Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b88a6bd8-9190-4f2f-a726-a7d0fb3a1f28.roa
File:                     b88a6bd8-9190-4f2f-a726-a7d0fb3a1f28.roa (raw, json)
Hash identifier:          6Wdl+YTmZ4cHmEKl52fzTt4fMZazqtnFmlYNdCwVaLg=
Subject key identifier:   07:23:0D:24:30:50:21:36:00:83:B4:88:B9:FB:ED:DB:F3:79:16:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F9E97E300356AF85515A76A8C2BEA79A1DA15F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b88a6bd8-9190-4f2f-a726-a7d0fb3a1f28.roa
Signing time:             Wed 22 Jul 2026 02:30:41 +0000
ROA not before:           Wed 22 Jul 2026 02:30:41 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9e:97:e3:00:35:6a:f8:55:15:a7:6a:8c:2b:ea:79:a1:da:15:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:30:41 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=6365de82de1397d2ea52ca7d16a6a86dcdbbcb010d816a75d8f8ab845528a244, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:21:6f:1f:1c:76:49:42:a6:f9:94:30:cc:
                    a0:92:38:f5:97:a1:99:3b:2f:b5:77:ea:25:06:19:
                    f3:ec:5d:94:f3:93:32:10:5d:72:73:8e:ad:39:51:
                    35:d5:37:d7:ab:e6:34:94:01:1d:e1:fd:d7:54:ec:
                    48:2a:1f:56:4b:cd:3d:bf:47:c3:c1:22:00:25:ae:
                    0f:54:0b:57:51:ed:81:87:00:16:04:81:64:ca:8d:
                    67:19:41:1f:ce:a3:dc:e8:6f:23:1a:98:0b:e8:37:
                    29:c0:f9:78:ec:a0:58:88:83:e5:9d:42:c6:18:2f:
                    63:c1:72:73:07:94:c1:de:4f:4f:31:9a:cc:8d:ff:
                    d9:ce:01:bc:d2:67:b2:ec:b0:db:48:e8:d2:20:6c:
                    67:94:b6:92:98:89:e3:f6:b8:07:de:62:c0:cb:b1:
                    b6:3e:87:69:97:74:74:54:54:e9:4b:a6:65:a6:ed:
                    4a:79:02:45:2f:b0:e4:5e:9c:00:4b:b1:6c:1c:2a:
                    a0:f0:65:97:3f:f2:0f:df:c2:5f:0b:12:96:30:f9:
                    01:71:e7:88:f8:e0:8a:06:ec:30:f3:2a:d8:c1:35:
                    50:e2:ff:67:d2:fd:9b:05:4d:91:30:a8:03:a8:3e:
                    04:14:bc:3d:f6:e1:be:d5:1b:6f:7e:53:42:93:0c:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:0D:24:30:50:21:36:00:83:B4:88:B9:FB:ED:DB:F3:79:16:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b88a6bd8-9190-4f2f-a726-a7d0fb3a1f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b02::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:cd:92:60:c4:22:a4:79:24:08:81:6d:49:f0:0c:1d:4e:
         9d:52:9d:37:a2:6e:23:9b:af:8a:80:11:aa:b3:80:98:48:cd:
         c4:c3:11:0b:53:1f:3b:49:bf:57:b6:f0:8b:18:25:f4:8d:74:
         71:b5:09:98:5d:a1:0b:0d:3c:88:eb:a3:b2:11:dc:b4:05:3f:
         11:12:29:30:9e:1a:03:76:73:0f:92:4a:00:7b:f9:97:1f:e8:
         6c:bf:79:1a:84:79:cc:a2:0b:51:a6:d5:9c:f5:1e:d8:fa:eb:
         d1:9a:5e:40:58:94:a0:97:7c:87:48:c5:fb:06:66:36:6d:46:
         e1:ff:06:4e:c7:c1:4c:75:e2:97:27:71:b8:73:93:b4:48:08:
         94:e2:89:bf:04:91:dc:ab:d4:a8:77:48:0d:d4:07:bb:f6:f7:
         70:e8:f3:cb:2b:ab:b2:be:78:75:28:dd:bc:31:a5:b5:a1:38:
         88:1a:0b:65:c9:38:2a:49:61:44:47:9c:50:2e:99:36:2d:38:
         9e:58:7d:be:bb:ef:2f:8d:e6:5d:5d:4f:cf:5d:44:0b:84:19:
         f5:ba:52:43:1e:28:4f:e5:d7:c4:1f:d7:27:23:06:2e:af:28:
         12:39:df:4d:55:4c:9c:f1:52:c4:d9:28:29:c5:40:57:89:ba:
         ed:f7:c5:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:24 2026 by rpki-client