Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ec20ae6-106c-4a4a-8659-e3f4aa075b81.roa
File:                     9ec20ae6-106c-4a4a-8659-e3f4aa075b81.roa (raw, json)
Hash identifier:          9bBnflYbjvZRvNhmr/5JTwEIOao2p/CViC426p4bsQU=
Subject key identifier:   96:57:EB:5D:66:0C:9E:0C:B6:AF:2A:65:5A:59:DD:CF:97:13:F5:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12D091EF4B08964AE1BD88ABA1ED23F62B71FAFC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ec20ae6-106c-4a4a-8659-e3f4aa075b81.roa
Signing time:             Thu 23 Jul 2026 09:41:04 +0000
ROA not before:           Thu 23 Jul 2026 09:41:04 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fd4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:91:ef:4b:08:96:4a:e1:bd:88:ab:a1:ed:23:f6:2b:71:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:41:04 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=e130707626f62a70191baf969fb5b6d7306b08d9c33d2eee1c1d4f7279d92ff0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:67:b7:fb:8c:38:46:74:4e:37:b4:b0:14:
                    f3:9b:65:b0:c7:db:01:b8:29:b1:f2:27:21:82:1b:
                    28:41:aa:51:e6:ec:ff:10:56:55:a5:65:56:03:36:
                    43:11:26:e0:71:df:b7:e5:02:10:3f:48:56:16:83:
                    b2:c5:12:08:88:ce:a3:cc:68:23:82:bd:af:67:c4:
                    14:df:cf:23:29:2d:11:af:8c:77:61:01:49:93:94:
                    18:1e:02:c8:86:bf:40:4b:99:df:e5:74:19:58:bc:
                    89:fc:f5:cf:b5:5d:35:b3:82:ee:99:6c:1c:75:c7:
                    b6:ae:0d:e5:02:fa:33:f7:f7:2a:62:78:21:0f:a3:
                    19:54:6c:f9:03:6f:6a:4b:c9:42:84:93:13:b5:e9:
                    77:ad:2d:ea:4b:be:82:31:be:0f:9c:10:42:09:63:
                    34:a6:06:48:53:3e:3e:3f:a0:87:1e:f6:4a:bd:84:
                    d7:03:0f:bd:a8:7c:1c:d1:bf:47:3f:2b:c2:aa:f7:
                    47:70:c2:5c:c6:65:99:98:25:3c:2e:fe:61:21:7a:
                    16:c5:00:9e:9b:d7:3f:e7:50:f9:3b:e1:15:b5:0f:
                    53:77:ee:20:fa:ac:cc:33:bc:53:81:ae:34:d3:6e:
                    53:1f:66:02:00:b4:81:6c:e6:a4:f3:26:3c:e1:df:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:57:EB:5D:66:0C:9E:0C:B6:AF:2A:65:5A:59:DD:CF:97:13:F5:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ec20ae6-106c-4a4a-8659-e3f4aa075b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fd4::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:09:35:5a:2b:89:4c:8f:d3:4f:57:58:84:65:5a:86:c4:1c:
         59:bf:90:33:b9:ae:b6:e8:bd:ee:1b:b7:89:ee:a0:7c:69:32:
         ae:cd:c5:df:45:38:e1:91:b3:40:c2:15:6c:eb:5c:83:82:8d:
         42:07:db:93:32:b0:aa:9b:40:95:cd:94:dc:5d:49:b0:b9:06:
         50:be:f9:84:9f:c1:0d:5b:d4:fb:b4:85:50:6d:93:30:ce:02:
         57:ff:88:99:28:47:4c:89:a5:f9:41:4d:80:c8:8c:41:1e:2d:
         3f:e6:e8:89:ab:3d:33:2e:ce:d4:fb:fc:af:c7:17:32:02:4e:
         3b:da:52:04:7f:4b:47:d9:ad:d8:cb:b1:19:6b:3c:3e:fb:3e:
         17:b5:b7:c3:b9:c9:c1:d8:46:cc:5c:8f:f4:b9:77:47:93:a9:
         f2:ff:a7:ae:6e:01:f4:11:4d:88:94:bd:b3:29:7b:39:dd:5a:
         bd:ad:c7:7e:11:f3:ec:e6:65:a4:f1:77:f0:ae:95:ff:3e:32:
         6f:96:7e:76:a4:93:e4:36:9c:ad:07:81:a6:84:90:e6:b8:66:
         2d:41:96:88:3f:ef:b2:23:0b:16:23:ff:83:bd:2a:01:c2:39:
         4f:25:7f:d5:99:89:90:ba:b6:40:1b:da:57:ac:ed:9a:c6:77:
         76:f4:b8:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:42 2026 by rpki-client