Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddfa0e6-b181-4431-a918-d01d1ac03cc8.roa
File:                     7ddfa0e6-b181-4431-a918-d01d1ac03cc8.roa (raw, json)
Hash identifier:          Vnq8jleEkeaTIXBwIqrUY6B0m7OH16WsnoGifiN1NqQ=
Subject key identifier:   27:F5:39:CD:6E:A2:9D:72:5B:17:F9:91:E3:CE:4F:D4:89:A4:AD:A3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DDBBABCD1C1FAEF2A74580F254FBB8E1B5D03FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddfa0e6-b181-4431-a918-d01d1ac03cc8.roa
Signing time:             Mon 22 Jun 2026 02:30:09 +0000
ROA not before:           Mon 22 Jun 2026 02:30:09 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:db:ba:bc:d1:c1:fa:ef:2a:74:58:0f:25:4f:bb:8e:1b:5d:03:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:30:09 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=99362269726ebbdc3eb5404d199d6d6edd7332a4cf8446f16f343ac9b17d1316, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:56:d8:f5:95:e6:ad:f3:e2:0e:cc:e2:6f:
                    ba:0e:79:ef:27:38:11:17:52:8b:f4:ef:21:1a:34:
                    1f:4d:6d:aa:d6:b5:e9:71:8b:d6:a4:2a:bf:5c:55:
                    9e:e7:72:db:15:6c:68:e4:00:8c:7c:17:50:6f:ec:
                    f4:81:24:4e:9d:17:36:81:1d:25:15:e2:13:b4:bb:
                    c1:e1:91:3c:ac:b2:4d:9a:e7:67:0f:35:2c:cf:d5:
                    3e:4d:f6:48:95:53:85:d7:c6:87:88:a2:05:ab:2a:
                    d7:f6:53:33:a4:61:78:c9:1b:23:98:3e:e3:24:f8:
                    6e:f5:04:3f:de:31:b2:8c:9c:17:a4:71:4b:7a:07:
                    b7:f3:a8:bd:13:44:83:0e:98:53:aa:ba:a0:d7:ba:
                    59:d0:56:ba:fd:dc:f5:ab:a4:c7:3a:7f:94:1d:36:
                    9c:3f:90:a3:5a:e9:98:d5:54:23:23:51:bf:df:c9:
                    be:7b:6f:cd:49:c0:db:87:36:f1:8b:3a:1e:07:54:
                    a1:7a:31:9c:f8:bb:93:22:61:75:eb:2d:27:da:49:
                    2f:e6:8d:53:29:9e:c3:d3:00:aa:c4:a6:46:18:24:
                    e0:78:7b:79:6d:b6:65:d7:dd:96:1c:5f:3f:0f:2d:
                    a6:e3:a5:8e:95:39:7d:21:21:c7:8e:a3:f7:b5:45:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:39:CD:6E:A2:9D:72:5B:17:F9:91:E3:CE:4F:D4:89:A4:AD:A3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddfa0e6-b181-4431-a918-d01d1ac03cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:d4:14:87:c4:b6:da:c8:2d:f3:6c:ff:a5:90:af:25:ff:
         a2:a3:a1:80:41:12:3e:92:0d:4f:c7:29:cc:76:c0:6b:8e:61:
         6b:bb:02:2a:da:f4:0d:3a:0f:8c:08:94:f6:a4:0e:d8:f5:58:
         99:4d:d0:1b:26:cd:81:fd:d2:ac:f0:4e:b6:d2:b1:82:a8:a0:
         47:fd:c2:d7:8a:b0:25:bd:18:0a:a9:60:31:6f:4e:2d:84:d9:
         c9:72:6b:c7:9c:5a:d2:fd:85:fe:14:61:0b:83:dc:55:98:31:
         8b:d7:5b:09:ce:c3:ff:de:df:d3:fd:2e:94:b9:cc:84:67:39:
         bd:2c:9d:f3:5e:c8:7e:38:11:46:88:67:2c:e5:7d:d0:de:0a:
         dd:6b:18:5c:3a:3e:73:cb:65:b2:16:38:39:a3:81:c0:64:17:
         ec:94:46:26:3e:b5:19:02:59:2c:5f:9c:f9:e7:8b:bb:e6:5e:
         34:ea:c6:8d:a8:52:79:e5:e1:41:d8:87:16:d9:98:f4:a2:25:
         85:c6:ab:50:5f:6c:b5:33:53:60:03:3d:93:dc:5c:ef:42:c1:
         e9:f9:30:b8:4c:aa:2c:a3:b2:63:9f:8a:74:63:c6:9d:87:e5:
         23:07:c3:3f:73:e5:d4:3d:12:c8:79:99:06:5f:4f:cf:6c:04:
         b2:7e:24:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:07:26 2026 by rpki-client