Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60bbab6f-6758-4fff-b67d-648fe3812b85.roa
File:                     60bbab6f-6758-4fff-b67d-648fe3812b85.roa (raw, json)
Hash identifier:          43xxu8CTaGj3xQY/sI+TeRiEhc+7QAEvyhAlP5nu8qo=
Subject key identifier:   84:35:6A:90:01:84:78:01:88:CC:BC:53:DB:4C:70:2E:DB:D3:07:1F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7CC034D9DACDFA8EC18790D4E2593DC8D9244005
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60bbab6f-6758-4fff-b67d-648fe3812b85.roa
Signing time:             Thu 23 Jul 2026 03:41:51 +0000
ROA not before:           Thu 23 Jul 2026 03:41:51 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31b8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:34:d9:da:cd:fa:8e:c1:87:90:d4:e2:59:3d:c8:d9:24:40:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:41:51 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=12e760e4e91719a2b25f561dd39c7fe7de235e8073a80637156975f223929c77, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:70:b0:3d:d9:71:a0:f9:36:b8:10:7b:47:e4:
                    44:eb:9e:87:c6:45:79:bc:b7:8b:f6:61:7b:6e:9e:
                    9e:9f:99:09:27:7a:a4:74:ad:ce:e3:7a:da:0a:9e:
                    c8:4d:f9:0f:d6:2f:d8:d5:33:5b:31:a6:17:e2:73:
                    14:66:96:30:18:60:d4:c6:31:b4:e6:21:55:8f:dd:
                    87:32:49:a0:9a:91:2c:50:09:03:91:62:ba:6f:da:
                    17:dc:ec:f7:25:99:ad:d6:da:7b:26:13:57:a2:d8:
                    15:63:1e:e3:77:d5:86:80:c3:7a:56:c9:21:71:19:
                    77:d4:e5:5e:4a:1d:9c:de:8e:48:36:04:b4:78:88:
                    c3:59:bf:27:35:d6:33:34:6b:de:0d:8f:b8:5d:cc:
                    f3:32:7a:37:29:83:c5:49:73:93:25:7c:8d:4b:e3:
                    f4:ae:55:8e:d4:d6:82:d5:7c:d8:93:58:84:a7:0e:
                    a8:fa:ed:ec:e8:b4:cf:38:dc:0c:17:72:7c:37:ea:
                    6e:02:5a:e2:c1:25:62:67:83:bb:55:a0:72:6c:8f:
                    a6:85:57:e0:0c:26:45:3e:80:7b:ef:58:bb:87:bf:
                    7f:9c:4a:5a:8b:9f:e4:39:e0:d1:a8:64:90:64:5d:
                    73:d1:27:6f:56:00:56:d4:17:dd:ac:67:4c:0a:c4:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:35:6A:90:01:84:78:01:88:CC:BC:53:DB:4C:70:2E:DB:D3:07:1F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60bbab6f-6758-4fff-b67d-648fe3812b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31b8::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:fa:e6:5d:d0:f6:b5:a7:36:8d:ee:51:56:e2:f4:ec:fb:
         c9:64:84:00:eb:e3:5a:79:e9:86:21:38:5d:7f:51:bd:c0:62:
         5a:66:6c:e2:8c:6d:00:d8:cc:1e:ab:c9:b9:6b:09:6e:09:bf:
         2f:6b:98:05:c5:e2:35:22:21:6e:22:d6:dd:dd:bf:8e:28:fc:
         17:5a:41:7c:5c:f1:26:ff:fd:42:54:65:9a:42:3c:f0:00:7c:
         54:f2:07:fa:fe:6c:43:bf:7f:c4:0c:35:7f:16:25:ff:8e:85:
         29:aa:39:e1:40:51:ba:9a:de:e3:45:14:38:8c:d5:bc:1f:bb:
         2a:1f:ee:68:e0:46:e8:23:e7:8a:1c:c2:62:80:1e:77:37:fe:
         1c:f1:83:dd:c0:62:1f:7c:66:ad:79:ba:8c:92:1e:03:9b:cd:
         40:39:1c:c0:96:1a:9f:db:1f:ad:43:c4:b2:a6:85:bf:af:b7:
         e1:8f:a9:50:d7:ed:28:fe:01:3d:14:63:4f:b0:33:41:a6:87:
         21:c9:f9:e8:06:c4:0b:25:0d:93:8e:b7:03:be:9b:8a:b1:2e:
         19:c7:5d:7a:9b:70:bd:10:52:04:aa:d3:1d:f2:5c:77:17:d5:
         9c:02:16:07:3b:c8:13:2f:9e:71:46:f1:f7:9b:6c:38:f3:75:
         86:0c:7d:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:15 2026 by rpki-client