Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62ec6a87-00ae-4e86-a12d-a6970dab2b1d.roa
File:                     62ec6a87-00ae-4e86-a12d-a6970dab2b1d.roa (raw, json)
Hash identifier:          qnbamg77HI8H+GMaheLEY7dspJC84tGcs7VobJ0ocYs=
Subject key identifier:   43:89:D3:0C:DF:18:F2:77:51:F8:52:D7:F4:F9:93:8E:3E:18:44:08
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       337EC1292C159F434F2474B08CE8293A30295AD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62ec6a87-00ae-4e86-a12d-a6970dab2b1d.roa
Signing time:             Thu 23 Jul 2026 01:31:24 +0000
ROA not before:           Thu 23 Jul 2026 01:31:24 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:c1:29:2c:15:9f:43:4f:24:74:b0:8c:e8:29:3a:30:29:5a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:31:24 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fa22e3aec7e1a0366909b91769ffdaae68f71eeab4be084b11dcb8d82fd07396, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:03:76:b0:21:62:cf:19:67:de:76:8a:3d:
                    99:71:11:f4:8a:a8:ce:69:10:50:e8:dc:fa:7c:e0:
                    d0:ed:7b:fa:6e:03:11:85:13:62:b5:73:a8:67:dd:
                    60:8c:5a:cf:eb:59:0c:c6:85:e9:3a:a0:06:5b:5f:
                    50:50:9b:c8:07:c9:08:01:87:e4:19:84:54:57:88:
                    2a:80:a6:31:9b:65:44:6b:d4:78:54:d8:f4:18:03:
                    24:a0:4e:f8:fb:3e:02:8b:7c:42:9f:22:5e:cd:b8:
                    b3:a3:49:14:79:a5:18:59:96:48:de:c3:96:df:23:
                    8a:be:29:11:82:5d:98:d3:37:0f:dc:0b:0d:b2:58:
                    82:a6:fb:6b:6c:d1:9b:2d:13:9e:c0:42:68:8d:c8:
                    cf:f9:ed:8c:3f:d5:11:62:86:44:81:cb:8b:8e:fe:
                    c3:0f:e2:ca:a3:dc:04:1f:01:11:49:82:18:16:13:
                    42:0a:b6:c5:51:ba:cc:21:7b:03:a3:7d:2f:aa:20:
                    71:6e:c6:a5:7e:ff:95:14:f5:48:61:5f:7e:1a:25:
                    7e:fc:89:bb:54:f7:93:7b:e6:33:51:6e:a8:8e:31:
                    4b:80:00:bb:a9:7b:ef:a3:63:00:10:16:6f:38:83:
                    38:79:03:f8:c0:16:0d:b8:5a:0f:74:eb:72:08:37:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:D3:0C:DF:18:F2:77:51:F8:52:D7:F4:F9:93:8E:3E:18:44:08
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/62ec6a87-00ae-4e86-a12d-a6970dab2b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:1c:4e:94:5e:82:2f:9d:25:12:9b:92:b1:9d:0e:b2:b8:
         25:49:4d:37:fb:ef:c4:fd:8e:61:8f:54:88:d1:77:fe:3c:ec:
         9f:9b:af:31:c5:e6:8b:61:4f:69:cd:cb:fd:39:92:71:6d:30:
         b7:7a:52:74:2d:df:ea:a2:17:19:20:87:11:cd:e0:5b:92:da:
         fb:ce:66:58:32:90:b2:4a:bf:3b:8c:b1:d5:8d:8c:a3:75:2e:
         97:cf:6a:07:9f:62:b6:0e:4a:5b:ed:35:3b:7d:6b:af:39:68:
         7f:f1:e4:4e:cb:f4:91:da:c4:ee:c0:8f:99:bc:73:0a:e4:cd:
         a7:ae:08:3c:c0:02:ee:dc:bc:c5:b6:89:19:18:2b:ee:18:a2:
         15:40:79:d3:ae:48:8c:47:b6:fd:e6:a2:28:8d:a1:e1:51:fe:
         d3:78:01:12:8c:e0:c5:ca:7e:04:24:1d:b7:c3:11:cf:d3:84:
         3f:9d:6e:59:f5:2e:fc:2a:74:bf:ce:45:32:89:f9:b7:4e:36:
         e7:7b:f6:ea:e0:94:74:5c:e0:8c:d7:67:56:ec:56:b2:24:06:
         c5:77:87:36:27:17:e5:e9:ac:d5:5b:5d:f5:f5:c0:74:e8:36:
         6d:2c:37:b2:86:23:3c:92:53:04:4d:ac:de:af:94:86:38:63:
         5d:d7:d6:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:03:35 2026 by rpki-client