Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238f883e-515a-46d4-b84a-03b6760abb55.roa
File:                     238f883e-515a-46d4-b84a-03b6760abb55.roa (raw, json)
Hash identifier:          QtwrBGLvuB61BH8a9X4/+ua1C7DEE5onN6gVPIHG6GI=
Subject key identifier:   0B:2A:08:49:5B:51:61:4F:42:30:C5:9A:1A:08:9D:66:BB:93:93:EE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58284914CD690F0EFA2DAA7AB9068879EACFE4D7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238f883e-515a-46d4-b84a-03b6760abb55.roa
Signing time:             Mon 22 Jun 2026 02:20:49 +0000
ROA not before:           Mon 22 Jun 2026 02:20:49 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:106b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:49:14:cd:69:0f:0e:fa:2d:aa:7a:b9:06:88:79:ea:cf:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:20:49 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=8008c7eb4494191654513758015fb9a7ea2ae01f59674243545e7aeaa464fc46, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:b2:02:10:0a:a1:f1:bc:40:b6:1f:f0:66:
                    37:68:3b:fe:5a:e5:72:72:59:3c:5c:df:f2:4e:62:
                    47:50:f0:ab:3b:29:67:3c:5a:ac:97:f6:ea:3d:9a:
                    3c:a8:d6:84:20:14:c4:1d:52:0b:e1:6b:ef:a7:43:
                    45:a8:7a:47:ef:fd:e8:e0:89:4a:e0:f4:b5:3e:30:
                    c5:01:3d:10:6d:cb:15:44:b5:91:9e:03:2b:64:4e:
                    b2:4b:de:b9:36:d8:aa:ca:1d:bd:06:26:d3:4f:fb:
                    8c:c6:5b:51:9d:3e:2d:de:5a:8b:a4:ed:da:03:12:
                    ff:a8:95:c1:cc:5d:3b:ef:a3:72:1b:7d:0e:de:59:
                    8e:03:5d:fb:7d:b8:eb:3d:ba:b0:ad:cd:a4:1b:d5:
                    19:90:5d:91:2b:fe:ef:59:f5:93:1f:79:85:d2:14:
                    45:1b:58:37:9e:ea:51:25:8e:89:6f:e5:e6:c8:af:
                    f1:63:4c:5a:43:cb:ac:e9:21:6d:ff:0f:12:bc:86:
                    2c:5e:e0:8a:da:96:96:93:e3:44:eb:49:7a:45:d6:
                    52:e6:3a:55:81:60:d6:a5:6e:13:57:f1:9e:03:d0:
                    17:bd:c9:c8:9a:a8:17:8a:81:bd:66:a9:63:00:d2:
                    a6:8f:02:d3:de:c4:96:78:cf:a9:53:99:10:14:81:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:08:49:5B:51:61:4F:42:30:C5:9A:1A:08:9D:66:BB:93:93:EE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238f883e-515a-46d4-b84a-03b6760abb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:106b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:d6:e4:ea:58:6e:c4:4b:47:64:46:50:06:40:8b:32:f2:87:
         04:3e:8d:69:7d:24:0a:0d:91:39:22:bc:bd:0d:e2:6a:d6:83:
         f9:b7:c0:e2:b5:cd:9e:aa:c7:3c:74:ea:8b:70:69:dd:52:1f:
         82:9e:d1:a9:88:d4:ab:6d:f2:1c:30:a8:6b:62:9b:52:90:3a:
         34:9a:19:02:a7:3b:66:96:69:9f:61:4a:16:00:ed:40:63:73:
         3b:0e:28:46:9b:a7:3f:2d:7b:4a:15:60:e0:bd:6b:ef:8c:01:
         0c:65:f3:0c:fe:e2:f3:b4:06:e6:33:83:6e:3a:c7:65:ba:fa:
         4d:ec:60:78:97:5c:eb:ca:3c:d9:83:15:43:1c:b5:c8:89:26:
         95:95:b9:59:c1:8f:07:ec:30:66:bc:fc:40:00:4a:33:6d:95:
         a6:f2:10:1c:ea:45:d5:87:0b:d3:cd:d4:e7:bb:09:96:38:b1:
         98:ef:88:9e:06:98:2a:4e:72:fd:ae:51:07:a9:7f:41:42:1a:
         c3:d4:78:6e:ca:b3:ec:d1:12:94:ac:2a:68:a3:27:5e:d3:d1:
         71:92:5b:25:bd:b9:41:e8:b7:b9:2e:a5:34:e5:25:b8:1e:e4:
         48:b9:cb:dd:ca:d7:96:12:14:82:8b:f3:e2:91:19:c7:9c:55:
         27:35:34:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:02:40 2026 by rpki-client