Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69306d06-631e-48d1-8f12-351351743de5.roa
File:                     69306d06-631e-48d1-8f12-351351743de5.roa (raw, json)
Hash identifier:          +AS0BXeCDVzZINntPntzR4CzcSSZXR0WT5+444y/H0Y=
Subject key identifier:   00:F0:CC:CC:84:92:F2:30:68:E5:52:A9:3A:46:73:3B:FC:47:92:CC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       63599B88B2016352DF743FF69AAA923042D493A3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69306d06-631e-48d1-8f12-351351743de5.roa
Signing time:             Thu 23 Jul 2026 11:41:51 +0000
ROA not before:           Thu 23 Jul 2026 11:41:51 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:59:9b:88:b2:01:63:52:df:74:3f:f6:9a:aa:92:30:42:d4:93:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:41:51 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=9466f61764b1b80ef4caf37314ad2fc5907dc113ff1563cac9e9e75b1f2a34e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:fb:eb:f6:15:c5:60:01:7a:44:d0:83:8b:
                    63:58:15:16:85:b4:c6:4b:47:88:de:e9:84:8a:59:
                    98:d1:25:fa:53:60:7d:f0:e5:d6:37:66:34:cc:cd:
                    41:20:20:6f:43:de:62:c9:39:e6:86:a2:16:41:99:
                    ab:f0:26:5b:91:e0:3d:f2:8e:e7:c0:2c:54:f9:f9:
                    1c:d5:96:15:22:e2:b5:c9:38:27:a1:7c:72:5c:f7:
                    03:95:cf:e3:3e:86:ba:11:9b:29:85:6e:45:55:9b:
                    ab:35:35:84:76:da:ff:f4:25:a1:e1:2e:fc:c3:e3:
                    67:8c:91:b4:b6:46:4c:e9:ea:56:ee:5f:a3:98:96:
                    95:5b:43:53:03:a9:db:ad:bb:db:d9:e2:75:85:a1:
                    59:a9:31:00:7a:7b:e9:fc:d4:a8:fa:d7:f8:57:9d:
                    c3:dd:f5:e1:ee:a3:28:00:2e:8d:53:80:e8:fa:66:
                    7d:7d:ef:38:2c:0a:51:27:5d:fe:9c:33:a9:65:49:
                    57:80:96:7b:c0:20:6e:8a:80:9b:f7:af:93:b4:2d:
                    e3:5c:58:f5:4b:fd:71:dc:24:a1:81:01:dd:41:b8:
                    df:bb:5a:1c:18:31:b8:4c:e8:64:d2:ba:b7:29:9a:
                    94:07:3e:6a:80:3f:f9:2d:ae:8a:2f:ec:ec:85:3d:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:CC:CC:84:92:F2:30:68:E5:52:A9:3A:46:73:3B:FC:47:92:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69306d06-631e-48d1-8f12-351351743de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3900::/41

    Signature Algorithm: sha256WithRSAEncryption
         83:72:63:1a:dc:05:e4:97:17:6c:16:5a:d7:0c:2f:c5:1b:50:
         54:94:2a:cc:2b:70:9e:63:d7:49:90:bf:2c:28:62:31:ca:d4:
         84:f8:b7:f4:dc:82:e7:83:03:4e:5d:ff:6d:76:70:c3:a4:ea:
         98:6f:78:d9:c8:92:92:6a:22:a2:49:19:6a:0b:f0:d7:12:77:
         73:52:a7:c0:13:fe:03:c5:88:07:3c:59:92:5d:e9:19:7d:9f:
         2f:98:bf:18:09:df:8f:1f:b0:6e:90:fc:c5:e8:88:53:99:01:
         f2:81:f1:9b:81:ca:ab:bf:3c:32:6d:3e:8a:13:df:74:69:cc:
         34:13:d6:ef:ba:e5:d7:51:e9:ab:f5:cc:a3:83:e2:6e:07:53:
         ed:6d:24:25:11:f5:31:a4:35:bb:b8:c0:ed:33:cb:35:72:2c:
         5a:51:95:b0:ad:be:b5:d3:de:6c:86:05:b8:0f:0f:66:ff:07:
         9e:ee:24:8a:62:8d:15:13:1f:a6:e1:e3:d6:e9:70:99:ad:7d:
         50:f2:89:72:37:eb:29:c5:10:b5:e9:e6:50:7c:f3:6e:77:a8:
         9d:07:53:35:55:77:79:66:0b:33:18:5c:aa:6b:12:fd:98:77:
         8f:c5:37:fb:fc:94:d2:16:43:a2:e0:ef:3f:5e:62:51:46:e1:
         b1:8d:33:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:31 2026 by rpki-client