76:59:ef:b6:
         32:16:2d:52:84:97:d6:69:ba:fa:ee:76:74:3c:cf:e8:3c:e3:
         0b:7c:3f:d9:02:91:f4:df:90:68:fd:3e:d6:a6:07:d1:5f:a4:
         67:00:a9:0b:f2:12:ce:72:a1:75:d2:26:2e:ab:bf:e3:4a:06:
         1b:5a:6b:ac:4c:c9:6e:46:e7:ba:54:c5:09:8f:c6:a5:81:73:
         5e:1b:3b:5d:ce:6f:3e:62:99:da:5e:13:5c:b9:65:8f:e8:0d:
         89:2a:50:c6:46:2c:97:cd:a4:2a:d0:c7:f9:e2:06:ef:c9:66:
         be:64:34:d5:a6:57:1b:f3:c6:34:21:46:a4:db:e5:4a:24:b7:
         0f:1d:c7:59:0c:5e:5b:48:2b:dc:13:b3:9c:f2:2e:46:a9:64:
         89:79:55:8d:cd:d0:74:8a:2e:26:52:e2:2c:4e:11:aa:5b:e3:
         1d:d0:ad:e2:04:70:1b:41:bf:99:d6:bc:33:28:fc:dc:0f:7f:
         08:60:93:a5:47:50:42:50:01:dd:18:fb:ed:38:6a:d6:05:d2:
         f9:3d:1e:51:fc:07:3f:fc:7d:8d:e6:59:fa:ed:fd:84:c5:b8:
         dc:e3:75:f3:25:f2:0a:42:b8:d5:2d:fd:1c:ba:e1:28:c1:2d:
         2b:62:60:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:42 2026 by rpki-client