Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0804d9e4-3fa2-45ba-9984-8e0a6cba66e7.roa
File:                     0804d9e4-3fa2-45ba-9984-8e0a6cba66e7.roa (raw, json)
Hash identifier:          B7eaSfTFNQqvVK9pkaCHnfXHxTmjepeHZUEZQnKASPQ=
Subject key identifier:   B9:00:74:36:EC:3B:25:20:4E:C0:92:30:FF:C1:AB:A9:45:E2:81:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3C83ED33F7BE612E87944046AEA9DFC7B06743E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0804d9e4-3fa2-45ba-9984-8e0a6cba66e7.roa
Signing time:             Mon 22 Jun 2026 01:50:09 +0000
ROA not before:           Mon 22 Jun 2026 01:50:09 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:83:ed:33:f7:be:61:2e:87:94:40:46:ae:a9:df:c7:b0:67:43:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:50:09 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=f95354a7e23986b4ccbbbde6a57e6f1768687304f33339942dd73e478aff0cf1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:f9:63:bc:3a:9f:bc:ec:c9:69:38:24:13:
                    15:3b:69:22:e8:4b:a2:91:ae:85:02:66:fe:5e:7b:
                    ae:34:cc:8b:e6:c9:da:4a:c6:63:50:c3:d1:32:b8:
                    7b:6b:7b:3d:56:f6:12:41:fe:4a:ab:97:95:37:bd:
                    74:13:56:b4:16:8e:bc:8b:74:76:71:1b:ab:c5:cf:
                    d4:67:28:7f:c0:8f:c7:c4:4d:ac:7f:16:3a:35:f5:
                    7b:f7:ce:1a:04:e0:13:45:73:9e:3e:a1:82:65:0a:
                    85:7c:5e:e6:fc:64:e0:85:a9:64:74:15:e1:7c:7d:
                    4e:22:d0:9f:d4:86:96:34:aa:74:93:fb:cc:90:1e:
                    e7:a0:00:cf:f5:11:5a:97:69:76:96:fb:f9:39:7a:
                    f5:d8:80:32:86:62:46:37:4c:dc:de:5b:c8:f8:46:
                    4a:70:77:d7:f0:67:2b:0b:7e:59:14:d9:c3:de:f9:
                    30:d6:01:be:70:58:02:63:60:ad:38:e7:46:59:55:
                    f0:df:b2:34:85:8f:4d:ac:1f:a5:2c:c0:63:95:53:
                    60:7c:58:4e:5f:1d:07:d9:89:07:25:ea:c4:57:fe:
                    59:36:1d:94:2c:dd:13:32:06:4d:d8:bb:6a:16:af:
                    7c:dc:38:50:38:a9:19:00:3b:97:25:77:03:fa:5c:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:74:36:EC:3B:25:20:4E:C0:92:30:FF:C1:AB:A9:45:E2:81:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0804d9e4-3fa2-45ba-9984-8e0a6cba66e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:64:82:81:1a:7a:a3:00:2d:fb:28:bd:d2:8f:39:04:61:
         1b:9c:3f:b9:92:2e:9d:f0:ce:d0:0f:54:8f:6f:8d:9a:9b:a9:
         90:98:da:6f:27:b9:86:a8:dd:10:cd:f3:2d:30:ba:16:94:aa:
         c4:f4:7e:12:72:08:74:88:f1:9c:10:81:2c:0e:2c:68:72:1c:
         3e:85:b1:b9:a8:e4:ec:7b:c6:3a:c9:df:6a:8a:52:8a:70:4a:
         0d:58:c8:92:06:69:aa:00:af:9b:3f:1e:9a:a7:ab:bf:d5:d3:
         f4:ed:b8:bc:16:1c:db:a7:50:58:7c:cf:03:ad:6b:1d:34:a6:
         1a:d5:f6:e0:e4:8c:6b:29:07:1b:ab:b9:fd:ad:9f:4f:74:f7:
         ef:d1:c2:b3:7d:2e:08:57:77:9b:18:36:7f:8f:d1:f2:e7:67:
         96:98:df:b0:c4:aa:24:fc:c4:ce:db:e4:3d:2c:51:5e:a9:04:
         b0:81:eb:c6:89:5d:a3:47:5c:7d:5a:e8:1c:2f:9b:77:2c:5c:
         59:c1:e8:d6:58:f2:aa:e2:4b:7c:85:59:cd:e2:b8:c4:23:e6:
         ed:76:ba:fc:6c:76:a7:d4:50:8c:2d:08:77:4d:09:06:ea:4a:
         40:dd:e9:1d:c0:95:ce:0f:26:10:84:94:2d:85:c8:18:85:da:
         0f:87:df:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 07:59:07 2026 by rpki-client