Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c775b6f-c904-4865-ab08-eb6461c13520.roa
File:                     9c775b6f-c904-4865-ab08-eb6461c13520.roa (raw, json)
Hash identifier:          YgxsBek0mthv2haBQHo6tCktLjSpZP0VbkGVnVPp5sk=
Subject key identifier:   6D:D9:BD:14:D2:A2:91:13:C3:2F:45:68:13:5A:0C:1B:97:4A:88:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       62D2C4138177B20E0D5E3F9F5D50D49D14A6141C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c775b6f-c904-4865-ab08-eb6461c13520.roa
Signing time:             Thu 23 Jul 2026 04:11:25 +0000
ROA not before:           Thu 23 Jul 2026 04:11:25 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:c4:13:81:77:b2:0e:0d:5e:3f:9f:5d:50:d4:9d:14:a6:14:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:11:25 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=61a7e6db9c740c533f54ea2e20a05e272c297dddbbd3df3e269b93a917005e72, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:a1:d8:ca:4b:23:ce:da:46:6a:d9:b6:40:
                    72:97:75:80:fd:9d:ae:da:e1:3f:05:c4:f5:c6:1b:
                    35:07:6a:34:05:27:c3:28:d8:16:ae:72:a6:51:5b:
                    83:fc:9a:96:61:c2:e9:dd:53:f8:24:23:6b:34:95:
                    d5:e7:48:75:65:b1:e2:4d:4a:fa:71:e8:06:e1:0e:
                    23:cf:29:ca:29:f9:f3:6a:bb:b8:9a:6b:ca:d1:5e:
                    f0:7d:51:11:0d:1f:48:60:e7:f2:53:f0:69:00:5d:
                    18:e6:3e:55:13:50:29:f5:c3:32:06:c1:35:4a:11:
                    8e:85:98:75:be:51:43:b4:0e:e4:ae:e1:70:c5:64:
                    15:ea:5b:9c:9c:18:09:5c:a4:b2:b8:49:a1:71:38:
                    f9:c5:81:42:c1:1f:32:aa:48:6a:37:3f:ed:e9:cc:
                    a2:fc:e9:d7:0e:f5:55:dd:25:9c:86:9a:10:60:94:
                    e3:b0:b5:65:8e:d1:e5:88:49:ff:7e:35:ef:56:b5:
                    40:b7:5e:ec:a1:3c:66:0b:e9:20:79:4a:10:b6:ae:
                    3d:33:19:19:4b:37:b3:6b:2b:8c:3f:4e:45:62:8d:
                    9a:f3:30:d0:7e:b0:ca:cc:c1:62:0d:70:6a:86:9f:
                    74:34:38:d7:46:58:8a:18:68:0c:de:70:b4:50:6a:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:BD:14:D2:A2:91:13:C3:2F:45:68:13:5A:0C:1B:97:4A:88:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c775b6f-c904-4865-ab08-eb6461c13520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37c8::/45

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:37:e5:12:95:bf:4c:b9:58:9f:09:a1:09:79:10:37:95:
         3f:4e:2c:a4:2c:11:87:4c:77:40:80:c7:ca:86:43:7b:b3:a1:
         e0:c1:24:bb:b7:b2:15:18:d2:a7:dd:36:d4:ab:d0:99:71:50:
         2b:ad:a9:42:16:05:50:1e:2a:ea:da:52:96:e1:7e:21:63:53:
         c6:1e:98:4e:05:82:7c:59:50:5e:3f:b7:dd:a8:20:03:ba:69:
         3a:8f:31:cf:cf:47:c8:5a:7f:35:a0:68:f6:71:60:4f:0b:b5:
         37:67:69:db:08:23:37:42:95:91:dd:1b:ea:66:5d:97:86:ef:
         b5:d4:f0:aa:f9:9e:a1:45:1e:61:d0:ff:60:e8:95:db:d4:43:
         f2:bc:b1:f9:2b:6a:ec:05:b2:31:77:95:76:09:ed:22:f5:af:
         85:f1:c2:37:ff:f5:0d:6c:40:ad:9e:91:a9:c6:f5:92:a6:1c:
         91:14:54:e6:ee:d1:e9:d2:90:b9:a9:cb:db:69:cd:05:05:12:
         2d:0d:20:ca:d2:2a:e4:00:23:a9:45:99:62:28:9e:79:4c:28:
         5c:13:d9:67:f8:9f:70:0d:1a:a5:c4:aa:96:d7:d2:44:dc:3f:
         ca:25:b8:87:24:21:1c:b0:2a:de:d9:7b:08:ba:82:e3:57:de:
         1c:a3:63:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:11 2026 by rpki-client