Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ca7f104-032f-4525-846b-eb9925d07c26.roa
File:                     9ca7f104-032f-4525-846b-eb9925d07c26.roa (raw, json)
Hash identifier:          5HvCvoYCJvGacEMv1Guw2PiT/f7/vtxZsF57TiH5WrY=
Subject key identifier:   45:C9:43:4A:92:B7:58:BB:43:03:F5:76:52:B2:13:68:2B:B1:FC:28
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0985C597121FF6D423E6F4FD2C07186D2221F17A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ca7f104-032f-4525-846b-eb9925d07c26.roa
Signing time:             Thu 23 Jul 2026 04:20:05 +0000
ROA not before:           Thu 23 Jul 2026 04:20:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3300::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:c5:97:12:1f:f6:d4:23:e6:f4:fd:2c:07:18:6d:22:21:f1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:20:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=272cf2d1a68589ef5086d38f16dbcfd21c854a1579761230384096797e3bcb34, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:6f:26:81:f7:fc:4a:e3:de:07:a0:2c:9e:
                    61:09:ea:a6:79:3d:80:06:73:0c:44:38:e1:8c:67:
                    58:58:c9:10:6b:a8:b1:bf:ac:0b:b5:dc:fd:0d:a8:
                    7c:f8:61:64:55:62:5e:6a:83:3c:ea:09:8e:03:75:
                    c0:35:18:46:11:ac:ac:1d:56:30:0f:c7:b7:42:b8:
                    7c:0c:da:01:09:2e:ca:99:e0:25:73:7b:c5:c7:90:
                    01:15:25:fd:a8:1b:7e:a6:0f:53:c3:f4:5b:e2:be:
                    4b:66:12:27:1b:3b:bb:ad:b5:a9:ca:8b:b1:bb:56:
                    71:bd:a1:cc:2c:25:4c:4c:d5:ea:8f:d7:1a:f7:d3:
                    b5:3b:48:1c:a6:23:84:08:ff:76:6c:b7:c3:83:34:
                    57:83:9d:33:9a:55:dd:fc:10:e9:9f:4d:28:e7:2f:
                    c1:fb:91:5c:0b:69:42:95:d5:10:8b:14:9e:31:7c:
                    b2:ae:f0:5e:01:7c:e3:b8:66:94:d5:09:b0:5b:e7:
                    ac:e9:d4:d2:b7:7b:9e:5a:40:28:5e:16:d9:5e:92:
                    de:e7:18:b2:fc:d4:0f:63:0b:54:51:6f:d7:25:4a:
                    f6:db:1e:1e:94:5c:50:54:b7:86:ec:93:a2:02:87:
                    fc:b2:9a:13:97:5f:5b:71:ea:46:c4:e2:7a:dc:09:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C9:43:4A:92:B7:58:BB:43:03:F5:76:52:B2:13:68:2B:B1:FC:28
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ca7f104-032f-4525-846b-eb9925d07c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3300::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:8a:b8:0d:2c:3e:16:cf:c7:9f:76:62:3a:63:bd:56:89:
         b7:4e:d3:b3:cf:83:55:b4:ad:3e:67:34:93:d5:ac:ea:a9:f9:
         40:08:31:7e:2d:7e:80:bb:91:4c:07:32:15:43:65:1f:37:1e:
         14:7f:4a:b5:c8:41:91:2a:67:05:67:d2:ec:d4:21:91:15:72:
         1a:97:19:1c:1f:45:5d:4e:47:8d:c1:51:4c:2b:ff:70:e8:0c:
         72:fc:01:e9:3f:57:25:e4:f4:da:3b:a4:0a:93:6a:85:ae:d5:
         96:cf:c7:50:dd:cd:74:19:e5:f5:a7:10:ba:ae:48:69:87:73:
         6c:8d:58:52:76:9e:c3:86:ef:97:3f:3d:1e:5d:2a:b1:cf:4e:
         dc:fa:f8:25:65:a9:ef:08:76:4d:3f:f3:7c:5a:d2:b0:e8:34:
         34:27:2c:c1:c5:e2:0b:05:8b:48:81:28:a7:c3:73:ec:73:08:
         a0:b4:8e:d8:28:e1:df:2c:4d:a2:a3:91:26:05:25:2a:65:88:
         0c:cf:43:02:94:e2:3e:1e:34:7b:64:d3:09:c0:eb:be:21:5e:
         af:63:22:56:b0:6c:73:fd:7d:30:98:98:a2:c8:0d:da:d2:2a:
         c5:5f:e7:f0:5f:b2:69:21:bf:c1:f6:1a:94:66:b5:66:84:b4:
         3c:79:dc:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:21 2026 by rpki-client