Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6830685-d3a6-452c-8c56-4eae2d5acad9.roa
File:                     c6830685-d3a6-452c-8c56-4eae2d5acad9.roa (raw, json)
Hash identifier:          Ro5qtXNCF2aiZdPV+2+IIY+YcoNpZYM6afIyQipKfto=
Subject key identifier:   E8:E7:6A:68:46:5C:1B:86:F9:3E:07:F7:AF:53:05:60:2C:49:C2:F1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F02195C84D81C17B29269C0E1590CD451E44591
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6830685-d3a6-452c-8c56-4eae2d5acad9.roa
Signing time:             Thu 23 Jul 2026 08:51:38 +0000
ROA not before:           Thu 23 Jul 2026 08:51:38 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d1c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:02:19:5c:84:d8:1c:17:b2:92:69:c0:e1:59:0c:d4:51:e4:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:51:38 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c17b43f44a3d04ac0079cf4ca0a1c28cca1afebf3f2565168c67a33d785e857a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:36:a2:6d:1d:ff:ea:87:1c:19:f7:b2:c6:
                    38:9f:58:3d:1d:ca:80:46:d7:07:d6:f3:3a:2f:ce:
                    8a:c9:77:2a:f2:0c:f2:d3:dc:68:d0:c2:51:c4:3e:
                    db:03:17:8d:d4:8f:08:84:d3:30:aa:f9:28:d6:20:
                    ce:94:b9:d7:c5:cc:74:7a:c2:c3:94:b5:4f:67:e7:
                    ad:18:0b:7a:c6:fe:9a:41:95:17:b4:55:98:22:06:
                    3f:fb:23:6d:79:a9:26:d3:33:39:3c:4d:1a:ee:07:
                    90:7d:e0:db:5a:9b:17:76:60:59:99:a8:a6:b8:5f:
                    62:42:3d:df:0d:a2:b6:bb:e8:8b:53:f5:44:38:1a:
                    e9:0c:ff:a8:61:9d:e6:8e:40:e1:4f:e7:92:0c:60:
                    84:a6:72:2e:c2:ca:b5:de:72:f9:8c:02:5b:75:2f:
                    90:f6:3f:a0:1a:79:b5:4b:0b:7e:fd:57:f5:59:53:
                    aa:a5:cd:f2:27:4c:72:ef:13:2e:4b:eb:15:55:2a:
                    b8:64:34:4a:35:10:df:1f:0c:80:79:f8:40:d3:f4:
                    4f:e0:20:d4:6b:72:b2:34:b3:84:71:15:9f:6b:f7:
                    3c:a6:31:8e:f3:61:a4:2c:b7:75:60:db:d6:35:9b:
                    45:3f:92:29:22:e9:93:9c:63:cb:05:76:fa:1a:e2:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:6A:68:46:5C:1B:86:F9:3E:07:F7:AF:53:05:60:2C:49:C2:F1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6830685-d3a6-452c-8c56-4eae2d5acad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d1c::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:1d:b2:11:24:9a:29:b4:5c:68:24:08:78:b7:fe:bd:73:
         2e:55:60:48:90:c6:30:0c:63:4f:32:90:c0:98:05:8d:fa:4b:
         a1:6f:50:f8:35:95:be:fc:99:b3:db:46:0a:cc:b2:6f:30:6e:
         39:20:dd:17:c0:0d:3b:28:75:f6:43:f0:e4:b9:5b:46:bd:ce:
         04:eb:10:44:e0:fb:db:7c:5c:27:65:1f:41:7a:9f:0e:5a:98:
         f0:9c:4a:fa:b5:3e:59:24:43:71:bb:11:3d:0b:84:66:a2:d0:
         77:99:76:31:75:46:c4:1c:9f:7c:f8:c8:b2:93:2b:39:bd:94:
         bd:20:4a:58:27:3e:7b:80:dd:5f:d4:47:d5:43:8c:7a:0b:42:
         96:92:d6:09:13:10:37:73:5f:56:83:e5:d7:a6:e2:35:3e:e6:
         1b:7d:f3:89:f9:fa:c4:32:37:bf:c9:33:9e:5a:ba:ed:57:bf:
         ad:15:c1:03:76:0b:c6:8e:7c:1b:a4:99:8d:c3:c6:a5:85:e6:
         1d:19:8e:d6:df:d2:56:74:3e:a7:73:b6:11:13:84:ab:0d:b3:
         d0:87:2c:dc:43:10:b6:03:6c:4c:4c:04:ed:bb:45:ae:8c:cb:
         60:25:3e:e8:87:49:0d:bb:29:6e:96:ff:51:18:58:bb:e3:90:
         99:05:a8:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:26:26 2026 by rpki-client