Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af088030-758b-4141-a251-80678d9124d8.roa
File:                     af088030-758b-4141-a251-80678d9124d8.roa (raw, json)
Hash identifier:          lRDfoqZJUSzJ0Oyi3zwEFYSRBa1/pG4b3Ces3R+xjOE=
Subject key identifier:   EE:37:16:77:B3:B5:0F:DE:2D:28:60:E7:02:91:AB:46:E4:93:3C:18
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46E429A0A604FE2A3BDB8B0AA85C83BCCC1C7CC4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af088030-758b-4141-a251-80678d9124d8.roa
Signing time:             Thu 23 Jul 2026 09:00:48 +0000
ROA not before:           Thu 23 Jul 2026 09:00:48 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e4:29:a0:a6:04:fe:2a:3b:db:8b:0a:a8:5c:83:bc:cc:1c:7c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:00:48 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=f52f14d4fb4813c42ba9f47331e0fd62c4860de5333c5db5d9e728d522740aab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:cc:0e:8a:92:0e:77:64:a1:67:a8:cf:1b:
                    17:d5:3c:2e:0a:9f:14:85:fe:c8:1a:2b:55:52:df:
                    10:23:64:37:55:06:7c:1e:f1:a3:16:33:bc:e1:41:
                    d7:7c:d7:9c:f7:8a:61:6f:d9:d4:a7:b1:9d:ae:66:
                    04:2c:9e:5e:56:8f:76:17:bc:e7:d2:d3:5c:46:e7:
                    e7:2e:71:d3:4b:19:a6:70:3c:8d:ac:bf:68:96:7f:
                    cb:75:d9:43:0c:38:59:78:f2:33:ce:8a:0b:7d:e8:
                    8b:d3:c1:50:94:58:25:84:d1:b3:8d:c1:61:dc:47:
                    3c:ce:9f:8e:2c:d6:bf:4f:20:c4:d1:51:c4:6f:2d:
                    b5:60:15:91:8c:52:25:ba:70:78:4d:6d:fb:2c:80:
                    11:aa:2a:ad:f2:eb:73:b3:d9:da:6c:82:7a:ee:45:
                    f4:bf:bd:ae:5b:9d:7c:b8:35:12:d1:bd:5e:b7:f7:
                    fa:eb:37:51:94:84:18:b4:7e:60:93:9e:0e:d4:3a:
                    40:7e:2a:70:22:f3:3d:49:e6:fe:06:ed:9a:e3:46:
                    7d:77:08:50:10:66:d9:84:76:62:68:4a:ea:f8:04:
                    e4:0a:a0:a3:43:04:6d:75:89:cc:47:95:95:4f:61:
                    f8:bb:58:c8:43:00:77:b8:8e:ad:25:b3:10:4b:82:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:37:16:77:B3:B5:0F:DE:2D:28:60:E7:02:91:AB:46:E4:93:3C:18
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af088030-758b-4141-a251-80678d9124d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         92:74:0a:7a:23:43:8c:de:17:b7:81:b3:92:36:ba:88:23:37:
         08:53:ef:0e:fb:da:7a:34:74:43:d1:4f:6b:2d:ab:64:60:61:
         ee:0f:6a:7c:e7:75:9f:4b:2f:a5:4b:04:14:2f:f1:ba:43:e3:
         31:20:c3:c1:3e:b7:40:4c:00:53:14:db:fc:8d:17:f2:dc:6c:
         c5:9c:4d:a6:ff:31:0d:13:9c:d5:49:23:92:b8:1c:c8:36:b9:
         6e:2e:24:4b:2a:88:f3:29:e4:6a:b5:50:85:40:c0:2a:3a:18:
         b8:8d:b2:11:bc:49:40:20:8c:c4:b2:04:7c:02:c8:29:71:83:
         85:2b:9f:72:d8:13:1c:c5:ba:41:3d:78:49:c9:76:ff:39:e6:
         55:83:02:3d:26:b8:42:e7:84:39:7a:48:6b:0e:f5:16:6c:1e:
         68:87:db:31:8d:69:55:51:b9:66:53:4c:57:43:51:e0:c0:c1:
         7c:82:ec:52:38:0f:76:71:f1:1a:a4:a9:34:40:04:4c:f7:93:
         06:35:f5:06:d2:10:39:aa:46:c4:95:b5:90:98:ae:40:8e:cc:
         a9:73:79:f4:2e:6a:46:1c:c2:be:bf:fc:56:c0:7e:60:6b:65:
         55:4d:f5:05:91:ea:cf:2b:9d:30:95:51:30:7d:c8:57:dd:96:
         12:96:4f:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:51 2026 by rpki-client