Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e2ce52e-ea15-41cb-a984-b7d6e3d17e01.roa
File:                     9e2ce52e-ea15-41cb-a984-b7d6e3d17e01.roa (raw, json)
Hash identifier:          EwQAybxKej4nHZUa8j9MV6lmak5qv+4GPdKZfEOAVGU=
Subject key identifier:   DB:A7:16:BE:EA:57:D5:7F:D1:81:5C:38:62:04:A7:5E:D7:6F:EE:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       162193944276632B9A21607CBAE85F6181215FF7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e2ce52e-ea15-41cb-a984-b7d6e3d17e01.roa
Signing time:             Thu 23 Jul 2026 08:51:06 +0000
ROA not before:           Thu 23 Jul 2026 08:51:06 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c54::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:21:93:94:42:76:63:2b:9a:21:60:7c:ba:e8:5f:61:81:21:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:51:06 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=565e7bb74e9a786a9ad492f39f0fae40e476f96f83189113a680d227fec51a81, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:81:a5:ee:78:0e:ea:9b:b6:38:22:0d:45:
                    33:32:9c:bc:a9:ab:95:a2:cd:41:96:24:34:89:a9:
                    3e:ed:7f:17:af:d4:5c:73:2e:d4:d4:d1:a8:09:5f:
                    2e:dd:3e:f1:42:a1:36:18:c6:66:99:f5:d6:0c:04:
                    a7:aa:13:b3:b2:b9:46:48:f0:1a:ca:8a:10:29:53:
                    8c:e1:21:86:64:ee:a8:70:4b:49:68:27:19:a0:d2:
                    85:f9:5e:e3:fe:e9:eb:ac:e7:00:31:1c:ba:f6:aa:
                    e8:ab:f7:a8:e8:10:c5:a0:49:36:34:cb:46:af:d7:
                    74:3f:da:60:97:91:11:86:d9:bc:1a:96:87:d6:75:
                    78:8e:82:a9:b2:82:f0:fb:c3:43:ba:b5:db:b0:f3:
                    98:ed:7e:41:8a:0e:c2:fa:50:df:50:9c:52:bd:3f:
                    4d:2d:56:15:f7:95:b9:93:ef:75:da:b2:1d:8a:f3:
                    ee:a0:85:9e:8f:e0:16:db:12:6b:c1:ac:9f:e6:c7:
                    0e:aa:c1:99:27:b4:80:81:ea:f8:52:38:fd:cb:49:
                    7d:79:48:24:88:c3:87:c0:2c:4d:f0:56:08:f4:6d:
                    ef:9a:a4:a4:b1:61:42:73:6e:12:4d:06:99:cb:ea:
                    3f:cd:d2:b4:09:69:0f:0b:ec:9d:f8:fb:2a:01:a4:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:16:BE:EA:57:D5:7F:D1:81:5C:38:62:04:A7:5E:D7:6F:EE:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e2ce52e-ea15-41cb-a984-b7d6e3d17e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c54::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:9a:e2:e0:71:c3:f8:4d:ef:32:04:59:25:4e:10:d1:10:43:
         3d:11:3e:36:d6:43:45:d3:f4:6b:41:a1:5a:4a:37:4e:84:a0:
         7f:74:cd:d0:1e:58:18:88:d1:7b:b5:31:c1:ab:90:a7:04:2a:
         a7:5c:ef:f9:ee:94:ce:66:77:0a:ca:84:df:59:9f:9e:88:5d:
         4e:d8:9f:e7:ca:d4:15:6b:c6:84:a3:0f:1b:77:60:7f:d8:b5:
         75:51:61:a6:41:1e:7b:13:6f:aa:f0:9f:a9:5d:e7:bf:14:78:
         0a:e4:3f:06:c9:9d:5a:3e:68:83:6f:3a:75:6c:ba:fd:fb:13:
         aa:2b:b7:1f:b0:57:1a:24:5b:2c:36:9b:8f:48:89:46:5f:c3:
         82:bc:c3:bc:fb:60:c0:28:29:0e:fc:09:8e:5b:ff:bb:e9:61:
         06:78:13:14:9d:44:75:f9:d7:d4:56:21:e0:1e:b1:f2:b8:0d:
         09:a1:b5:07:87:7d:ff:9d:6c:c3:1c:97:6e:b8:a7:92:89:ba:
         02:f4:2f:fd:a9:85:4a:b2:9f:fc:1e:22:e4:06:14:18:ff:24:
         64:8d:fa:51:f8:08:55:f3:c6:3e:91:10:77:9a:60:32:8b:33:
         a4:90:e7:6b:d4:fe:02:ed:21:3b:b7:c8:c0:8a:01:ea:77:7f:
         44:e6:9d:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:44 2026 by rpki-client