Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c668317-9f28-4868-b993-30a89bb71db1.roa
File:                     9c668317-9f28-4868-b993-30a89bb71db1.roa (raw, json)
Hash identifier:          n6ggALSKCYeuYb1f5SUT1igb+ItZj1792nioenA5EIk=
Subject key identifier:   CA:EB:55:2B:3A:53:52:D1:A0:70:EA:7B:BC:FA:A6:9D:AE:8D:47:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       017D4DA9323F057289CE80914E816439C6AE3F4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c668317-9f28-4868-b993-30a89bb71db1.roa
Signing time:             Sat 25 Jul 2026 00:30:18 +0000
ROA not before:           Sat 25 Jul 2026 00:30:18 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        207.171.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:4d:a9:32:3f:05:72:89:ce:80:91:4e:81:64:39:c6:ae:3f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 25 00:30:18 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=e1fcf40712218e5d8e7f2236e55c97dad0eb0a59579abfb619d126c461a8f266, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:f2:15:99:6f:88:47:95:95:2c:6c:73:f0:
                    eb:2c:34:84:26:39:bc:2a:c4:11:9a:b4:b9:c1:38:
                    dc:72:38:68:d7:4d:46:16:d1:13:17:c2:9e:cc:e0:
                    80:a0:bb:ad:f2:95:dc:52:61:99:4e:bf:7e:f0:96:
                    1b:62:18:d1:27:52:66:69:6b:c4:45:e0:72:86:dc:
                    e6:3e:dc:93:26:9e:52:1d:48:66:64:70:cc:71:c1:
                    f0:1b:bc:14:36:f0:a6:8f:cb:b1:1f:18:3a:58:ae:
                    60:84:4c:55:64:1e:42:bc:ea:20:87:b6:b7:35:7c:
                    d4:1b:71:6e:08:96:f0:9d:03:91:a6:75:e9:2a:f3:
                    08:1b:b2:16:99:16:3a:15:78:c0:15:cf:e6:e0:48:
                    be:a4:b7:d9:3f:ba:8e:e3:9a:4e:50:ab:d4:5c:ca:
                    02:6f:bc:97:be:0a:04:69:97:79:22:dc:c1:d3:74:
                    ff:c4:35:27:5b:96:d9:be:2a:c0:28:b8:cb:2d:76:
                    6c:0d:2f:42:63:ea:17:8d:b5:20:c3:1d:90:6d:db:
                    3a:54:e8:89:07:fe:9c:08:8e:83:62:e1:a0:96:cd:
                    b1:09:89:56:85:cd:5f:d8:e1:1f:e6:86:ac:f3:c4:
                    00:f8:3f:9d:05:48:77:af:5a:01:07:bd:c6:8a:ea:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:55:2B:3A:53:52:D1:A0:70:EA:7B:BC:FA:A6:9D:AE:8D:47:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c668317-9f28-4868-b993-30a89bb71db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:7c:98:36:a5:61:d2:b7:4e:b4:c0:3b:da:4b:69:0c:4e:71:
         04:f3:b3:af:e0:d1:65:06:ff:44:40:44:1d:e5:7a:87:10:0d:
         ce:e2:ed:ed:75:0e:fb:f9:0a:33:4e:f5:60:16:1a:88:69:06:
         a4:5b:97:b1:6d:db:72:5d:d3:33:d1:d2:0f:0f:b1:f0:f5:f8:
         d8:33:4a:4a:a9:c6:36:8d:6c:42:2a:24:70:8a:76:e2:2f:93:
         1e:a6:f4:93:49:05:5d:92:b5:16:f6:1a:fd:9e:99:33:74:91:
         5b:a1:26:8e:a8:c3:48:05:7e:16:7a:b8:15:87:ff:ad:fa:87:
         90:55:60:9f:50:02:67:aa:6d:57:eb:b9:48:be:10:60:34:1c:
         c8:ee:09:e2:78:9b:4b:52:ad:70:17:8e:3b:be:c9:de:2f:67:
         43:d7:a1:ad:1a:48:7c:ee:13:06:82:b0:1e:ea:66:09:71:04:
         0a:d6:f1:78:ef:36:85:4f:8f:9e:26:1c:92:28:bc:59:da:f2:
         cd:1e:b7:86:52:3e:fe:c2:95:9f:ea:5c:07:f8:ee:25:cc:09:
         77:28:52:a4:03:c4:ba:40:33:00:95:22:27:87:f9:a9:bb:11:
         28:84:a3:49:82:64:ff:9b:39:49:23:41:ab:64:e5:d5:0c:36:
         dd:84:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:35 2026 by rpki-client