Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2fb10b3-062b-4c89-8f61-004c98025e61.roa
File:                     b2fb10b3-062b-4c89-8f61-004c98025e61.roa (raw, json)
Hash identifier:          eiiCzApMr2ulMurr75vXp03qYSUQA600mOaFyHkMv/c=
Subject key identifier:   39:33:4C:C2:F3:D2:8C:D5:08:47:AC:EC:1C:69:8D:AD:90:7F:AC:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73BB24E41692ACE0754F4E1F07FDC61AC96C374E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2fb10b3-062b-4c89-8f61-004c98025e61.roa
Signing time:             Thu 23 Jul 2026 13:10:07 +0000
ROA not before:           Thu 23 Jul 2026 13:10:07 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3418::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:24:e4:16:92:ac:e0:75:4f:4e:1f:07:fd:c6:1a:c9:6c:37:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 13:10:07 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=76b02e079b7b5750064f791d55a2612b2abb09af81594b880bae8b0ba99cb66a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:9e:d9:1d:e4:da:fe:ef:f1:6a:fc:e0:c9:
                    49:4f:e0:b8:07:ab:69:ff:6e:07:fc:4e:40:71:39:
                    73:98:df:2d:8f:e0:32:1e:f5:bc:64:f1:74:2d:51:
                    f8:36:40:e1:14:5d:25:06:29:93:91:17:a8:ee:e2:
                    68:cd:8d:6c:e5:2f:cb:01:f7:56:10:eb:fd:dc:8e:
                    b5:bd:d9:8c:a2:7a:83:89:a3:86:89:2c:69:c0:ad:
                    2a:7c:48:98:cb:e3:17:d4:21:d8:a0:26:2d:8d:42:
                    9c:8f:7f:ff:0a:81:bd:d1:e2:04:74:55:a5:b2:16:
                    91:13:c2:86:9a:14:46:1f:42:3e:f6:93:7e:44:e1:
                    eb:76:97:80:38:2f:ab:e7:77:ce:af:fb:84:09:79:
                    16:a1:a1:cd:40:bf:7f:c1:f6:31:e2:62:c0:c3:13:
                    69:7a:d6:84:81:2d:fd:06:0c:7e:5f:a6:18:9d:d7:
                    4b:0b:7f:e0:19:7a:4f:2c:81:2d:15:78:18:0b:6a:
                    a5:73:61:a4:e9:d8:20:cc:f0:fb:0a:4d:c0:e7:97:
                    26:3f:df:18:40:cc:00:94:0c:52:ed:ee:4f:4e:2c:
                    f0:3a:c8:dc:3e:3d:11:9f:69:97:95:6e:79:2e:34:
                    d1:96:b8:1f:6f:14:cc:5d:96:ae:77:6f:eb:32:3c:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:4C:C2:F3:D2:8C:D5:08:47:AC:EC:1C:69:8D:AD:90:7F:AC:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2fb10b3-062b-4c89-8f61-004c98025e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3418::/46

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:50:c3:6a:dc:d2:df:9e:79:5c:6c:c6:eb:64:67:dc:95:
         d5:b2:6c:14:d2:83:de:83:8c:fc:15:8c:3b:b7:1c:07:cc:33:
         92:e0:5f:29:ad:5c:83:c8:c8:43:9b:33:18:33:e0:e4:ae:7d:
         26:27:72:53:67:f0:cf:e7:8d:1e:12:67:bf:87:ee:02:99:64:
         f3:a9:7f:ca:42:27:49:70:3f:4f:2f:6b:b9:dc:42:44:02:0b:
         db:43:dd:f9:0e:42:93:c1:c0:b6:50:6a:90:d5:11:92:12:0e:
         e5:b5:ee:a1:7d:49:0e:e2:04:47:14:4b:3c:69:c8:49:2f:b1:
         5d:a7:97:08:51:8d:54:14:10:11:8f:dc:40:30:5b:36:3d:99:
         f4:98:ff:08:9d:76:17:6a:8a:62:51:42:a0:96:e3:52:01:aa:
         73:63:9d:30:74:d0:2b:ca:2e:01:ec:64:ab:22:89:35:84:49:
         72:69:ec:ee:14:a6:ed:07:b6:0c:7c:8d:b2:79:1a:f9:1c:3c:
         c7:23:c0:e7:d3:16:6e:17:17:77:fe:ab:f9:6f:f5:de:a9:44:
         de:fc:19:2f:82:49:ce:09:52:b1:de:af:59:b8:dd:60:0c:34:
         16:fe:8b:a4:d7:02:20:11:7e:61:cb:45:67:f5:49:1a:04:bf:
         e3:40:88:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:44 2026 by rpki-client