Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d686a9c-b9c5-4a4a-adba-3c7fe26f13ba.roa
File:                     9d686a9c-b9c5-4a4a-adba-3c7fe26f13ba.roa (raw, json)
Hash identifier:          nlfAwQVW0niLMInXzN21a6/fNmfv7IUHhUrjm1etPZI=
Subject key identifier:   B4:7D:BA:61:3A:BE:4A:74:33:04:EB:F2:EA:87:C8:6C:D0:66:8D:FD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       10D5422E774C3BCD7A12AF70270012E586640CB5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d686a9c-b9c5-4a4a-adba-3c7fe26f13ba.roa
Signing time:             Wed 22 Jul 2026 03:10:09 +0000
ROA not before:           Wed 22 Jul 2026 03:10:09 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e62::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:42:2e:77:4c:3b:cd:7a:12:af:70:27:00:12:e5:86:64:0c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:10:09 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=34e9e1ee9d596c9221f186bdb956235e1d64a6222c044777b63c27b5b04fbade, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:42:ee:12:fe:0e:46:f1:50:27:be:ad:1c:
                    f6:4e:f2:33:27:22:2b:8e:e6:5f:9e:dc:d6:51:2c:
                    d7:e7:b8:7e:7c:06:34:d6:4e:e5:0b:38:37:fc:52:
                    76:21:77:ab:be:1d:c7:60:2e:c6:bb:b1:78:98:e0:
                    dd:46:56:10:30:9d:da:d0:03:92:9e:6b:e4:35:a6:
                    52:3e:c4:ef:2a:ae:11:54:6f:ac:3c:4d:12:b3:e3:
                    56:5b:dc:90:41:af:95:9b:57:1e:14:0e:0a:0c:9a:
                    fb:2f:fd:9a:f2:d5:54:82:26:55:dc:5f:6d:71:ae:
                    f4:0a:30:a0:e6:93:a3:a6:c5:f9:5a:12:a4:2b:d8:
                    6a:36:87:bc:0f:e7:1e:c3:78:99:c9:a3:61:e6:c7:
                    32:86:62:e3:b5:e1:62:8b:c2:18:2b:9e:96:7b:67:
                    2b:a4:e9:ca:67:f6:49:7a:4c:d9:ec:06:d1:75:a5:
                    7e:24:dc:76:4c:1b:62:60:df:ef:a5:97:08:57:7f:
                    7d:fc:0f:85:3b:55:61:46:a9:e0:58:6d:17:a3:20:
                    cc:c0:94:7c:8c:df:16:01:d0:0a:7e:cb:7f:a2:61:
                    06:42:e6:9c:88:ef:7d:4e:4a:8f:90:73:20:8f:27:
                    d9:11:f9:8d:8a:b9:98:d9:da:e3:e3:6a:80:24:78:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:BA:61:3A:BE:4A:74:33:04:EB:F2:EA:87:C8:6C:D0:66:8D:FD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d686a9c-b9c5-4a4a-adba-3c7fe26f13ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e62::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:65:ff:2c:31:56:ff:e4:f2:02:f3:00:87:f6:8a:37:8e:
         80:15:46:22:a2:32:a1:14:ef:28:ec:28:cc:40:3f:ed:b0:e6:
         e3:e2:ff:5e:43:b1:9f:63:70:ae:65:5c:57:17:88:c7:9e:09:
         29:f0:27:20:5f:84:c6:6a:fa:58:70:f5:b6:a3:f7:cc:1b:66:
         8a:f7:4d:9c:85:0b:c1:ce:e4:0b:11:70:e7:6b:eb:c1:c3:7f:
         bb:3d:e9:68:94:a8:3e:45:50:63:2e:3e:68:13:af:e5:93:e6:
         4b:9a:6a:88:aa:c0:21:9a:8d:3f:08:01:b0:38:64:ab:3b:d0:
         73:3e:ff:45:2f:7c:d6:ea:1e:15:07:13:6e:5c:09:7b:7b:1b:
         a6:e2:c7:20:6f:6a:43:7b:d1:81:ee:8e:78:5d:d1:84:a1:40:
         7d:30:9f:22:21:0f:cb:a8:8a:46:c5:7d:af:e4:2b:04:8f:1f:
         a5:ca:68:a5:ca:9b:72:9d:73:cc:cb:31:fc:48:60:4b:6e:27:
         af:42:17:2d:4a:8f:70:cf:54:74:38:55:ea:4d:86:b7:cc:98:
         8b:0b:fd:35:3b:9f:66:75:e4:35:68:2a:88:b3:59:53:22:cb:
         69:92:42:31:61:93:6c:8e:3f:04:97:ea:03:e4:23:a2:39:3b:
         d2:b7:fd:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:36 2026 by rpki-client