Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa
File:                     97a899fd-f2c9-4ad0-9251-213508975229.roa (raw, json)
Hash identifier:          T13pmjq03aHVXmiy+z7g/bOukd63goFiNjIiVniIllg=
Subject key identifier:   6B:A4:D4:83:EA:BD:B2:96:07:9F:F5:00:5B:95:3F:FD:A5:E4:17:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79EFBD6642F580FA9CD3A1DD064226BB72FC1116
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa
Signing time:             Mon 22 Jun 2026 00:30:45 +0000
ROA not before:           Mon 22 Jun 2026 00:30:45 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1036::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:bd:66:42:f5:80:fa:9c:d3:a1:dd:06:42:26:bb:72:fc:11:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 00:30:45 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=cd10daa839caef50dcb90884b2b60b99650f60f0c018ab166cd9e1d820b44b11, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:63:75:bd:a1:8a:e4:11:11:6c:2a:7e:42:
                    15:8e:e2:17:6a:06:bf:1b:01:34:39:cb:fd:95:b0:
                    f0:0a:1c:c0:df:bc:8c:96:c1:eb:6f:8e:dd:e4:a3:
                    99:de:90:46:f8:bb:ed:fd:86:b5:b5:14:10:65:18:
                    c9:38:d5:03:64:d6:c6:34:c9:dc:19:9b:bb:30:17:
                    ba:f1:88:fd:d1:3e:3f:9a:09:78:cf:c1:b4:39:78:
                    e4:c8:f4:31:8f:f0:44:8f:79:b0:25:a5:86:5a:a1:
                    8d:09:72:39:16:43:02:8b:dc:46:03:24:68:5a:11:
                    c9:01:93:a8:69:2a:5b:18:67:b8:3c:df:be:f8:4e:
                    30:95:6a:f8:96:d0:13:57:8b:87:ee:c2:2e:66:ed:
                    29:87:e6:cc:61:2c:b4:ef:df:57:dd:d6:25:86:b4:
                    67:e9:1d:a7:58:d7:9a:29:13:ef:0f:c9:b0:3d:f9:
                    23:e5:dd:e4:2e:76:d3:12:63:e7:54:1a:5c:a8:21:
                    28:b2:01:9b:c0:ea:b3:0e:06:20:e0:38:ae:be:38:
                    45:d3:b9:96:d2:c4:a1:ae:d7:e7:20:80:27:2f:ee:
                    d3:2d:f8:48:2f:e9:62:71:57:02:7c:42:37:2f:7e:
                    5d:ab:3e:bb:cb:f3:2a:e2:eb:12:87:ff:91:72:e9:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:D4:83:EA:BD:B2:96:07:9F:F5:00:5B:95:3F:FD:A5:E4:17:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1036::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:8d:bb:58:72:8a:a2:0c:09:b1:6e:ec:c5:5d:05:34:68:
         d7:63:14:a8:6c:6f:56:8d:20:0b:9b:4a:7b:ea:ad:d3:9f:42:
         0d:d8:30:a3:68:7e:b6:59:80:ce:71:a0:a5:e9:8a:58:e9:51:
         a4:06:37:ad:62:fa:bd:5d:e6:d7:30:5e:07:84:cc:5d:23:14:
         47:4e:66:3f:a7:05:5a:07:ec:82:9e:14:b0:4f:3c:97:30:60:
         70:5e:5c:2d:7c:ce:70:62:7e:49:ea:73:4a:78:f3:89:00:ce:
         82:ab:0e:2f:bb:67:86:1e:59:62:1d:ba:96:87:77:55:0e:0a:
         98:77:f9:00:d3:3b:93:3f:7a:cd:13:c2:31:2a:4f:e2:d5:d9:
         a8:45:41:96:03:fd:3f:2a:2a:71:45:98:01:5b:88:ee:c2:fd:
         db:e4:cc:85:e7:94:43:7f:a1:c9:93:8a:a1:79:1a:2c:48:aa:
         db:3a:a8:a3:92:5c:ec:de:93:78:b5:c0:a3:ae:1a:88:f3:84:
         7c:0a:24:ff:62:7c:8d:30:7f:de:b7:d8:f2:d2:a7:3a:20:49:
         9b:cc:81:c7:9d:c6:f9:55:75:3f:d8:43:10:94:52:d1:d2:06:
         2a:a0:30:05:00:d8:71:40:d1:17:77:c4:2d:d4:05:41:78:1b:
         53:1b:c1:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:05:27 2026 by rpki-client