Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/069cb1d5-a41f-4034-81e6-cf406f772c1b.roa
File:                     069cb1d5-a41f-4034-81e6-cf406f772c1b.roa (raw, json)
Hash identifier:          xSQDBHfMz3YjKTv8k9XsNiwaBLAZ8iRfgSwjD3/aQCA=
Subject key identifier:   06:55:6A:36:A6:37:C4:BC:7D:EF:82:84:51:69:D3:B8:2E:87:B4:13
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       673036F25C723799F784D41AE7C375BB93CB2B3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/069cb1d5-a41f-4034-81e6-cf406f772c1b.roa
Signing time:             Thu 23 Jul 2026 08:21:36 +0000
ROA not before:           Thu 23 Jul 2026 08:21:36 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ee8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:36:f2:5c:72:37:99:f7:84:d4:1a:e7:c3:75:bb:93:cb:2b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:21:36 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c78529da9a47f006fbade2ae9d188dacca08aaba8da8cc360c9624ed666f602f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:e7:c4:b3:64:da:1f:58:6c:63:4e:76:2c:
                    2c:0c:55:35:cc:a1:c7:34:1b:90:0d:c3:42:37:ac:
                    1d:58:8d:ee:ab:02:83:9d:30:a1:48:ac:55:cb:9e:
                    d8:bb:e6:75:a8:1e:f1:8d:a4:6c:1d:5a:ec:af:88:
                    e5:3d:8a:0b:b9:6b:49:9d:ea:b8:9b:b6:8d:91:60:
                    55:3d:8d:9f:ae:b5:a2:ae:af:f1:c9:64:ee:1e:14:
                    32:67:92:bf:00:81:c1:9f:21:68:09:1c:0a:01:e6:
                    d3:41:b7:b0:39:5c:a8:e1:74:89:20:4d:89:76:ba:
                    05:d8:37:86:da:d3:1f:a5:4a:32:49:17:de:5f:a7:
                    ae:81:d5:72:8a:51:6c:c0:16:f9:31:58:24:ad:10:
                    29:5d:a6:02:02:bb:b7:50:4e:c4:be:56:27:9f:07:
                    00:57:55:4b:19:c4:d7:48:45:f5:b5:44:4f:e1:0a:
                    25:04:2e:2a:65:3b:f7:9a:8e:0c:e7:75:0a:06:82:
                    92:7e:01:a9:da:b8:51:a8:45:43:65:54:99:b4:4b:
                    6a:43:9a:c2:35:f3:4f:5f:ee:86:c9:b5:38:03:ad:
                    35:2f:23:ce:e0:1f:a3:7f:5f:01:e3:f0:e2:94:45:
                    1b:0d:f6:05:46:64:df:ec:ab:91:63:8b:21:7b:ac:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:6A:36:A6:37:C4:BC:7D:EF:82:84:51:69:D3:B8:2E:87:B4:13
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/069cb1d5-a41f-4034-81e6-cf406f772c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ee8::/46

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:37:5d:31:cf:5e:56:33:d1:57:5e:96:44:48:45:07:41:
         79:8a:db:a5:2e:ad:e3:8c:50:10:9c:17:55:b1:d3:66:4f:dc:
         fb:7a:53:fb:c9:9a:b4:13:ee:c2:9e:99:a6:ac:06:ef:94:eb:
         0b:71:de:bf:29:23:73:e9:d9:9e:19:65:e5:a9:2f:cd:4f:9d:
         a9:ef:c1:e2:ef:a0:53:91:93:f8:0d:54:6d:f8:a4:da:30:dc:
         d0:c5:53:33:f9:5a:fe:20:62:4f:16:33:e5:69:72:fd:b8:27:
         7e:0c:ac:15:ef:13:e6:a2:0c:91:f4:94:77:8d:fc:e2:5f:82:
         6e:12:5b:67:51:07:a3:70:4e:56:6f:fb:39:f1:42:bd:40:90:
         55:17:eb:60:ab:41:82:f4:cb:dd:c2:26:3f:a4:97:06:ec:58:
         00:a4:ae:22:13:52:a9:3b:2b:e2:54:cf:41:ac:76:15:de:9b:
         68:96:1b:e6:82:a9:33:83:b2:07:f6:ff:3e:2a:c0:9a:97:1c:
         f5:a7:ba:c2:47:ac:d8:1e:48:74:67:44:d1:7c:ff:f0:cd:91:
         ad:ee:c0:9b:27:b8:a4:9a:ff:ed:82:29:41:4f:5a:3f:0e:9b:
         63:cb:bb:3c:07:e1:96:f8:58:4f:0f:56:00:02:54:f2:d9:e8:
         36:42:b2:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:59 2026 by rpki-client