Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0e8e307-d75e-439b-ae64-a0268bcd205e.roa
File:                     c0e8e307-d75e-439b-ae64-a0268bcd205e.roa (raw, json)
Hash identifier:          XiELT4pDMg5JkKhVb8UyBrs/lLpq7BPqe81l7RSNOxc=
Subject key identifier:   FE:A2:E2:73:48:AD:7D:C4:6B:BA:B9:0A:C5:D5:AE:61:39:9D:B2:27
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02142E2006E934F3A495D36394836C0937005334
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0e8e307-d75e-439b-ae64-a0268bcd205e.roa
Signing time:             Thu 23 Jul 2026 12:41:31 +0000
ROA not before:           Thu 23 Jul 2026 12:41:31 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:2e:20:06:e9:34:f3:a4:95:d3:63:94:83:6c:09:37:00:53:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:41:31 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=91e5b571090dced3d558a1d06e47662e2b77ab2daa21d8e0ede9cd5a5166cef5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:51:ec:bb:9f:fd:39:b6:a3:d9:c4:4f:19:
                    63:fe:70:5c:36:d6:c0:3f:44:43:3b:e1:56:6a:57:
                    82:d5:43:9d:ed:f2:8a:17:4d:f5:c2:85:7f:95:0a:
                    3b:4f:8c:bb:aa:34:93:7c:bf:3e:12:82:81:23:51:
                    bb:ef:8c:58:1e:b4:1c:c4:c2:b6:ee:08:53:d1:c2:
                    1f:13:c7:55:5c:af:51:dc:6f:e5:a6:13:ec:a2:2b:
                    47:bf:ea:82:97:72:9e:19:6a:59:45:c5:ba:8a:b0:
                    0b:24:69:e6:d9:71:32:a1:f9:23:16:e1:43:62:d9:
                    83:7c:ae:a4:ad:15:37:13:53:d0:ff:74:2a:47:5b:
                    9a:94:a4:94:5e:cf:48:68:8a:dd:1b:d9:81:70:3f:
                    db:f6:73:29:ff:fb:ad:22:16:4e:3f:0a:b7:bc:60:
                    ef:6d:8e:2c:19:d5:d0:62:10:2f:32:9b:9b:18:2f:
                    74:ea:74:2d:02:08:cc:ef:56:e7:95:d0:0e:d7:11:
                    fb:4c:9a:c6:2b:ac:2e:74:4b:59:79:3b:65:18:1b:
                    c8:11:e1:40:6e:07:04:94:af:ac:3b:74:ad:e5:3d:
                    ea:f1:bb:6a:5e:38:e5:01:e7:5f:2b:65:82:3d:0a:
                    8f:ec:cd:4f:19:ca:af:52:5a:88:80:0d:e9:6a:d8:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A2:E2:73:48:AD:7D:C4:6B:BA:B9:0A:C5:D5:AE:61:39:9D:B2:27
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0e8e307-d75e-439b-ae64-a0268bcd205e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:82:ec:aa:79:f9:0c:7f:8a:c7:54:f5:cc:d3:77:b5:43:
         40:4a:16:bd:e2:de:24:af:76:89:57:fa:cf:4c:6d:96:37:e2:
         ec:89:4d:69:87:77:54:86:16:67:cf:82:54:7c:13:a6:08:79:
         bd:d9:4f:1e:d5:d1:a3:27:97:5b:11:80:bb:ec:e6:a8:0d:22:
         d2:f6:5f:f4:e0:94:c6:6a:ae:80:49:d3:44:c7:6a:f7:0c:f5:
         e9:ba:5c:42:2f:d1:19:82:f0:0c:12:49:d9:2c:da:e8:bb:97:
         5c:8d:1f:50:7b:5f:f6:c7:44:fd:b2:42:a1:63:c3:de:63:78:
         fc:74:0f:6e:30:f9:a5:bb:b4:8c:e3:a3:93:07:a2:74:b1:de:
         ba:0c:a7:06:6b:0e:d3:1f:a7:e9:28:86:19:a1:77:94:22:93:
         31:9a:4f:32:62:88:9e:2c:fb:0e:45:dc:c5:2d:8e:f1:bf:1c:
         d5:34:c5:4f:da:4b:4c:cb:05:ae:ce:25:99:9d:9c:22:26:8d:
         6f:77:2b:09:b1:06:c6:ae:b9:0a:32:72:dd:5a:3a:48:52:ae:
         ef:97:c2:2c:b4:19:9d:9c:be:7d:d2:95:9f:02:0e:21:59:a9:
         58:11:b3:ba:a9:92:2c:4a:1f:19:1c:e0:11:e9:8f:e6:22:3f:
         9d:22:5b:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:43 2026 by rpki-client