Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc0e852-b4c3-42dc-86f9-8beadb252c61.roa
File:                     abc0e852-b4c3-42dc-86f9-8beadb252c61.roa (raw, json)
Hash identifier:          zs55gBgZkOTJBxZS5jFsKYtK+5NeU65Iw9iWWgBy1sM=
Subject key identifier:   98:0F:5A:34:5F:65:8F:EC:FF:BD:F8:5D:FA:38:32:BE:85:71:C5:06
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       72CE0B1D1F7FA0F9BF07DDA35791FAAA3886BE4A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc0e852-b4c3-42dc-86f9-8beadb252c61.roa
Signing time:             Thu 23 Jul 2026 03:10:59 +0000
ROA not before:           Thu 23 Jul 2026 03:10:59 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:0b:1d:1f:7f:a0:f9:bf:07:dd:a3:57:91:fa:aa:38:86:be:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:10:59 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=9b77a65e9f4e813b41cd60498ab0f1468cc5d3bd6d25cce388dc2fa8b589c8c5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:f4:38:e4:be:5c:19:71:9e:83:60:ad:0f:
                    f5:82:e0:ea:99:bd:f9:6c:21:ba:75:af:3d:d1:eb:
                    fa:f6:b4:df:29:c7:70:2d:74:a0:92:67:65:47:e7:
                    88:ee:6a:6c:ac:12:82:ec:1d:d9:d5:03:31:d9:fc:
                    a8:72:3d:d0:1b:a3:10:d9:69:d2:15:88:2c:31:68:
                    88:b0:0c:01:9e:60:4e:5f:46:88:ba:0b:b3:b1:a0:
                    08:af:24:ef:a8:99:82:72:44:77:41:1d:8f:75:46:
                    85:86:19:77:fd:02:02:d7:33:03:37:d0:06:da:fc:
                    19:cf:0b:7a:64:5e:66:96:30:91:aa:32:51:5d:39:
                    1e:76:a9:e6:0c:9c:9e:b8:73:1b:84:02:fb:72:4d:
                    1b:da:ba:d6:bf:13:7a:37:12:9a:72:84:58:8f:4b:
                    14:00:de:24:68:ad:34:72:77:56:a2:59:e6:52:c5:
                    64:ff:0b:6b:67:32:04:98:eb:82:3c:10:3e:23:13:
                    b3:3a:f7:3f:f9:57:c2:fc:d2:92:cc:44:2d:77:fe:
                    22:de:be:3d:32:58:ee:34:03:85:b2:16:12:9d:a5:
                    cf:58:d7:d7:8e:14:9d:84:9e:07:a0:95:16:90:05:
                    76:8c:ff:e3:4f:b4:ad:8a:1c:65:22:6a:2e:47:14:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0F:5A:34:5F:65:8F:EC:FF:BD:F8:5D:FA:38:32:BE:85:71:C5:06
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc0e852-b4c3-42dc-86f9-8beadb252c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32e6::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:18:43:9d:62:b6:2d:7f:b4:cf:69:fc:8f:02:b9:77:94:
         42:f6:98:87:78:00:ee:63:9b:5e:da:2f:92:5e:09:7e:d2:16:
         73:47:01:fa:13:f1:6b:0c:4d:99:d3:93:ef:48:8a:a1:63:13:
         8e:e2:74:f5:f1:8d:da:9a:f3:9e:65:d3:3a:14:b0:c0:92:f4:
         f0:49:ae:d9:3f:cc:63:1b:33:6e:1f:7f:6c:08:0a:b9:1a:db:
         02:04:e5:be:63:8c:a5:c2:4a:fe:cb:d7:a8:10:57:fe:12:ee:
         0e:ed:1b:79:79:85:9c:15:6c:40:40:90:a8:45:c7:7d:99:78:
         b8:de:99:7d:cf:b3:8a:52:af:ba:4c:72:aa:0d:d7:71:f9:6b:
         04:0c:d0:e3:b4:f8:e7:51:c8:0a:71:9f:da:9b:62:71:cb:d8:
         68:31:0a:24:f1:f7:b9:08:c8:a5:2f:dc:4e:6e:0f:88:0e:e2:
         71:a7:fb:42:f4:ef:05:5c:4a:33:40:26:bd:ce:fb:d8:f2:d3:
         44:14:e1:76:d5:1f:df:f7:ee:5e:54:c2:5e:b3:e7:e0:50:e1:
         be:76:1d:d9:39:97:ea:4d:e8:f5:79:48:fd:e9:13:81:e7:2f:
         d3:df:33:35:1a:80:ef:27:b8:7b:42:fa:61:4b:f8:ed:8e:52:
         4a:43:3d:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:44 2026 by rpki-client