Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8f2b44-09b2-4cb2-9481-170acacb35de.roa
File:                     aa8f2b44-09b2-4cb2-9481-170acacb35de.roa (raw, json)
Hash identifier:          RD14DcL4MNKMqDyvVZ3j1XVc1VojR8nrLjIh8468xzM=
Subject key identifier:   AD:A2:AC:11:30:CF:4E:1D:2A:C1:40:B2:FB:38:F9:B8:2C:6B:40:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       223079D80CBF4B7805AAF5CA2823772AD026BD49
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8f2b44-09b2-4cb2-9481-170acacb35de.roa
Signing time:             Thu 23 Jul 2026 02:41:26 +0000
ROA not before:           Thu 23 Jul 2026 02:41:26 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:79:d8:0c:bf:4b:78:05:aa:f5:ca:28:23:77:2a:d0:26:bd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:41:26 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=3c0d00e2b309059b34354514e30f39780ede1e034128bce25c438610b0cdb7b7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:53:78:79:23:77:0c:da:ae:c3:0d:82:eb:
                    b1:78:fd:d8:4e:fb:ff:e2:b3:d5:4a:59:6d:f2:6b:
                    64:5b:44:88:59:a6:3b:4a:3f:05:da:ee:00:fc:63:
                    36:20:7b:47:47:b1:b8:24:db:64:5d:88:98:57:6d:
                    d1:6e:cc:f1:ee:94:8e:95:ba:1f:4b:bb:6f:21:42:
                    92:5e:3c:66:f3:d5:58:c9:c4:3d:8e:30:df:b0:d3:
                    1c:ce:1d:37:56:8a:55:40:6e:d6:cf:b2:16:cf:46:
                    bc:de:69:85:2a:07:91:ed:ed:e6:33:07:0c:73:93:
                    9a:f2:2f:92:f8:33:c5:7d:58:45:a7:78:4c:5b:a0:
                    76:b9:bf:78:da:ab:e3:13:cb:53:e5:d1:d5:eb:96:
                    a2:af:a3:5e:1e:16:0c:2f:b3:c7:f3:44:dc:70:15:
                    11:16:0b:33:59:33:d1:9a:ed:a4:d0:06:61:cc:08:
                    05:06:1e:5c:e4:ae:29:96:2d:ac:2d:7c:cf:df:7e:
                    4e:b2:23:8d:ff:d2:bd:7a:99:fd:33:36:ca:e9:c0:
                    8a:74:a8:28:ae:bc:a3:ea:fd:38:d5:b8:02:98:d8:
                    c3:ab:4c:47:a0:03:41:04:2b:65:f6:50:e3:9d:23:
                    43:11:1c:df:ca:0e:bc:b2:49:4c:33:8f:41:4a:96:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A2:AC:11:30:CF:4E:1D:2A:C1:40:B2:FB:38:F9:B8:2C:6B:40:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8f2b44-09b2-4cb2-9481-170acacb35de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:d2:4b:86:1a:4e:d3:48:c8:21:81:41:08:19:10:50:71:
         f7:41:2a:fa:8b:29:15:f9:b6:c0:d6:37:b7:01:4e:27:62:4f:
         7a:1e:30:e8:95:d6:73:d3:a1:a3:b9:3c:42:3c:0b:8f:c9:5f:
         0c:29:bf:68:67:97:d0:24:78:c7:f5:46:45:af:c2:de:e6:c6:
         d8:59:e6:d1:7a:ed:40:61:00:93:9d:1e:0f:a4:cd:21:c7:24:
         b0:c8:d8:39:79:a8:af:ab:a8:c8:4e:17:52:23:e6:f6:86:fb:
         c2:3e:64:3e:89:47:7f:ef:67:42:0f:f9:03:f6:6b:58:d3:25:
         b5:38:9c:1a:bb:29:d7:8a:61:7e:1c:57:b5:69:37:2c:9b:e4:
         bf:2f:cd:3d:d6:70:a0:de:24:78:1b:f0:cd:34:a9:82:e8:64:
         40:4f:46:a1:e1:5d:5a:8b:40:53:47:62:d0:f5:12:30:7d:93:
         f6:9f:c0:d0:a7:99:83:39:ca:f6:aa:a9:d0:ee:57:b6:97:2f:
         70:95:ac:f7:e0:3e:68:c4:9a:35:de:5d:73:7c:7e:8c:71:47:
         a4:d2:7f:99:b2:8b:b7:e1:e3:bf:28:cf:47:ff:f9:7b:5b:5f:
         17:bd:2d:ce:dc:37:b3:3a:53:68:c3:7f:ae:e1:4c:8a:11:dc:
         61:75:a9:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:31 2026 by rpki-client