Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c1cc205-9809-4a5a-b6dd-81a9d479a5eb.roa
File:                     4c1cc205-9809-4a5a-b6dd-81a9d479a5eb.roa (raw, json)
Hash identifier:          PaT1Gd/0NagxbPLmUL5p34/r4/y6mcat943aYrCQHcY=
Subject key identifier:   D8:5A:C8:A3:92:40:40:F8:19:CD:FF:9B:89:45:A6:EB:06:E0:BA:55
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46F2063CC54391AEEA49E0EF5DBA89EA0DDF53B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c1cc205-9809-4a5a-b6dd-81a9d479a5eb.roa
Signing time:             Mon 22 Jun 2026 02:01:00 +0000
ROA not before:           Mon 22 Jun 2026 02:01:00 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:115c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f2:06:3c:c5:43:91:ae:ea:49:e0:ef:5d:ba:89:ea:0d:df:53:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:01:00 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=8bffc138fb7840eb1e9c918fe67a84585dd1d2d6f87f7082776059a422422577, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:a3:4a:c0:fd:80:0a:30:5d:e4:c6:7a:25:
                    dd:62:86:df:3c:49:85:e8:f1:89:e2:b6:49:24:61:
                    10:b6:32:2e:6a:36:db:49:d2:ad:cb:a8:7b:df:3a:
                    0f:b8:8c:c6:47:02:e4:ec:df:93:46:77:4c:3a:59:
                    f2:cc:75:62:a8:c0:86:d2:e2:67:a5:66:b0:b4:a1:
                    2d:a0:d9:d5:5b:cc:9c:85:c5:2f:af:dd:be:dc:c1:
                    91:98:8a:bd:63:72:21:61:27:6a:0d:00:00:45:94:
                    fa:1c:09:bc:93:bf:24:c5:30:ee:84:d7:05:46:07:
                    b5:c3:b5:fe:3a:c2:1f:13:a8:2a:ad:fe:84:1e:22:
                    83:1c:17:47:36:59:74:c5:3c:65:f2:72:a3:44:70:
                    c8:b9:df:46:b7:72:32:f5:80:e8:62:fd:e2:d6:22:
                    af:d1:a9:66:bb:c4:b9:b5:5d:22:6f:70:6e:1b:b5:
                    35:75:dd:0a:ea:9c:33:67:c9:8b:68:7e:ef:6f:63:
                    3c:53:af:d6:4b:7c:0f:9f:fb:84:97:dd:7d:d6:df:
                    01:35:80:8a:96:68:7b:f4:18:f1:c5:44:0d:04:e6:
                    81:1f:38:11:9a:4a:7a:33:b2:2c:98:b5:9a:40:bd:
                    85:03:8c:3c:f8:1f:52:2d:0b:37:57:2b:3a:7a:ea:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:C8:A3:92:40:40:F8:19:CD:FF:9B:89:45:A6:EB:06:E0:BA:55
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c1cc205-9809-4a5a-b6dd-81a9d479a5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:115c::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:03:6a:83:b2:e5:29:98:bb:94:b5:c6:97:7d:14:1b:5f:
         fb:24:57:ab:e3:00:a3:e8:22:9c:8d:e0:e4:7f:85:a1:b4:da:
         75:f1:f6:64:d9:73:1f:4b:79:b2:0e:e8:6d:24:c2:1c:e9:14:
         98:a6:fd:36:79:88:2e:8b:46:61:1b:8a:41:d2:dd:dd:b3:4a:
         08:62:73:c3:9b:1c:28:2f:29:0b:dc:32:fd:d0:b8:63:cf:15:
         8a:6a:6a:eb:83:80:41:dd:80:11:29:e2:51:4e:cf:d8:9d:ae:
         6f:44:df:78:b9:8a:50:68:b1:b8:cd:8b:b5:5e:60:3a:03:da:
         09:f6:1a:8a:02:f4:2f:65:49:aa:a5:fa:53:6a:4a:8e:c1:f4:
         79:3c:18:49:47:46:f2:d1:5c:aa:44:71:43:57:aa:a2:93:28:
         7c:7d:5b:cb:e9:1e:65:6f:3c:77:20:1e:9a:ce:cd:7f:9d:48:
         ac:5f:d6:c5:7a:84:cd:7d:b2:53:b8:39:de:dc:e2:98:63:2f:
         e1:3b:d2:85:27:86:cd:fa:23:ff:a8:d7:11:d9:a2:b4:05:9b:
         c3:87:ab:b4:fc:ec:d1:0a:87:ed:b9:13:5c:c7:16:b4:98:88:
         86:64:d2:3e:bf:5f:6c:0f:5c:e2:5c:33:a6:ec:44:86:d0:5a:
         fc:93:32:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:01:20 2026 by rpki-client