Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa
File:                     0fac9826-e110-44d8-8ff4-3043f62ef54f.roa (raw, json)
Hash identifier:          r0dJiA8jZ4rBECph4zv4OT+U/kWpK8L7sbL5nUZi7w8=
Subject key identifier:   D3:B1:2B:7C:1B:B4:15:01:29:C7:91:1E:BB:45:E1:34:61:8D:3C:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F61D681582002D6C19D3863FE72893FD655868B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa
Signing time:             Thu 23 Jul 2026 11:12:00 +0000
ROA not before:           Thu 23 Jul 2026 11:12:00 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:61:d6:81:58:20:02:d6:c1:9d:38:63:fe:72:89:3f:d6:55:86:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:12:00 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=1948750ee0e167874f4ec6a2fc5e39d878cee3d480c013b1fb5212db23c2b930, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:88:82:be:d2:b0:6c:61:eb:71:6a:53:5a:
                    82:ef:28:9d:aa:5e:f9:73:f5:ea:d4:92:aa:48:f8:
                    ce:8f:3a:9f:15:9d:76:08:93:8a:9c:9d:a8:29:3f:
                    33:d1:78:1a:81:78:9c:1b:38:cb:ba:88:2b:da:31:
                    ea:3b:0c:7d:c0:8b:7e:a7:62:22:f1:fc:a3:11:19:
                    d1:78:38:e8:bb:94:ae:89:2a:f8:da:0a:db:57:7e:
                    a2:8d:f9:90:8a:df:c0:ca:f0:f2:02:eb:14:1d:12:
                    f6:51:c4:67:ea:91:36:50:99:72:6f:9b:35:1c:d0:
                    66:70:7d:9d:ba:54:46:c3:ed:1e:b7:71:a0:05:a5:
                    f7:25:32:be:7a:95:b5:ed:c9:c1:c2:8e:4b:59:71:
                    68:21:97:b0:60:f7:70:16:4d:51:63:f0:a4:31:1f:
                    62:46:90:14:c9:2e:61:16:45:52:2a:42:dc:6d:bb:
                    b7:06:25:8b:23:06:9b:80:7d:35:97:86:b8:02:dc:
                    31:be:21:a1:1f:21:e9:f3:67:b0:af:90:ee:d3:18:
                    39:6e:c6:8a:8c:1c:46:75:b2:2f:c6:60:29:b4:61:
                    b5:a0:1c:7b:3f:44:30:47:65:4d:89:cd:93:ea:5e:
                    19:48:f3:9c:70:86:b0:27:e4:b1:b8:4b:8f:26:c2:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B1:2B:7C:1B:B4:15:01:29:C7:91:1E:BB:45:E1:34:61:8D:3C:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cac::/46

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:1f:45:ea:32:50:b1:bb:54:92:03:ba:cd:c5:b9:22:f0:
         3b:8f:ce:0e:51:54:4b:8f:53:1d:b2:c0:fb:54:35:28:73:a1:
         ef:a6:b1:a6:37:3b:b9:f3:17:0b:27:95:14:00:da:54:13:50:
         34:0f:d1:61:a1:55:bd:15:d5:17:82:79:bc:78:ed:0e:36:37:
         e2:9f:9a:f0:36:86:bb:db:f9:9e:17:d6:da:04:d9:58:7a:ac:
         1f:bc:35:fa:70:22:69:46:41:f9:ef:0c:ea:d6:f6:a4:a7:27:
         55:e7:74:d6:3d:11:03:92:de:f6:bc:15:f8:10:a2:cd:ce:30:
         96:97:c7:3a:ef:11:3b:d4:d0:3b:2f:19:5d:ae:47:58:d8:50:
         eb:58:b6:aa:b8:39:34:e9:8b:54:a3:24:8f:45:36:17:c5:0e:
         82:ea:8d:91:32:a6:d7:c3:8d:e7:22:2d:1f:65:a1:0e:16:2e:
         a0:46:d2:d5:2f:6d:41:d5:4d:30:dd:9f:78:1e:e7:89:29:30:
         b7:49:4c:c0:a2:3b:bc:0f:49:5a:93:5a:bb:3e:76:04:b2:3a:
         47:cf:33:c0:d2:31:02:6b:1a:39:97:19:93:62:06:1e:7b:bd:
         2b:96:bb:d8:f7:18:e6:25:4b:f5:72:27:45:40:5a:ac:e2:23:
         9b:41:b5:48
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD2HWgVggAtbBnThj/nKJP9ZVhoswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTExMjAwWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTQ4NzUwZWUwZTE2Nzg3NGY0ZWM2YTJmYzVlMzlkODc4
Y2VlM2Q0ODBjMDEzYjFmYjUyMTJkYjIzYzJiOTMwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOc4iCvtKwbGHrcWpTWoLvKJ2qXvlz9erUkqpI+M6POp8V
nXYIk4qcnagpPzPReBqBeJwbOMu6iCvaMeo7DH3Ai36nYiLx/KMRGdF4OOi7lK6J
KvjaCttXfqKN+ZCK38DK8PIC6xQdEvZRxGfqkTZQmXJvmzUc0GZwfZ26VEbD7R63
caAFpfclMr56lbXtycHCjktZcWghl7Bg93AWTVFj8KQxH2JGkBTJLmEWRVIqQtxt
u7cGJYsjBpuAfTWXhrgC3DG+IaEfIenzZ7CvkO7TGDluxoqMHEZ1si/GYCm0YbWg
HHs/RDBHZU2JzZPqXhlI85xwhrAn5LG4S48mwnVzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU07ErfBu0FQEpx5Eeu0XhNGGNPDMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBmYWM5ODI2LWUxMTAtNDRkOC04ZmY0LTMwNDNmNjJlZjU0Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALKwwDQYJKoZIhvcNAQELBQADggEBAEpJH0XqMlCxu1SSA7rNxbki
8DuPzg5RVEuPUx2ywPtUNShzoe+msaY3O7nzFwsnlRQA2lQTUDQP0WGhVb0V1ReC
ebx47Q42N+KfmvA2hrvb+Z4X1toE2Vh6rB+8NfpwImlGQfnvDOrW9qSnJ1XndNY9
EQOS3va8FfgQos3OMJaXxzrvETvU0DsvGV2uR1jYUOtYtqq4OTTpi1SjJI9FNhfF
DoLqjZEyptfDjeciLR9loQ4WLqBG0tUvbUHVTTDdn3ge54kpMLdJTMCiO7wPSVqT
Wrs+dgSyOkfPM8DSMQJrGjmXGZNiBh57vSuWu9j3GOYlS/VyJ0VAWqziI5tBtUg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:49 2026 by rpki-client