Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
File:                     f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (raw, json)
Hash identifier:          VcKFyi4tZPLfgGT9+kdz2Nj6gz4ylDZ+Zxg/i3tuDgk=
Subject key identifier:   6E:AC:68:4F:AA:EF:FE:5B:D0:5B:AD:33:33:9D:52:87:D5:E7:4A:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17B4D50F477D47ACA747651BF1790A445F625498
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa
Signing time:             Thu 08 Oct 2026 01:04:36 +0000
ROA not before:           Thu 08 Oct 2026 01:04:36 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        72.21.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b4:d5:0f:47:7d:47:ac:a7:47:65:1b:f1:79:0a:44:5f:62:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct  8 01:04:36 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=71c8b6479791ce51ef830e41c2d67853cbfc32db353e8c6797d699d944f0c09d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:74:f1:2b:aa:59:7b:d0:1d:77:0e:cf:d3:
                    b0:b2:b7:89:1e:ab:3f:37:82:d8:6a:a2:51:17:f5:
                    9b:ff:7e:de:32:dd:d9:97:17:82:69:bd:a6:24:0a:
                    34:c6:79:3c:b1:25:d5:39:1c:3f:12:eb:3f:70:fd:
                    84:d8:12:fd:1b:ee:38:fc:41:24:11:03:ef:29:39:
                    bc:2f:31:67:a9:bc:ec:51:33:f1:dc:d6:6b:02:0f:
                    61:15:b2:de:2f:77:74:6e:4d:81:51:95:fd:ca:e8:
                    d5:14:41:7e:66:34:a7:f2:4a:06:69:ca:7e:ef:eb:
                    4e:19:a1:3f:89:61:3c:3d:4c:88:9b:25:54:a5:93:
                    80:cd:59:c5:e5:d0:06:43:32:09:56:17:25:c9:3d:
                    1d:85:e2:93:8b:55:28:3a:04:38:b3:aa:3f:62:3a:
                    fc:eb:c5:40:4f:1f:c6:b1:a7:b4:60:d2:70:93:7a:
                    b4:9e:e0:61:1e:8a:5f:8b:f8:fa:bb:47:5e:43:19:
                    b2:8b:31:f0:9c:5d:35:d0:c4:4e:4d:05:e9:7d:d6:
                    d0:08:2c:bb:1b:13:95:a2:45:e5:ed:6f:08:fd:24:
                    02:ed:33:72:20:41:09:70:a6:66:63:c7:17:47:df:
                    c7:30:d2:bb:28:59:b7:44:25:66:6e:f2:af:79:ae:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:68:4F:AA:EF:FE:5B:D0:5B:AD:33:33:9D:52:87:D5:E7:4A:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:13:f2:5c:e2:8b:32:f3:8b:4e:71:84:50:a3:2d:82:38:
         d7:62:eb:35:a7:12:5b:3c:aa:19:9b:fb:31:44:f0:0f:99:d5:
         02:dd:51:e4:0e:29:72:7c:e5:25:06:99:85:ba:71:dd:46:3d:
         a8:04:bd:69:1f:87:ab:d7:2c:52:62:5c:66:11:56:32:50:28:
         86:48:a1:78:ce:68:78:2e:be:2d:44:87:a4:8d:fa:b9:99:d9:
         10:29:9e:42:c6:1a:38:ae:b7:5e:e1:48:9c:4d:7e:bb:0c:54:
         2e:87:ce:02:e9:3e:22:ed:24:09:df:c0:f0:87:e9:bd:62:78:
         59:bd:f6:e0:b4:13:fb:c0:eb:e6:bc:14:07:80:33:e7:27:3a:
         14:db:df:e4:1c:bd:bc:0f:59:25:ea:6d:44:02:e6:f9:3d:1b:
         09:3f:20:14:a3:2b:d8:cc:7c:dc:c8:6d:38:4b:f0:6d:8c:6b:
         62:97:f6:7e:ec:1a:f3:f3:29:e2:c4:c5:40:e7:01:a6:30:18:
         01:8b:6a:ee:61:8a:30:d4:39:3f:c3:40:a7:4f:fc:98:5d:be:
         76:87:11:93:b3:1a:2b:4a:12:89:d5:f7:bc:c4:b9:f0:0e:a8:
         01:b6:4a:fa:db:83:5d:60:5c:80:50:d1:90:f4:40:b6:17:cd:
         c6:43:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:23:39 2026 by rpki-client