Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f1b20f8-4b4f-4335-83f2-daf93b5bf39f.roa
File:                     9f1b20f8-4b4f-4335-83f2-daf93b5bf39f.roa (raw, json)
Hash identifier:          y5eXv6wMLd5Fn/RLIHqCTgGLj0aCEjpRMj50AGu3URc=
Subject key identifier:   1F:A3:55:37:12:A2:7A:83:5E:0F:95:63:06:B0:32:63:F5:6C:2F:2D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       089A1BB2C79121BDCFE2C567166BAD4DA1493185
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f1b20f8-4b4f-4335-83f2-daf93b5bf39f.roa
Signing time:             Thu 23 Jul 2026 01:41:12 +0000
ROA not before:           Thu 23 Jul 2026 01:41:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a60::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9a:1b:b2:c7:91:21:bd:cf:e2:c5:67:16:6b:ad:4d:a1:49:31:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:41:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=d7e146270f50c8d0c9c8f441bafc45238a63d8f8bff242b56124d4782e7681a0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:90:24:96:5f:98:3a:59:05:77:f7:7e:2b:
                    1d:66:7c:9b:cb:49:b8:93:a1:e4:ab:77:f3:2d:17:
                    dd:0a:9e:80:59:30:44:80:80:4c:88:c4:fd:ca:d2:
                    bc:a7:3e:e7:f0:74:26:75:b0:b1:80:e5:4d:a8:c8:
                    00:f4:14:7e:c6:04:08:60:ab:fd:9b:fb:12:19:88:
                    ea:59:92:de:3b:f3:8d:ac:06:c1:86:f0:7f:cf:26:
                    04:8d:6d:db:ce:86:ef:23:b0:28:fd:7d:c9:00:aa:
                    1d:26:1e:34:b2:c6:10:33:ca:6a:64:3a:d6:81:9a:
                    a4:27:0c:2f:e7:99:07:5d:06:6f:f5:79:8a:38:6e:
                    0d:f0:7e:fa:04:25:20:df:19:79:1d:ea:4e:2c:53:
                    03:f6:c1:a9:4c:83:eb:bb:5a:14:55:65:5f:e2:78:
                    65:5d:e7:10:8e:2b:d9:e9:19:4a:e8:7d:06:62:7f:
                    b5:37:90:5f:18:cd:66:5f:47:e1:dc:61:2b:61:55:
                    69:15:8b:81:0b:59:1c:f0:0d:18:b5:75:12:55:cf:
                    da:b0:18:be:7e:96:77:b4:b5:2f:07:63:7f:b8:bb:
                    22:1a:5c:2c:ea:a4:e0:4b:9e:fd:14:63:7f:53:e6:
                    4b:fe:92:a5:9f:9b:df:81:be:30:dc:ce:ab:4c:cf:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:55:37:12:A2:7A:83:5E:0F:95:63:06:B0:32:63:F5:6C:2F:2D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f1b20f8-4b4f-4335-83f2-daf93b5bf39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a60::/43

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:43:53:b0:28:40:4e:c2:be:d9:eb:99:62:d8:61:fb:16:
         f9:b1:3e:06:23:5e:d4:1f:bd:a2:e9:8b:d2:fb:71:41:4d:20:
         c0:da:48:15:db:c8:f1:e5:a2:ea:6c:cf:ce:48:da:8a:22:f5:
         50:5e:a9:a6:91:74:0d:29:ae:07:1c:8b:d7:5c:a1:66:0a:da:
         34:96:31:df:33:bf:bb:c8:44:3a:ff:b1:6e:76:bb:90:a3:29:
         7c:f4:ce:e4:2f:a4:97:b0:34:0e:13:f7:41:10:b7:dd:9f:db:
         c4:92:e7:59:3d:42:3f:11:b0:f7:23:0b:86:44:05:93:3b:7d:
         72:b8:68:52:42:3c:e2:77:1a:ca:e1:05:40:72:2b:79:48:8e:
         01:25:04:b9:6f:e3:df:81:23:00:0f:49:15:30:97:b8:a7:89:
         14:e9:cc:96:77:c0:7f:d2:df:33:a2:dc:db:bd:c7:99:df:ca:
         0a:a9:32:78:65:5d:d9:40:54:91:e9:00:b1:5d:b5:4f:50:6f:
         b0:8e:aa:91:5a:df:c8:b5:bf:1c:83:dc:5e:96:84:50:89:7c:
         1c:da:c5:7b:2a:11:eb:eb:91:27:e1:d7:5f:87:33:81:1f:80:
         60:27:2c:cd:05:f1:a3:51:07:bf:89:39:d3:36:45:c2:22:66:
         ec:b7:e0:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:29 2026 by rpki-client