Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5a7949f-bf12-49c1-b917-eb54fa353c4e.roa
File:                     b5a7949f-bf12-49c1-b917-eb54fa353c4e.roa (raw, json)
Hash identifier:          v4r7TY7wdX5b7PozteQHKFdR9Bla2VKM/u77doS8n70=
Subject key identifier:   CF:C6:10:A4:07:74:11:E8:F7:37:0D:82:53:9A:3B:61:49:E1:F5:92
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F935303442A03A65A5A14868C34C040AC434FB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5a7949f-bf12-49c1-b917-eb54fa353c4e.roa
Signing time:             Wed 22 Jul 2026 01:50:07 +0000
ROA not before:           Wed 22 Jul 2026 01:50:07 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:93:53:03:44:2a:03:a6:5a:5a:14:86:8c:34:c0:40:ac:43:4f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:50:07 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=8839f02bd9dcb21dbfd010dec45e51015abc84ef9c10e7a264343b4f802f3ac6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:f9:c1:ef:22:e7:80:e4:d4:cb:a6:b2:dd:
                    63:26:73:99:88:48:0d:e1:16:f0:1e:61:49:d8:c6:
                    75:dd:5c:fc:10:b1:e5:06:c0:97:a1:0d:85:c6:a9:
                    e8:f9:21:89:9b:cc:11:a6:c8:3e:3e:d8:04:ab:43:
                    8d:8e:87:5e:98:ae:f3:6d:ab:eb:cd:22:84:d3:a1:
                    85:74:b3:db:1e:94:86:27:b7:ac:5e:f2:64:18:bd:
                    1d:8a:e7:a6:7d:b8:fe:bf:c0:93:20:6f:1a:8f:8d:
                    0b:88:23:28:7d:e4:93:53:1f:2b:c7:84:4d:c2:97:
                    e8:39:4d:c5:46:d6:41:bf:e3:2e:0b:ee:57:ca:b8:
                    2e:f7:0e:0e:f5:c1:e0:a5:57:0d:1f:0f:ca:42:5e:
                    5f:57:28:57:6d:24:c0:57:07:89:eb:7f:6d:90:2e:
                    92:20:8c:4b:22:0a:0c:3c:a3:b7:06:96:91:6d:3f:
                    73:e6:f0:a0:84:c3:5b:53:45:cc:4f:13:ff:6b:78:
                    a3:a6:f3:b8:a6:5a:d9:fc:60:d4:c4:9f:46:65:48:
                    6f:25:a8:f9:f1:6f:00:fc:47:62:65:90:1e:de:33:
                    e6:e3:8a:b8:8a:46:6b:5e:46:aa:4a:40:4f:f9:b5:
                    07:c9:6d:de:12:59:ac:1a:c4:7a:ce:0e:7f:b8:fd:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C6:10:A4:07:74:11:E8:F7:37:0D:82:53:9A:3B:61:49:E1:F5:92
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5a7949f-bf12-49c1-b917-eb54fa353c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:b7:b2:48:8c:b2:72:2f:9f:9a:34:15:82:0b:a0:64:6a:
         a8:9c:e0:ec:a6:71:7e:61:4b:3e:8f:78:af:29:db:b4:26:2b:
         d5:8f:39:f8:0d:69:35:e8:f6:c8:64:9b:5a:6a:8e:af:ee:81:
         0f:98:ce:7c:0e:d3:dd:64:43:9b:5d:b3:3a:28:76:98:18:14:
         83:78:36:da:4d:18:7e:fd:10:37:d4:39:98:5f:de:23:ca:3b:
         ff:e4:73:0a:97:58:fc:4f:8c:a1:0c:ab:26:72:03:ac:42:24:
         b8:0b:47:23:8e:c3:e1:3d:ad:95:21:7d:5b:dc:64:58:db:66:
         73:81:cd:22:40:a6:79:a5:b2:98:23:35:7c:b3:92:2f:0e:1f:
         52:ff:11:98:ed:70:d4:8f:ea:07:f2:c9:5c:6d:c1:3a:91:eb:
         d8:35:04:8a:a1:9a:e6:b9:7e:d6:fc:92:1e:d4:10:70:0e:08:
         93:cb:ad:e6:94:77:b4:a4:13:3d:c0:5e:eb:86:35:d4:1b:54:
         44:55:e0:13:5a:a5:cc:22:ea:25:bb:bd:7a:6b:95:7e:79:9c:
         80:79:f5:65:0e:d2:eb:20:0e:ca:c1:a3:93:65:7d:0c:da:16:
         61:88:f0:70:65:ba:04:ff:ab:9a:b8:c9:fa:ba:7d:af:33:bd:
         9b:69:f0:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:12 2026 by rpki-client