Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04821ef6-523a-4fbc-8cea-c50de96f566b.roa
File:                     04821ef6-523a-4fbc-8cea-c50de96f566b.roa (raw, json)
Hash identifier:          FMI7Rvd2Vdb4Aw90j9J/Wkf5Pv9J7PXKRIvAJNbVLW4=
Subject key identifier:   83:02:0F:B4:1C:93:E3:34:6D:65:DB:4F:77:F7:46:79:0E:AA:5E:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C190A85AFCA4DB0790364E952219D2CFE5A098E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04821ef6-523a-4fbc-8cea-c50de96f566b.roa
Signing time:             Wed 22 Jul 2026 03:00:46 +0000
ROA not before:           Wed 22 Jul 2026 03:00:46 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:0a:85:af:ca:4d:b0:79:03:64:e9:52:21:9d:2c:fe:5a:09:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:00:46 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=f070f8a719ff12c9990da2421cdac9cb51e14d4791bd587bf38691a047040ca2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:ef:29:d5:09:50:2d:63:f4:14:f2:ab:20:
                    05:60:6e:48:27:22:73:cd:40:20:79:d2:76:d7:65:
                    d4:82:be:48:1c:3a:75:b8:a2:0c:b6:f3:a0:92:a6:
                    cb:b3:0b:8b:af:fe:e4:49:bf:42:39:fd:db:47:3f:
                    8d:77:32:31:dd:99:22:ff:f5:8a:39:8a:09:23:32:
                    df:c0:41:cf:5f:c9:e2:b3:85:2f:8f:63:bc:87:59:
                    c1:28:2d:f7:06:4f:e3:27:8f:d1:38:90:0e:dd:c0:
                    84:52:b6:54:ce:ac:27:95:db:56:71:6f:ed:e7:21:
                    be:48:ac:06:b9:cc:0c:a6:37:3c:56:26:a1:76:05:
                    ae:bb:1f:a6:b8:74:1d:7c:5d:a8:25:b1:e8:9e:6c:
                    6c:de:c4:57:b5:77:d2:b5:23:24:41:f6:a1:cf:29:
                    2f:4a:e7:8f:ed:64:21:12:50:ef:3a:15:3a:1c:34:
                    52:e3:7a:8b:b9:b7:1a:ad:14:f9:da:53:b6:14:68:
                    88:65:0a:78:40:ed:62:0d:48:0f:1a:69:27:d0:ba:
                    74:1a:14:ea:5f:19:40:20:35:89:5f:e2:9f:59:73:
                    a2:6b:64:1c:5a:6b:e3:31:2e:ba:56:23:44:76:ba:
                    8e:fa:55:a6:98:39:f2:03:c9:83:52:b9:23:31:18:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:0F:B4:1C:93:E3:34:6D:65:DB:4F:77:F7:46:79:0E:AA:5E:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04821ef6-523a-4fbc-8cea-c50de96f566b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31e6::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:ee:08:48:c4:68:c5:da:c4:d4:a9:7b:88:44:8e:d5:ee:
         9d:a8:1f:cf:33:88:a2:f7:11:ea:c6:54:b2:40:c7:fd:32:b3:
         ce:bb:91:c3:8f:4f:0c:f1:f4:f1:ef:7c:11:26:d3:78:47:e8:
         83:5c:86:1b:50:ca:70:b5:f1:1c:92:40:33:e0:74:7d:b1:a9:
         d9:b9:26:24:79:6d:31:58:14:90:25:30:a5:0a:82:28:1b:7a:
         a0:78:06:16:3f:4d:74:26:ab:c2:d3:13:e7:a2:19:fd:ec:9d:
         a1:3f:8c:61:5f:ab:27:21:7b:ee:11:09:c0:93:5a:43:80:10:
         10:99:10:64:61:f0:14:77:23:97:cf:64:01:f3:fd:41:8e:ab:
         75:ed:bf:87:0f:9a:c9:68:3b:d8:ed:02:1d:b9:0b:f2:31:0f:
         15:60:93:79:9a:34:bf:b8:d5:8a:65:22:e5:f9:f1:8b:e1:22:
         81:68:75:4d:4f:7e:5f:3d:30:9e:98:2a:86:33:d3:99:ac:10:
         cf:64:73:ee:74:8d:ca:cc:dc:57:5e:cf:32:a3:65:a6:6d:ba:
         bc:a8:80:4b:fd:72:f5:7e:99:37:fb:ea:97:5a:ff:be:c4:17:
         ee:bb:13:58:6f:6b:79:e3:82:f7:68:e6:bd:1e:9b:04:89:62:
         15:28:56:80
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbBkKha/KTbB5A2TpUiGdLP5aCY4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMwMDQ2WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDcwZjhhNzE5ZmYxMmM5OTkwZGEyNDIxY2RhYzljYjUx
ZTE0ZDQ3OTFiZDU4N2JmMzg2OTFhMDQ3MDQwY2EyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCi7u8p1QlQLWP0FPKrIAVgbkgnInPNQCB50nbXZdSCvkgc
OnW4ogy286CSpsuzC4uv/uRJv0I5/dtHP413MjHdmSL/9Yo5igkjMt/AQc9fyeKz
hS+PY7yHWcEoLfcGT+Mnj9E4kA7dwIRStlTOrCeV21Zxb+3nIb5IrAa5zAymNzxW
JqF2Ba67H6a4dB18XaglseiebGzexFe1d9K1IyRB9qHPKS9K54/tZCESUO86FToc
NFLjeou5txqtFPnaU7YUaIhlCnhA7WINSA8aaSfQunQaFOpfGUAgNYlf4p9Zc6Jr
ZBxaa+MxLrpWI0R2uo76VaaYOfIDyYNSuSMxGKJBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgwIPtByT4zRtZdtPd/dGeQ6qXk8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA0ODIxZWY2LTUyM2EtNGZiYy04Y2VhLWM1MGRlOTZmNTY2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMeYwDQYJKoZIhvcNAQELBQADggEBACsj7ghIxGjF2sTUqXuIRI7V
7p2oH88ziKL3EerGVLJAx/0ys867kcOPTwzx9PHvfBEm03hH6INchhtQynC18RyS
QDPgdH2xqdm5JiR5bTFYFJAlMKUKgigbeqB4BhY/TXQmq8LTE+eiGf3snaE/jGFf
qyche+4RCcCTWkOAEBCZEGRh8BR3I5fPZAHz/UGOq3Xtv4cPmsloO9jtAh25C/Ix
DxVgk3maNL+41YplIuX58YvhIoFodU1Pfl89MJ6YKoYz05msEM9kc+50jcrM3Fde
zzKjZaZturyogEv9cvV+mTf76pda/77EF+67E1hva3njgvdo5r0emwSJYhUoVoA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:05 2026 by rpki-client