Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae78050-fa36-4911-be17-25ef315cdca7.roa
File:                     aae78050-fa36-4911-be17-25ef315cdca7.roa (raw, json)
Hash identifier:          YylROstd+PZHWIj3KHd6O1qHmKnq9PVYOfiw3LwWKI0=
Subject key identifier:   BE:F4:1B:EC:EE:74:DD:EA:DD:A8:0A:FC:98:05:6A:81:D5:37:42:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03468C9F192B7E6FD13382672163D27C74885AEB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae78050-fa36-4911-be17-25ef315cdca7.roa
Signing time:             Thu 23 Jul 2026 11:30:11 +0000
ROA not before:           Thu 23 Jul 2026 11:30:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39dc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:8c:9f:19:2b:7e:6f:d1:33:82:67:21:63:d2:7c:74:88:5a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:30:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=381051b5f71de4940a3cb2940eda1fe6a0d2eb0661b73d0257b13303ac3f9478, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:66:41:d7:6d:e0:df:70:e7:9c:d9:b9:9b:
                    55:2c:08:5e:2f:aa:45:20:e5:16:d1:25:7b:29:25:
                    7e:3b:72:89:d5:f8:c9:5f:b5:40:3a:cd:bc:12:7f:
                    ef:8e:fc:e4:7a:e3:11:81:e6:2b:0c:ff:ea:4d:ee:
                    b0:3f:b6:96:df:03:95:e4:77:3a:d1:74:54:99:1d:
                    bc:2a:39:fa:d4:ff:e3:3a:a0:f3:94:6d:8f:70:4c:
                    ca:9b:bc:3a:40:f4:85:39:ba:cc:dc:cc:0c:44:fd:
                    6b:95:70:61:8c:a2:3c:63:17:23:9c:65:83:b8:54:
                    14:bd:a0:d1:4a:88:06:a7:34:6e:f6:5b:38:00:4e:
                    62:78:fd:56:c7:e2:34:92:7e:0e:93:f0:5a:78:bf:
                    b2:1c:de:3a:b6:a2:8f:04:5c:9d:71:a0:02:d7:bd:
                    92:14:68:6f:57:29:b2:e5:80:0d:f8:88:b5:72:02:
                    1e:0e:72:37:eb:14:4b:13:e4:24:c0:b8:55:d6:56:
                    20:63:7c:4d:72:2b:ff:a6:9b:27:a5:5f:27:d9:1a:
                    6d:9f:24:94:1b:23:8a:98:6e:76:b8:66:3c:4b:96:
                    d8:43:dc:13:53:4c:6c:29:07:6a:e4:cf:6f:41:e6:
                    18:79:53:6e:ae:78:a6:35:9b:89:c3:02:92:c1:6b:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:1B:EC:EE:74:DD:EA:DD:A8:0A:FC:98:05:6A:81:D5:37:42:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae78050-fa36-4911-be17-25ef315cdca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39dc::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:93:7b:81:4c:4a:82:b6:e3:35:9c:3f:ce:4c:48:08:dc:
         10:45:1d:f9:bc:11:92:b1:d1:45:c9:68:0b:7f:d5:11:f5:f0:
         8f:7c:0d:88:68:15:34:bf:c9:f5:09:bf:55:56:c8:a0:4c:e0:
         31:3e:21:99:b4:1c:cb:9d:31:13:35:37:72:af:b5:9d:65:ba:
         45:d9:af:7f:af:0d:ca:05:c6:55:89:9b:21:f2:08:de:a5:34:
         aa:ec:8b:c7:22:5e:e9:0d:ad:d2:ab:c4:58:86:56:6b:46:5f:
         ee:d0:f9:15:0f:6e:f3:ad:92:14:f9:6c:a0:6b:8e:48:76:70:
         7d:b1:aa:d8:5c:7e:e2:dc:0f:ee:1b:e9:fd:26:60:da:23:3c:
         4e:8f:96:7a:aa:0b:98:0d:92:ed:3c:7e:fc:ea:1c:e4:08:dc:
         db:56:11:f2:51:6b:b5:45:6d:d8:2b:12:1f:2b:da:02:4f:96:
         7c:ab:fb:66:b2:dd:90:46:1f:ea:05:10:58:fd:a3:b7:7d:18:
         14:8f:07:6e:72:e1:c5:5a:1e:7b:74:fd:93:50:9b:b0:7e:7a:
         19:9a:9b:b2:4b:65:2b:28:6f:1a:b0:1f:ec:d2:a6:f9:1b:b6:
         e2:d0:a3:95:ee:c0:4f:94:73:cb:44:e3:ee:e4:40:eb:b1:c9:
         55:fe:d1:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:27 2026 by rpki-client