Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2db89cc-6ffb-4cab-b0c4-d9fd69aa525d.roa
File:                     c2db89cc-6ffb-4cab-b0c4-d9fd69aa525d.roa (raw, json)
Hash identifier:          wx8wIbgtQVJRM21818HrcoFRMi5fzU6e9RzVm2ARYZc=
Subject key identifier:   EB:AE:AE:70:3E:0F:41:18:09:8E:97:CF:7D:59:AB:F4:64:D8:B9:24
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32CF4DBF03F7E837E81FB400462C77C3D05C706B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2db89cc-6ffb-4cab-b0c4-d9fd69aa525d.roa
Signing time:             Mon 22 Jun 2026 01:12:01 +0000
ROA not before:           Mon 22 Jun 2026 01:12:01 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cf:4d:bf:03:f7:e8:37:e8:1f:b4:00:46:2c:77:c3:d0:5c:70:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:12:01 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=5d387d8a9910357e6039d1010696afb67259b1a638ea1ed6acf721c3b444391b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:65:c9:47:70:01:94:4c:da:bf:ae:08:cd:
                    b3:4f:cb:72:fa:54:f5:45:fc:ef:7f:ee:f1:23:79:
                    9c:cb:92:a6:d2:cf:78:21:ac:46:ff:dc:3b:3b:3a:
                    12:ff:bb:ea:ce:70:1e:c8:46:87:01:86:ab:83:5b:
                    34:f6:58:a1:95:e8:73:0e:ad:02:65:22:a9:19:b1:
                    aa:a7:91:8a:fa:35:30:4c:89:e3:c9:82:f5:0b:53:
                    9b:25:f4:61:e4:6f:0c:10:49:9a:32:7e:fb:67:19:
                    66:e3:ab:f2:6e:13:18:e3:15:33:2f:1a:a1:90:8d:
                    54:1f:b1:4b:72:76:14:e5:c8:ec:c1:fb:b8:d9:73:
                    9c:bd:f3:7d:6f:fb:a9:2f:94:77:d7:35:98:ca:8a:
                    be:c6:b4:6a:97:f4:4c:17:28:5f:8d:82:9f:08:2f:
                    f4:a3:ce:6f:ec:84:6d:ae:7c:b5:61:80:9d:8e:68:
                    ba:31:2c:74:4c:3e:74:c7:ef:96:c8:10:db:38:ff:
                    17:0b:ea:d4:c6:d7:7e:64:e3:87:53:fd:32:71:c0:
                    3c:55:ab:a1:a3:5f:17:27:d5:fc:4b:c3:e6:2b:a2:
                    e1:b6:27:ac:4a:a3:51:0c:c5:4d:dd:13:ea:23:32:
                    57:41:ee:a0:9a:a2:98:5c:b3:ac:ae:57:67:9c:5d:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:AE:70:3E:0F:41:18:09:8E:97:CF:7D:59:AB:F4:64:D8:B9:24
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c2db89cc-6ffb-4cab-b0c4-d9fd69aa525d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e32::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:c7:ed:ef:b4:47:bc:7d:5e:3b:fc:82:f2:5f:af:47:3f:
         28:9e:bc:fc:b0:d8:bd:bd:11:e0:25:0a:b0:ef:d2:52:ca:dd:
         1b:1f:a2:f6:fd:f6:28:f7:e6:99:63:5e:72:38:38:47:b3:44:
         60:c3:c0:74:84:79:32:75:c3:6c:28:a8:fa:ff:4f:af:f3:e7:
         4b:c3:21:fa:58:07:9c:ef:fe:53:0a:89:c9:7e:06:78:a5:35:
         fd:e4:97:4e:19:4d:f3:73:75:c6:d0:ee:2e:bb:12:b9:e6:fb:
         fe:50:e4:6f:90:8e:d9:b1:43:19:d2:57:f8:d8:31:bb:81:01:
         44:3b:c1:f2:34:53:1c:e8:3a:84:cf:f2:a1:44:9d:49:f0:b9:
         f5:be:16:a9:0a:52:80:7a:47:de:8c:36:9b:6c:82:ef:09:c4:
         b4:ba:57:8e:aa:96:08:d4:0e:c4:7b:86:85:e0:ff:a5:47:7c:
         7b:66:d9:ae:70:f1:a4:4c:c7:32:cc:65:f8:8b:62:0a:a5:66:
         f0:bd:68:cc:c6:39:75:53:27:d4:76:62:08:e7:93:7a:c5:f3:
         da:cc:cc:76:31:d4:f6:2d:d2:55:ef:f5:36:c6:7a:39:4d:85:
         0d:32:15:56:a3:89:77:01:9c:45:02:ae:65:8a:ac:84:9e:72:
         7d:42:3b:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:07 2026 by rpki-client