Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7104f7c3-456c-4a2e-8559-c430c575fc4f.roa
File:                     7104f7c3-456c-4a2e-8559-c430c575fc4f.roa (raw, json)
Hash identifier:          0cpyc/QNm3I7s6Fpjrjtut0yWsuQzdcnvWImMbFihQ0=
Subject key identifier:   78:DE:30:61:CE:81:B0:B3:45:CB:8A:B5:D2:14:11:83:CD:07:AD:A0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01FB0F64DDBC539775E08CD4D879166E53F5D2FD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7104f7c3-456c-4a2e-8559-c430c575fc4f.roa
Signing time:             Mon 22 Jun 2026 01:50:35 +0000
ROA not before:           Mon 22 Jun 2026 01:50:35 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11b7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fb:0f:64:dd:bc:53:97:75:e0:8c:d4:d8:79:16:6e:53:f5:d2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:50:35 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=8a0d4e1f02ce328042331fa86292e8a6e943d784644def8a7e4a17ecc0c7f751, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:c6:bd:a2:ed:02:4a:ed:b8:56:f6:2d:9b:
                    df:2d:d0:e7:b7:ad:9c:13:3a:fb:e6:b9:f3:70:08:
                    0c:c1:1f:6f:9c:d5:df:24:b4:b4:c5:97:4f:78:4d:
                    8e:d7:6a:1a:74:ab:43:25:8e:9d:6e:b8:75:87:0f:
                    56:c0:b0:5d:21:98:ce:fd:1f:72:5e:1c:47:e9:f2:
                    61:af:51:0c:8f:ce:b5:73:61:53:c8:04:cb:15:a5:
                    5c:f5:58:dc:3f:70:47:36:83:dd:6e:d8:9c:63:be:
                    dd:57:f4:7e:e7:8f:f1:3a:d2:df:54:0c:c4:ed:5d:
                    15:27:53:3c:40:43:60:a7:21:15:71:1f:3a:42:57:
                    42:72:a9:af:a3:24:a9:f0:06:e2:5a:09:6a:cf:ed:
                    88:f4:37:55:50:e3:ed:d4:43:17:58:a2:34:60:ce:
                    81:69:ed:3a:f6:02:f4:c8:51:37:ae:0e:74:f3:a8:
                    86:1b:d4:e5:cf:23:63:f9:92:49:76:28:c9:4c:b5:
                    28:ab:34:b8:d6:0e:8f:bb:d4:15:a4:7b:cf:74:99:
                    c5:89:05:64:4c:ff:45:e9:1a:5c:b6:20:99:d8:f8:
                    f6:bc:97:85:6d:4a:88:5c:5a:1b:5d:e4:31:89:5a:
                    93:9e:e2:8c:08:7b:87:b8:e3:45:c3:b2:13:d0:d5:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:30:61:CE:81:B0:B3:45:CB:8A:B5:D2:14:11:83:CD:07:AD:A0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7104f7c3-456c-4a2e-8559-c430c575fc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:1f:c0:17:dd:35:9f:fd:66:da:90:81:ce:b9:e6:79:09:
         07:93:cf:f9:8e:e6:3a:85:a2:e5:66:c7:9b:69:d1:2f:0b:67:
         8c:03:69:04:f7:22:5a:5c:3c:f2:20:5d:48:7d:19:dc:d7:be:
         b4:7e:75:1d:f0:91:3a:d9:7b:1f:4a:3b:ad:59:2e:2d:75:ed:
         79:55:3f:10:03:51:f6:0c:87:d1:90:92:84:c7:08:d8:36:be:
         c3:98:6d:7c:6f:bd:98:7f:23:de:f8:07:ec:bf:07:2d:5b:8c:
         56:1d:23:6d:1e:5f:ec:d3:de:9f:aa:a9:cf:d1:bc:fc:b5:8f:
         ac:fb:c0:02:6f:1c:af:b3:6c:19:e3:4a:c3:43:0b:b6:6b:44:
         ce:53:a0:fe:d3:89:d7:b4:b7:3f:97:17:38:3d:c4:4a:51:5b:
         53:07:ae:f0:9a:47:56:61:75:78:d0:1f:d4:25:86:b7:3d:19:
         ff:24:44:f0:50:93:de:ca:fb:e0:f6:bf:2b:62:43:9c:ca:f5:
         0f:5e:3b:7c:4d:27:d0:e3:07:32:00:2f:2e:83:1f:f6:eb:5d:
         b6:4c:03:e0:36:09:c0:62:71:e5:04:85:43:44:38:29:79:e9:
         5d:e5:9b:97:5f:98:a1:68:4c:03:bc:81:b5:13:03:db:80:99:
         2a:23:eb:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:00:37 2026 by rpki-client