Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3e31562-9d79-4875-ba32-98143f88a60b.roa
File:                     b3e31562-9d79-4875-ba32-98143f88a60b.roa (raw, json)
Hash identifier:          VNjUx8PhznsZWJdoRWUQ8zyfhHoIz6KSKvqbQC/ea80=
Subject key identifier:   8D:E1:86:78:8F:9A:92:97:EA:51:8F:0B:6D:F9:46:5A:9F:0C:11:85
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46163834986135A6692AF215D75659FA48F8AF60
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3e31562-9d79-4875-ba32-98143f88a60b.roa
Signing time:             Mon 22 Jun 2026 00:51:10 +0000
ROA not before:           Mon 22 Jun 2026 00:51:10 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:38:34:98:61:35:a6:69:2a:f2:15:d7:56:59:fa:48:f8:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 00:51:10 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=ec06240256bd2aaaf25456a5ca3bde1ac77eef9390fbfcb7d76ae77c69d89120, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:08:56:3c:b5:1a:61:6a:c6:e7:42:c3:41:
                    f4:fb:64:fc:65:03:d4:4d:d4:37:35:3b:a8:b7:2c:
                    ac:44:b8:54:35:bc:aa:24:94:44:c8:49:9f:2a:e1:
                    a2:08:62:c4:57:27:2b:94:c3:18:b1:6a:b8:8a:fa:
                    10:b7:05:c9:2f:5a:47:d2:e7:ef:d6:4a:a2:53:7f:
                    24:47:eb:2d:09:6c:5d:00:af:83:f1:01:bf:4a:9a:
                    d1:76:e2:d9:00:65:a3:e4:5e:62:8e:ae:69:23:2d:
                    2f:26:52:a0:b1:58:90:d3:fa:3a:96:d9:ab:bf:c1:
                    9b:ae:54:9c:2a:18:64:a1:88:39:28:cb:54:af:ec:
                    4c:a8:fa:9d:99:90:69:2d:75:f7:eb:51:0b:4f:71:
                    97:af:ba:dd:6b:b7:50:4c:e1:af:7b:65:4c:6a:3c:
                    44:98:6e:17:74:a4:b3:58:5c:17:6d:16:3c:da:88:
                    1d:81:0c:5a:89:74:a8:d9:ce:d0:7d:69:82:d9:6f:
                    f1:15:9c:33:6f:22:29:d9:dd:96:0c:5a:3c:e3:dd:
                    fe:f3:33:89:3e:90:22:f4:60:43:92:68:d5:ff:2a:
                    9a:f8:3e:29:ee:22:f1:17:98:d9:2a:7c:74:77:9a:
                    ec:13:1a:be:a5:ba:86:df:12:0f:38:e6:4e:5f:00:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:86:78:8F:9A:92:97:EA:51:8F:0B:6D:F9:46:5A:9F:0C:11:85
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3e31562-9d79-4875-ba32-98143f88a60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:e3:59:f4:7a:de:8f:3c:4e:8c:21:22:d0:5f:e0:13:35:7e:
         d4:5d:bf:e1:c9:4e:9e:02:e1:44:d7:2d:61:1e:a6:3b:bd:13:
         b3:87:b6:cb:ce:1f:e0:64:e2:03:a2:39:dc:a1:00:5c:f0:8d:
         d2:dd:fa:10:cd:70:57:bc:2a:0d:67:59:61:ec:60:6b:4b:11:
         8a:bc:3c:7a:3a:91:9d:36:04:04:8b:45:94:e0:53:bf:99:3b:
         0f:51:98:c2:3e:74:93:0d:5d:2b:6f:26:94:26:54:ff:0c:07:
         aa:dd:4b:f6:0c:68:6c:fb:bd:26:84:55:0f:be:11:f3:26:84:
         fc:d8:69:7e:a3:ed:1b:80:6d:b4:18:e7:3c:81:a7:a9:36:62:
         66:a6:53:87:57:60:f0:54:f6:52:ff:39:61:46:ed:53:dd:2f:
         3e:f4:cd:f0:45:03:99:1e:d5:67:0a:7f:d5:f3:de:dc:8a:54:
         25:93:d8:d5:70:30:ae:f1:d5:20:11:e5:6e:34:7d:fb:1e:60:
         4d:c5:9c:fa:20:f3:4f:91:bf:18:01:18:1d:b9:71:8d:68:91:
         e6:e2:15:d8:71:9e:4a:6e:bd:a7:4d:8f:02:e3:fa:c5:19:c6:
         f9:68:95:fb:24:88:57:83:d0:1e:21:06:5c:89:9f:90:78:90:
         a9:4c:08:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:02:01 2026 by rpki-client