Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6c183b4-5f22-4089-9011-5367503ec238.roa
File:                     a6c183b4-5f22-4089-9011-5367503ec238.roa (raw, json)
Hash identifier:          GNlVpg5MkVZ6Fr1v+d6g2nUZeUzMl1CeSWWsKykpbxo=
Subject key identifier:   DA:6A:B2:56:DC:2A:08:42:58:32:49:3A:10:EE:08:BF:8C:FD:D2:F0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6450130942F0632FC540420C6384EB7CBB5F8AF6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6c183b4-5f22-4089-9011-5367503ec238.roa
Signing time:             Thu 23 Jul 2026 11:12:02 +0000
ROA not before:           Thu 23 Jul 2026 11:12:02 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e20::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:50:13:09:42:f0:63:2f:c5:40:42:0c:63:84:eb:7c:bb:5f:8a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:12:02 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=de68334155b71d961c46b8154cc3b50c5e407c04aaf56377b32210dbce14d17c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:e8:bf:97:94:6b:00:1e:a2:cf:2f:ae:08:
                    f1:55:92:ac:2a:d5:1a:3b:4e:af:e7:3a:d1:c9:71:
                    cb:f2:3d:3a:1a:92:ea:5b:74:a7:d2:c5:b7:99:b2:
                    b7:12:c2:a9:72:40:20:32:1b:b3:14:69:a6:c7:75:
                    f1:e7:f5:97:79:a4:10:c2:b6:e3:d9:72:de:3f:d1:
                    98:1c:82:82:ad:a1:5c:3f:64:f8:ed:08:28:e0:b4:
                    29:b7:93:cb:2b:7d:41:8e:19:91:8e:8c:a7:c2:b5:
                    ef:ea:20:3e:2e:b3:a5:a7:a1:c0:d2:7c:75:9b:9c:
                    ed:a7:47:4a:f0:9c:f7:51:bd:73:38:2c:b4:4f:e8:
                    dc:a5:11:66:14:ec:d9:7d:cd:82:13:03:c5:47:bd:
                    d5:29:fe:1a:e1:02:91:0c:80:72:9b:ea:2c:81:f5:
                    50:9c:9e:92:2d:a0:5d:23:cf:0f:14:3f:0a:ae:01:
                    03:18:e0:b4:1b:55:d5:ff:7e:64:1e:95:29:d2:52:
                    30:ce:b8:b6:82:c2:f0:9d:16:7f:94:0f:bd:53:23:
                    9d:0d:d4:6f:98:bc:ef:e6:c0:d5:6c:bb:0a:80:2d:
                    bf:97:34:ef:3f:56:01:4f:d1:c4:1d:aa:c0:73:da:
                    42:ea:8e:4f:8e:12:62:4a:f3:87:ac:1f:15:25:7c:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:B2:56:DC:2A:08:42:58:32:49:3A:10:EE:08:BF:8C:FD:D2:F0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6c183b4-5f22-4089-9011-5367503ec238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e20::/45

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:b4:db:01:ef:59:8f:58:1d:4c:b1:04:0a:97:cb:40:8d:
         2c:13:20:3e:c7:de:36:64:c1:85:82:1b:1f:63:b1:f2:6d:79:
         87:ea:d4:84:4c:64:e6:8c:2c:c4:6e:6b:19:f5:30:46:34:d1:
         2e:86:ff:b1:c6:35:11:ac:c7:71:05:02:33:db:10:2e:f5:48:
         77:c4:bb:d1:e4:bc:af:7f:cb:78:0c:16:1b:4c:0e:54:a1:f1:
         b7:51:1e:b7:d3:8a:a6:52:9a:08:48:ba:06:39:d3:cd:c0:52:
         0f:e6:f9:63:bd:83:ae:31:d4:23:ed:4e:ec:50:09:59:88:9d:
         37:d2:92:f0:4f:1c:13:ae:ae:42:0f:5b:59:b9:06:26:d9:bc:
         f8:06:99:bc:4c:42:bc:76:56:1d:23:2b:14:21:e7:16:ee:0d:
         56:a3:7e:73:41:d9:ef:05:ff:3b:21:0d:2e:6a:17:5f:70:63:
         0b:86:00:46:7d:ed:ca:63:b6:b9:40:3f:2c:f1:cd:99:de:a8:
         34:80:da:53:59:13:e9:3f:44:7b:de:85:bb:d1:24:f3:79:31:
         8d:f2:13:cd:c1:72:a7:b1:ed:2c:a8:c1:c0:c1:86:95:b6:b8:
         60:ca:df:91:52:3d:ca:cc:ef:89:f2:55:31:ba:9e:00:a7:97:
         67:34:23:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:02 2026 by rpki-client