Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/becc54d0-e0e8-4c70-a20d-fc550aae4374.roa
File:                     becc54d0-e0e8-4c70-a20d-fc550aae4374.roa (raw, json)
Hash identifier:          4IxeRvZPosiEgVp/AZoQdvuO9QudU/IbdlpGFYwAMcg=
Subject key identifier:   EB:C0:4F:40:63:B5:44:6C:70:56:44:FC:B8:C8:F1:DE:C6:11:6F:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0CAACBB701A00BB5C39A9A7CECF357883B31DFDD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/becc54d0-e0e8-4c70-a20d-fc550aae4374.roa
Signing time:             Thu 23 Jul 2026 11:10:53 +0000
ROA not before:           Thu 23 Jul 2026 11:10:53 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3580::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:cb:b7:01:a0:0b:b5:c3:9a:9a:7c:ec:f3:57:88:3b:31:df:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:10:53 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ca55d88dcdcd6d151ee9e27051d47ac9c20b425c4b69f98b0223a899be982c8e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:a8:6e:40:19:bb:40:0f:41:19:09:47:8b:
                    bf:d8:20:b2:95:1a:3a:06:b0:23:20:f1:1d:ec:e6:
                    61:f7:6d:1d:fa:05:47:ed:38:d5:55:9f:22:2a:d5:
                    31:57:bc:26:21:9d:65:f7:cb:3b:12:bb:64:33:33:
                    73:4e:70:28:24:76:3a:76:f6:b1:cb:6c:e4:18:98:
                    59:eb:31:a8:59:72:c4:d1:c7:13:cd:4c:6f:2c:c5:
                    34:85:6d:4a:ea:38:df:e0:7b:a3:75:bc:72:de:e6:
                    c6:d9:16:f1:65:43:c7:0c:a0:a0:9c:ab:98:a1:d9:
                    f2:78:7f:39:b9:6f:3b:08:a1:2f:bb:93:97:12:c1:
                    8f:4d:4c:f2:df:88:c5:72:22:93:6a:db:cb:9e:d8:
                    d9:2d:9d:bc:17:03:b3:b7:1d:ff:f5:2b:48:91:42:
                    55:d4:a4:b5:31:5b:cc:80:24:f6:0d:ac:be:a4:c8:
                    58:58:b5:14:50:56:31:8f:2b:bd:ca:53:b6:6c:6c:
                    21:ee:40:b2:20:31:e1:81:c2:22:c8:1d:8c:3e:cc:
                    a5:94:e6:4c:c1:61:3b:6d:c9:6a:95:38:dc:18:15:
                    ae:8f:75:c7:ae:66:ea:3c:97:00:4f:74:48:0b:da:
                    fa:70:a2:2e:3a:f6:74:c3:3c:6a:09:ce:5b:fe:f9:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:4F:40:63:B5:44:6C:70:56:44:FC:B8:C8:F1:DE:C6:11:6F:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/becc54d0-e0e8-4c70-a20d-fc550aae4374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3580::/46

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:8f:16:80:66:91:20:bd:8a:05:ca:61:91:47:2a:02:e7:
         42:16:53:1d:93:40:bd:21:81:b9:79:bd:a4:ae:e1:f5:36:71:
         39:b6:06:41:2c:e2:4c:a6:89:93:3f:96:23:3d:ba:4b:34:27:
         a1:2d:28:70:b3:93:77:f9:8f:40:38:c7:4b:21:10:e1:ab:d7:
         30:eb:a2:99:84:bb:a2:46:fc:d2:83:9e:11:f3:68:d6:0b:73:
         47:01:32:c1:c8:68:0e:2e:57:d6:ae:a0:d6:a1:dd:08:d3:e0:
         9a:b4:76:a2:11:ca:dc:ec:88:92:ea:e9:7b:07:1a:a8:b8:e7:
         2f:b1:7d:0c:c0:b1:04:1b:f3:d3:6e:5d:ae:aa:78:2a:04:2f:
         88:1f:0f:8e:8c:67:e5:20:92:76:8a:6c:0d:7f:e1:e6:65:89:
         2c:f1:01:c5:7e:03:3d:44:25:9f:e9:70:f6:54:ab:38:02:69:
         df:d5:e3:2c:4a:7d:50:ee:d2:40:13:86:66:bd:c9:f9:40:f3:
         3b:39:53:e6:8e:61:b4:71:94:30:4b:62:31:b1:d8:4b:e0:6b:
         28:94:02:ed:1d:1f:cd:76:82:65:06:71:e0:34:72:94:98:f6:
         e3:21:90:b8:b1:13:db:c2:63:d0:8f:01:bb:90:70:24:f3:7d:
         47:f0:25:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:50 2026 by rpki-client