Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11fc603d-c4dc-4a68-a201-04eb09a98b9e.roa
File:                     11fc603d-c4dc-4a68-a201-04eb09a98b9e.roa (raw, json)
Hash identifier:          lYNUW7D3D72/0h4glJy9jnc6M9yfFWvZ7YBRs3prna0=
Subject key identifier:   63:BA:5F:38:4D:29:48:6E:67:C3:5A:9E:9C:68:5C:FA:4D:2E:A6:B7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F288C7D3BE0EE6ECD048D9064BBE304EE3B3694
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11fc603d-c4dc-4a68-a201-04eb09a98b9e.roa
Signing time:             Thu 23 Jul 2026 11:10:04 +0000
ROA not before:           Thu 23 Jul 2026 11:10:04 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e4c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:8c:7d:3b:e0:ee:6e:cd:04:8d:90:64:bb:e3:04:ee:3b:36:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:10:04 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=107229514b98ccc6b5ee3368455f51f1d065e1b1700296ac0b48069df5d7eebd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:78:54:53:65:51:3e:af:60:37:0b:3c:84:
                    7e:39:44:95:40:c6:c1:b4:82:61:6a:e3:a3:01:a5:
                    31:39:4d:2e:cd:d4:68:f0:5c:44:f2:bc:79:78:b3:
                    68:b9:42:74:10:66:58:7d:29:93:7a:84:4a:d5:86:
                    5e:b1:8d:c4:9d:9b:bd:d2:25:ee:11:ad:e8:45:66:
                    e8:d2:d5:e7:ab:c9:5a:93:10:ba:83:14:c5:26:9a:
                    b7:bd:d0:31:cc:e3:38:f2:6c:2d:74:ff:f8:05:c2:
                    f0:1c:0e:49:a1:40:2d:01:c8:fb:a4:7f:f6:17:82:
                    65:df:78:5c:4c:b7:2f:7b:de:58:17:89:2a:a0:1b:
                    b5:cd:dd:5c:13:a8:8e:86:ad:8b:a3:34:15:1b:5c:
                    d0:84:5a:d2:d7:ab:14:fb:aa:20:45:ff:86:21:8f:
                    c4:93:3b:25:a1:8c:0e:e6:1b:c0:06:08:88:bd:16:
                    1b:df:1e:db:d7:be:17:bf:2f:6a:b0:aa:3e:3e:ce:
                    08:2e:06:ec:c4:62:fa:16:1f:16:51:b3:72:ab:5d:
                    26:7e:59:61:af:8e:0b:5e:e0:c5:87:52:e4:09:97:
                    0d:ed:be:e2:27:52:da:f1:df:6e:3a:86:5d:06:aa:
                    62:2c:d2:a9:1c:bf:11:80:3d:ea:b1:8f:89:78:87:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:5F:38:4D:29:48:6E:67:C3:5A:9E:9C:68:5C:FA:4D:2E:A6:B7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11fc603d-c4dc-4a68-a201-04eb09a98b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e4c::/46

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:36:d8:97:fb:73:df:04:fa:b4:94:6e:85:b3:c0:21:42:
         1c:85:8f:42:36:cc:d4:28:9e:31:32:74:7f:89:10:77:ba:91:
         83:f2:c9:3b:bf:14:3c:0d:9f:e3:e3:40:6a:7a:9d:e9:e6:ed:
         f5:51:91:53:e1:3f:7d:38:19:d6:7a:6c:00:b0:96:2a:75:a9:
         eb:4a:26:9d:83:91:d6:41:f9:fc:3e:0a:50:73:ad:e4:c6:45:
         7d:5b:ca:94:65:bf:0a:f9:9d:b8:29:5e:e0:ce:9a:8d:3d:a6:
         dc:51:5b:e0:2a:be:7b:90:44:eb:b5:7a:3f:60:59:cd:35:13:
         76:e8:1a:9d:f9:11:39:95:b6:bf:d9:f0:2d:8f:9c:e4:de:72:
         c9:9b:c6:c7:b4:09:32:e3:47:f0:b8:fa:23:d0:fc:39:21:d7:
         57:ad:45:f9:e3:c4:60:b6:71:72:b4:86:7c:f8:ec:de:3f:f9:
         94:ad:7e:0f:69:25:1d:d2:8c:dc:4e:13:c8:5b:b3:3a:32:2f:
         1b:43:10:0d:f0:32:71:98:6f:7e:d7:00:68:4c:1a:2c:9d:d1:
         75:58:96:45:c3:4d:63:27:0c:5a:e3:d7:41:a5:71:cb:26:0c:
         7e:21:7c:ca:d2:a7:ca:5e:73:c5:0b:a0:ba:d1:ab:60:9e:49:
         9b:60:d2:2a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHyiMfTvg7m7NBI2QZLvjBO47NpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTExMDA0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDcyMjk1MTRiOThjY2M2YjVlZTMzNjg0NTVmNTFmMWQw
NjVlMWIxNzAwMjk2YWMwYjQ4MDY5ZGY1ZDdlZWJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCITXhUU2VRPq9gNws8hH45RJVAxsG0gmFq46MBpTE5TS7N
1GjwXETyvHl4s2i5QnQQZlh9KZN6hErVhl6xjcSdm73SJe4RrehFZujS1eeryVqT
ELqDFMUmmre90DHM4zjybC10//gFwvAcDkmhQC0ByPukf/YXgmXfeFxMty973lgX
iSqgG7XN3VwTqI6GrYujNBUbXNCEWtLXqxT7qiBF/4Yhj8STOyWhjA7mG8AGCIi9
FhvfHtvXvhe/L2qwqj4+zgguBuzEYvoWHxZRs3KrXSZ+WWGvjgte4MWHUuQJlw3t
vuInUtrx3246hl0GqmIs0qkcvxGAPeqxj4l4h6abAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUY7pfOE0pSG5nw1qenGhc+k0uprcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzExZmM2MDNkLWM0ZGMtNGE2OC1hMjAxLTA0ZWIwOWE5OGI5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALkwwDQYJKoZIhvcNAQELBQADggEBABiMNtiX+3PfBPq0lG6Fs8Ah
QhyFj0I2zNQonjEydH+JEHe6kYPyyTu/FDwNn+PjQGp6nenm7fVRkVPhP304GdZ6
bACwlip1qetKJp2DkdZB+fw+ClBzreTGRX1bypRlvwr5nbgpXuDOmo09ptxRW+Aq
vnuQROu1ej9gWc01E3boGp35ETmVtr/Z8C2PnOTecsmbxse0CTLjR/C4+iPQ/Dkh
11etRfnjxGC2cXK0hnz47N4/+ZStfg9pJR3SjNxOE8hbszoyLxtDEA3wMnGYb37X
AGhMGiyd0XVYlkXDTWMnDFrj10GlccsmDH4hfMrSp8pec8ULoLrRq2CeSZtg0io=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:24 2026 by rpki-client