Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0644dd2a-551f-4b38-8bea-feacb21d5b73.roa
File:                     0644dd2a-551f-4b38-8bea-feacb21d5b73.roa (raw, json)
Hash identifier:          iTUkSlmRxZ0ii6W4/ZKkAUGvABcMC82ubyFbJcZAY2E=
Subject key identifier:   59:F0:90:1C:AF:45:A5:2E:86:4D:38:97:99:83:36:49:AA:FE:F4:68
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46404B21206D01A6FA370A5CA58018072D826E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0644dd2a-551f-4b38-8bea-feacb21d5b73.roa
Signing time:             Mon 27 Jul 2026 00:00:29 +0000
ROA not before:           Mon 27 Jul 2026 00:00:29 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ece::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:4b:21:20:6d:01:a6:fa:37:0a:5c:a5:80:18:07:2d:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 27 00:00:29 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=a8c66fca65a0c7f6fe607f9aea24e185f3846936bfbc7d5705cfb96c334696fb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:a7:ce:74:21:67:97:70:f2:89:08:fe:15:
                    2a:3f:c5:5e:0f:2b:34:ec:c5:07:e7:17:6c:15:5b:
                    e6:b9:28:f2:43:63:bc:fa:46:f7:cb:ce:38:42:27:
                    79:62:92:16:6d:10:74:07:86:aa:31:6d:6f:0f:c2:
                    48:dd:de:28:39:a0:6e:cf:89:d4:18:0a:eb:41:d8:
                    16:b1:99:5b:8d:60:9a:7d:e4:82:54:fe:f9:41:3f:
                    cd:60:5d:6b:c8:70:4d:4c:10:6f:90:8d:18:d7:00:
                    fb:3d:75:54:da:50:fe:17:66:cf:ae:8a:7e:f1:17:
                    bd:74:ec:1e:99:58:80:15:e7:a7:01:61:c0:d2:3a:
                    2e:11:8b:46:e7:40:22:0f:1b:51:e0:dd:b1:87:9c:
                    17:aa:ad:89:48:a0:3e:5f:80:1f:d1:35:98:03:c7:
                    3a:96:e9:4c:ab:dd:4f:2f:72:d5:4c:5d:d3:4f:9e:
                    e2:86:ff:3b:59:74:e1:ae:10:fe:cb:24:a0:e3:c3:
                    b9:1d:bc:3c:2a:fb:6d:b9:86:49:61:00:45:c8:fe:
                    a2:24:5d:9c:ee:03:07:f9:64:f2:b3:44:c5:00:7a:
                    30:97:cd:e5:cb:08:c5:80:57:ce:33:e3:f4:0b:44:
                    e8:dc:12:84:f8:b6:d1:95:fb:bd:e6:64:d4:ca:ab:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:90:1C:AF:45:A5:2E:86:4D:38:97:99:83:36:49:AA:FE:F4:68
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0644dd2a-551f-4b38-8bea-feacb21d5b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ece::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:57:11:8d:4d:d7:e5:3f:df:17:c1:51:f5:d6:3e:3a:19:f6:
         3b:99:bb:d7:ee:48:f3:00:44:4d:55:c4:54:a3:7c:ad:0f:42:
         6d:3a:a4:cc:92:cb:aa:43:43:fa:45:ec:8c:19:00:bb:d1:fb:
         cb:c2:77:3f:de:7c:f2:85:21:a7:fd:a0:0c:4b:95:2f:01:3f:
         b4:c7:12:a9:42:05:d2:03:cc:bc:73:42:1d:45:1b:3c:97:cf:
         c1:a9:2b:a0:fd:88:47:63:b7:83:85:1b:12:aa:71:95:11:6b:
         32:f6:5b:79:c5:28:f0:58:ae:81:50:37:b9:47:09:db:29:1b:
         c0:8e:f2:64:cc:7e:91:16:02:88:9e:50:3a:82:56:df:2d:31:
         9f:d9:20:04:14:82:1b:e0:3b:3a:dc:4a:e2:5a:87:cd:6d:dc:
         28:97:64:39:4d:81:4e:18:2c:ab:34:6f:57:76:fc:81:f1:b9:
         a3:dc:69:f0:0f:d4:e2:4e:d4:4c:3a:51:24:8b:02:85:3f:37:
         ea:ce:c2:28:03:33:9d:0d:a8:92:e2:ba:17:ad:86:c8:25:7e:
         e9:4c:fa:2d:bb:97:97:73:9c:8d:bd:06:83:59:5b:ea:f1:28:
         6e:b9:de:b1:d1:aa:f9:d5:5d:2f:71:54:90:49:f3:04:6a:0e:
         f5:49:b5:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:02 2026 by rpki-client