Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7ae80f3-15ee-4c8a-8c28-973953d51b00.roa
File:                     b7ae80f3-15ee-4c8a-8c28-973953d51b00.roa (raw, json)
Hash identifier:          3XbIzCnZhPxRBTUa2trbUZIKNTmCeoxtQ/gy1Y0OTF4=
Subject key identifier:   B1:41:93:38:E8:1B:63:B6:33:C7:8A:B0:B5:48:9F:09:3A:3D:A7:30
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12F0D87D2BAFAB9EEDC2B8C54822F7CAB15B5B89
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7ae80f3-15ee-4c8a-8c28-973953d51b00.roa
Signing time:             Wed 22 Jul 2026 02:51:22 +0000
ROA not before:           Wed 22 Jul 2026 02:51:22 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3216::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:d8:7d:2b:af:ab:9e:ed:c2:b8:c5:48:22:f7:ca:b1:5b:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:51:22 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=c79b39c3cfdb80f7a15e0a1e4c49a5ce83ab0047bf1eb2cdad62a94accb47b1b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:4e:ee:aa:90:96:29:af:d3:47:ee:bd:6b:
                    ce:c7:72:76:7c:1f:9d:84:62:5e:21:0b:a9:7c:13:
                    42:21:b3:57:8a:51:58:2c:d5:0f:d0:ff:9f:68:aa:
                    f5:13:c7:99:af:d2:99:e1:81:f4:34:61:07:ec:a3:
                    54:19:71:a0:5b:70:8f:29:e1:56:3e:37:9f:94:88:
                    85:69:15:90:91:9e:95:bd:9f:62:29:d0:fb:b2:c7:
                    27:c8:ad:be:aa:51:cd:6f:30:63:5b:ce:ef:9b:88:
                    05:1a:4c:19:a3:ec:83:59:87:9f:4b:3b:19:5d:a3:
                    e6:0b:12:9f:55:37:0f:85:80:ca:c0:00:1b:96:35:
                    96:ee:4b:a5:41:e5:90:a8:ba:c7:c3:f4:a1:0e:37:
                    1d:93:98:de:6a:73:b3:e5:75:82:86:ef:1b:26:72:
                    c6:ed:88:16:ce:f3:a3:9c:3f:2e:b7:43:98:9e:80:
                    d5:54:dd:6d:27:05:59:29:1a:cd:1f:43:f6:2a:f7:
                    1b:8e:40:7f:2e:fe:52:59:77:e5:c8:b1:e7:5f:2d:
                    fe:08:13:05:b5:a4:2a:7b:7c:c9:8b:e6:5b:dd:7e:
                    29:20:e8:13:17:4e:e4:4f:a0:23:81:3d:91:67:43:
                    e4:b0:f8:53:7a:aa:e7:f1:60:6d:7c:a6:d0:3f:be:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:93:38:E8:1B:63:B6:33:C7:8A:B0:B5:48:9F:09:3A:3D:A7:30
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7ae80f3-15ee-4c8a-8c28-973953d51b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3216::/47

    Signature Algorithm: sha256WithRSAEncryption
         05:05:8d:1c:8b:5c:10:4f:3a:b1:29:3e:5b:55:b4:d4:8f:95:
         05:8d:79:ee:09:eb:bf:d4:44:48:53:8d:9a:e6:88:a5:23:90:
         e9:b1:c4:24:20:54:f1:f8:04:5d:29:c8:8f:9d:99:7e:6c:89:
         90:50:24:9a:94:79:35:a8:e9:00:71:ab:d2:38:6b:13:0c:11:
         5b:36:ec:3c:27:bb:b3:a3:e7:55:67:0e:db:ae:ef:f1:10:28:
         7d:e1:c8:59:2e:61:be:f9:94:0b:61:c2:d4:b7:35:25:5b:3c:
         b9:c9:f5:8d:e8:c5:c6:d4:07:70:44:46:9c:f8:88:22:e5:0a:
         44:72:29:3e:20:8f:6c:66:37:8c:2f:b1:0c:19:df:7f:9a:6a:
         29:e0:f0:d0:47:67:74:e7:f7:aa:3d:cd:13:6f:20:82:f9:22:
         eb:b4:2a:87:0c:17:19:81:90:af:c4:d8:03:48:ff:dc:5a:b1:
         79:d9:8a:8c:f6:52:3a:79:9e:82:f4:4e:98:68:6d:12:5b:99:
         0f:da:2a:a8:bc:e4:4f:c8:a7:f9:2a:5e:ce:02:62:09:7c:1a:
         05:f2:68:ef:c5:62:2b:fd:61:18:85:9c:7e:a7:a8:25:4c:a6:
         f4:00:43:45:da:d8:57:19:7b:53:84:b3:52:ec:07:7b:e7:48:
         bf:46:1a:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:06 2026 by rpki-client