Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff67377-492c-4455-976a-5a76b139ef03.roa
File:                     8ff67377-492c-4455-976a-5a76b139ef03.roa (raw, json)
Hash identifier:          jKrdiHCEoXluw0s4sYGA3DgEzfb96uVXfTIzxnUX7QM=
Subject key identifier:   6A:5A:D1:50:2F:9F:2F:3F:56:B3:D7:9F:55:EC:32:FD:DE:71:BC:FA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5420969AE5CB569879DCDC2F888D7B3E694093AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff67377-492c-4455-976a-5a76b139ef03.roa
Signing time:             Mon 22 Jun 2026 02:21:40 +0000
ROA not before:           Mon 22 Jun 2026 02:21:40 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:20:96:9a:e5:cb:56:98:79:dc:dc:2f:88:8d:7b:3e:69:40:93:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:21:40 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=5caad0a2aa0f503bcf69ee0966018bb5df2fd6d1dd2b55c8b3bd8b8aae2c67aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:d3:d5:8e:3d:a4:48:16:06:28:02:87:f6:
                    73:f6:10:d1:b4:10:76:93:04:13:c5:72:48:21:1e:
                    2c:ad:9e:15:be:69:78:12:fa:70:b6:27:26:91:d8:
                    ad:60:be:7b:cb:98:4d:a4:8c:d1:85:a4:8c:0e:05:
                    eb:69:f4:5b:a8:e3:8d:43:9b:f5:81:17:92:2e:b8:
                    81:a8:7b:db:d3:0b:00:2d:3c:89:7f:9a:0a:1d:05:
                    e0:c9:85:54:64:ff:90:74:ae:4c:cc:dc:6c:cc:86:
                    a1:b3:ff:df:7f:2f:30:d7:25:ed:71:8a:69:67:f0:
                    44:1e:84:cd:63:e8:95:28:8e:95:84:ae:6a:21:4f:
                    85:83:76:43:e0:21:8e:bb:50:31:ac:43:4a:b0:15:
                    36:a0:1e:bf:f9:2e:36:bd:18:96:af:2e:42:93:46:
                    cb:1d:dd:79:cd:a1:bd:59:7c:d2:75:b7:c2:68:c7:
                    12:94:95:5d:08:73:e8:37:f5:25:01:11:10:81:18:
                    55:20:54:d6:25:0c:b4:b8:e4:61:3e:ef:a1:ce:88:
                    82:be:5e:95:33:08:8b:e4:cb:92:8a:ec:c1:ac:b2:
                    de:5a:3e:aa:47:fd:38:d2:b2:0d:b2:c7:01:27:ab:
                    1e:42:37:e7:c6:c2:ae:3a:fa:38:47:86:f7:ce:9a:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:D1:50:2F:9F:2F:3F:56:B3:D7:9F:55:EC:32:FD:DE:71:BC:FA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ff67377-492c-4455-976a-5a76b139ef03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e49::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:bd:69:97:4d:57:82:1a:32:f4:58:26:c4:e9:47:81:16:
         a5:f4:89:6f:6d:ff:a3:84:c2:dd:ad:a0:51:77:9d:1b:91:99:
         86:9e:e8:b0:7b:ce:98:c9:06:6e:46:92:d1:61:b9:30:20:57:
         e8:86:74:73:25:46:f5:a5:e6:90:3b:b4:49:be:7a:86:82:a2:
         a2:cb:08:b8:54:ed:f2:df:bc:a3:8c:53:65:04:26:41:8a:81:
         a5:76:f6:b3:91:16:6e:25:a9:e6:3a:12:8b:d5:73:85:dd:b0:
         3f:8a:dc:33:34:65:73:87:ea:d2:2f:ec:70:6b:c6:0d:93:18:
         da:c2:26:23:08:d4:03:94:fa:58:69:f1:99:36:af:b4:24:52:
         cb:b8:f1:cb:5a:74:68:3e:12:fc:54:49:48:06:34:e4:81:91:
         f6:94:00:0c:a1:e2:bd:61:80:84:fa:ce:e1:5b:d3:aa:a2:24:
         ce:48:2b:f3:0b:91:44:1f:13:96:33:cf:36:07:72:17:e6:99:
         9d:23:be:0b:a6:43:08:09:ef:6f:9a:04:4e:f5:6f:53:91:e7:
         5a:d2:96:f1:14:93:7f:02:82:26:c1:f8:84:fd:06:38:9b:1e:
         ad:05:c2:6e:ea:4e:35:a5:02:10:7e:79:7e:22:fa:c1:74:a6:
         03:06:d8:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:04:58 2026 by rpki-client