Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa
File:                     a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa (raw, json)
Hash identifier:          PrlCX9nK98ESwU52NHLV6IcnRDgUJpgmQEd16FxG/rE=
Subject key identifier:   AC:3D:4D:C0:AB:29:F0:9A:D0:C7:64:44:8B:60:76:4F:90:0C:B1:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02FC8EFF55B3C4FF7E2BC59DC4D8C0DE5701C04C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa
Signing time:             Thu 23 Jul 2026 03:50:52 +0000
ROA not before:           Thu 23 Jul 2026 03:50:52 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a0c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fc:8e:ff:55:b3:c4:ff:7e:2b:c5:9d:c4:d8:c0:de:57:01:c0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:50:52 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=894fa4b0c7e00a7069c0f4aa3d758402f6dde3f330ccc2826437f5c0845b73e4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:bf:5e:b1:21:d2:0e:b9:d6:e6:95:35:f4:
                    cd:f9:bc:e1:97:f3:3e:86:ca:fd:3e:76:5d:50:b2:
                    ce:e2:78:81:dd:49:07:63:20:8d:ab:57:50:71:8f:
                    61:71:91:3d:41:b3:50:8a:47:1c:3a:cd:b8:95:9b:
                    de:9a:84:32:c6:83:69:f3:bd:eb:84:aa:c0:42:d8:
                    87:c6:5e:2c:03:0f:47:e3:d4:7c:b1:71:3f:39:0a:
                    ef:af:8b:6d:11:02:f0:9e:6f:52:6e:1e:d1:c0:a9:
                    18:91:ba:e2:6f:6d:df:c9:39:40:3c:b3:29:e4:eb:
                    8e:2f:3e:e9:14:a8:25:2d:be:41:41:21:62:b9:98:
                    9a:25:9e:d2:29:84:bd:07:de:06:31:c2:35:db:1f:
                    91:7e:a5:3e:c7:98:11:32:eb:80:19:96:23:cc:c8:
                    fe:6c:4f:5e:5e:a8:a6:76:0e:8c:3d:04:53:3a:9e:
                    45:9d:d0:8c:ca:61:e7:5e:85:0f:74:ec:88:57:a9:
                    e0:cd:36:c0:d6:22:65:4c:13:63:fb:90:18:1a:dc:
                    cc:f2:d7:62:ec:37:d7:0f:70:6b:2b:4b:1d:08:0f:
                    59:d6:13:90:36:62:4b:b6:67:77:b4:90:36:a1:07:
                    4a:76:43:69:44:60:81:6f:14:f7:a3:9f:34:72:7b:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:4D:C0:AB:29:F0:9A:D0:C7:64:44:8B:60:76:4F:90:0C:B1:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a0c::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:58:45:ff:81:bd:dd:5a:9f:2e:ed:12:ac:5a:3b:f8:56:b8:
         53:a6:04:54:8a:79:bf:c6:eb:5b:72:17:e4:72:31:3f:80:cd:
         c8:52:a3:87:4c:07:24:b9:dc:3e:e2:cd:67:29:06:51:aa:0c:
         0e:fa:e5:55:e5:fa:b6:b8:15:ff:ce:19:f5:a7:97:11:4e:d8:
         f6:b6:2d:da:9b:dd:11:44:ac:60:c5:88:50:0a:fd:5d:b8:bf:
         07:76:35:1d:31:99:25:ac:56:58:37:99:36:2b:0c:1c:d4:98:
         20:27:8b:dd:3d:4b:66:bc:03:5c:42:ab:60:a1:25:27:21:5f:
         8d:32:fc:d9:b5:37:36:2e:c6:dc:f2:82:8b:a3:be:c4:8e:71:
         dd:4e:4d:1b:6e:61:45:03:fa:ba:1c:34:ca:48:17:5a:d4:46:
         af:f9:8d:a3:c4:21:d0:d5:39:cf:9b:cf:0d:c4:87:8f:1f:e7:
         58:8c:e6:0b:f6:43:b1:31:77:db:72:77:07:d1:8f:3f:25:47:
         07:82:e5:a6:dd:ff:8e:6d:2f:17:0e:43:d8:c5:17:3c:22:cb:
         b2:07:00:e4:a7:b7:9e:f9:f5:ab:ba:6d:15:b1:ab:c8:38:65:
         2b:3d:b2:bc:90:3d:a6:04:53:c7:4f:ff:a0:11:71:27:6b:07:
         70:a1:56:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:47 2026 by rpki-client