Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab4215a6-743f-4255-989b-f539208e94f7.roa
File:                     ab4215a6-743f-4255-989b-f539208e94f7.roa (raw, json)
Hash identifier:          QxeL+H2EJkweLFAnY1tcTkkweQ8QQMw+Zh/BXKHJY7I=
Subject key identifier:   AF:57:CF:47:07:FB:00:E1:70:3B:09:DD:93:F1:F0:B7:07:80:D0:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7005FA2263E21E84B2BFD92460CB03D90C77EC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab4215a6-743f-4255-989b-f539208e94f7.roa
Signing time:             Wed 22 Jul 2026 00:40:05 +0000
ROA not before:           Wed 22 Jul 2026 00:40:05 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2150::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:fa:22:63:e2:1e:84:b2:bf:d9:24:60:cb:03:d9:0c:77:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:40:05 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=79e9bfe1aa08fc15f7d3e020d57c0b9965ca2a526a5c6a92a213760f6d4f93a5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:bf:f9:20:f9:9c:84:57:7e:10:e1:61:05:
                    4b:6b:15:0c:3f:1d:fc:4b:f8:3d:85:3a:b7:ac:41:
                    c2:cc:40:a1:da:54:f2:08:c8:aa:8b:6b:67:82:6f:
                    93:6b:3a:32:7a:ab:99:df:c0:c0:7d:0a:8e:3d:9b:
                    7b:e1:6b:74:21:99:17:36:03:19:90:56:44:4d:a6:
                    2a:a3:e9:f6:1c:9a:b1:50:7c:33:66:5f:70:33:a9:
                    09:3d:1b:e1:86:b1:81:bb:8b:fe:5a:4d:ae:21:23:
                    cf:2d:75:62:29:26:52:83:af:4d:2d:da:82:f9:47:
                    96:d7:6f:23:e9:76:c5:5a:b2:7f:8c:40:c0:85:a0:
                    54:65:8e:73:3a:8c:20:48:7d:06:6e:45:0e:ee:2c:
                    94:af:21:0e:68:cb:fd:6a:2e:49:de:33:c3:e5:07:
                    f5:db:3b:82:49:df:46:72:84:30:34:3d:43:e9:46:
                    d2:b3:6a:77:bb:ad:dd:31:34:62:c1:36:42:39:d5:
                    8f:a1:3e:59:6a:4a:69:4e:d7:80:55:0f:6a:62:43:
                    75:09:96:e8:2b:ed:4d:50:15:70:5e:2a:41:f7:74:
                    7c:1a:49:8a:1a:79:0d:2c:06:e9:5f:ab:2e:0d:51:
                    f5:fb:19:22:ad:99:a0:0e:4b:71:a7:4b:cf:68:21:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:CF:47:07:FB:00:E1:70:3B:09:DD:93:F1:F0:B7:07:80:D0:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab4215a6-743f-4255-989b-f539208e94f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2150::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:11:4e:a7:f7:10:94:0e:81:6e:99:78:42:67:ac:a0:49:e9:
         73:2b:a9:68:97:81:e2:1b:c1:b7:9e:08:d2:0c:f7:83:04:30:
         6e:6a:fc:5e:b7:44:f5:62:5e:d1:0f:2a:31:ee:55:24:10:3b:
         09:4a:6e:6d:ff:c7:47:ce:00:65:20:ce:4b:f1:9f:39:ed:58:
         71:00:8f:4f:84:f5:4f:0b:33:c3:eb:a3:0b:b6:56:d4:08:93:
         80:3f:86:64:97:cf:96:b2:57:35:9b:1d:96:9e:74:63:2f:55:
         da:ab:65:78:fb:06:db:38:a2:de:65:ef:12:94:8d:53:20:ce:
         6b:68:6c:c2:c5:1a:5f:8b:8f:4b:98:b3:99:5b:6b:7a:3f:78:
         8c:42:87:cc:47:91:59:87:bd:cc:dc:28:ba:8a:2e:b7:54:e2:
         36:a4:20:0e:d5:f0:39:fa:7b:2f:3f:22:cb:4f:6e:18:08:30:
         d2:cc:e4:12:a2:a8:04:c8:e7:4e:13:08:5a:c7:86:4b:55:8c:
         a9:24:6e:a4:57:86:d1:4d:47:50:5c:ca:ba:7b:77:7a:a3:96:
         af:09:25:26:1b:35:84:79:6e:b1:c1:c0:7b:aa:36:5a:d7:7e:
         14:26:2e:5c:4f:07:d6:99:c8:d8:75:84:e8:24:a0:05:3f:ab:
         53:d4:2a:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:37 2026 by rpki-client