Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa
File:                     b453548e-d252-468f-82a5-37b3e6587010.roa (raw, json)
Hash identifier:          0UC6A0/bfq2sycb1zVIwrTWrWTJ2UHCGSQt7BMawYIc=
Subject key identifier:   39:6C:6F:75:EF:70:6A:FD:20:32:D2:25:61:71:1B:19:82:F8:B5:62
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7C0A2FA4BD18B0EB63269C391D4284AAE25008E9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa
Signing time:             Thu 23 Jul 2026 08:00:11 +0000
ROA not before:           Thu 23 Jul 2026 08:00:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ed8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0a:2f:a4:bd:18:b0:eb:63:26:9c:39:1d:42:84:aa:e2:50:08:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:00:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=a42ec5b30f877bfbfee64fef10de8b1089b64e41e8b6f76b6acdc66e39036333, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:24:3b:50:56:29:b6:00:7d:56:6e:3a:ba:
                    88:b1:ff:26:ba:29:7f:20:f1:cc:65:6e:eb:ef:d8:
                    f4:0e:ba:c0:df:ab:ba:c4:f3:75:6a:c8:ba:be:dd:
                    26:fe:a9:dd:b8:9d:b3:80:c5:4c:31:38:9e:68:84:
                    64:5a:86:26:bb:b0:f8:4f:42:58:60:60:79:49:93:
                    58:33:5f:90:f3:e7:ca:73:68:36:08:da:83:7e:c5:
                    67:a0:18:4c:58:93:a9:b3:74:e9:bd:c8:49:c2:0f:
                    5f:7d:97:a6:60:02:b1:b8:44:dd:42:1f:1f:83:35:
                    6d:ee:9e:95:c9:99:53:70:bd:a5:b1:b6:a9:09:b9:
                    70:f2:be:6b:c1:7a:c6:0d:2a:59:e3:55:25:f2:13:
                    d4:a1:f2:a0:fa:bc:12:7a:19:04:bc:f9:f3:4c:5f:
                    03:28:88:33:bb:e1:79:1a:e3:b9:be:85:3a:a9:fd:
                    bf:0d:b8:dd:ed:80:e1:cc:d8:a5:39:50:45:58:29:
                    67:2b:12:a1:a6:89:1c:8e:13:98:d0:ff:7b:aa:f9:
                    69:30:2b:6d:50:7c:85:f4:96:77:28:bd:eb:7e:97:
                    ee:40:41:a7:1e:6a:ed:37:ce:d9:a5:9b:fb:87:82:
                    b5:7f:d0:da:70:f2:65:6d:3a:21:4b:f0:01:9a:e1:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:6F:75:EF:70:6A:FD:20:32:D2:25:61:71:1B:19:82:F8:B5:62
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ed8::/46

    Signature Algorithm: sha256WithRSAEncryption
         4c:92:14:f5:50:a0:1e:53:35:78:c1:fb:a8:04:22:3a:91:f4:
         f8:3f:28:72:2a:d8:ab:05:bd:14:c0:0d:f9:a6:88:7f:c4:3e:
         59:49:98:00:e4:5e:e8:3a:62:24:f2:bb:91:62:4b:3e:35:bb:
         54:94:ac:d3:ff:24:9c:61:c2:a9:42:59:e2:5b:c7:d7:b7:0e:
         d5:a2:d1:66:aa:7e:e9:e8:cf:b4:45:33:e7:2a:08:73:4e:44:
         9c:b4:8f:eb:6f:89:95:4d:9b:21:52:68:5c:1f:5d:0a:7e:66:
         f6:94:86:7d:36:14:79:65:8a:fa:b7:a9:c9:75:47:69:3a:64:
         d6:5f:ae:69:b6:9f:d3:c0:02:08:15:55:a1:ae:a9:28:bc:9e:
         5a:e7:64:4c:da:ee:91:a4:71:66:28:ad:88:85:07:60:73:ff:
         72:fc:19:c2:04:f5:be:92:34:b6:a7:59:de:ae:43:ac:91:f0:
         5b:b3:c4:05:ac:da:b0:3b:aa:ff:c5:42:01:54:7d:3e:77:66:
         59:3c:9c:cd:67:16:56:e1:4a:2b:79:b3:f9:78:74:ce:7b:f7:
         4f:24:8c:6c:7d:7a:af:f4:08:a0:2e:b3:97:2e:e2:5f:32:d4:
         9f:b2:7b:ec:69:1b:b0:90:87:77:47:d0:e1:68:22:49:4b:3e:
         73:36:e6:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:10 2026 by rpki-client