Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15863575-a1c2-4c46-b138-4e73cf9dcfea.roa
File:                     15863575-a1c2-4c46-b138-4e73cf9dcfea.roa (raw, json)
Hash identifier:          2suGGiBWr/UVNe1UsC28gJOyqUjODZ0ZchIXPfDIbLQ=
Subject key identifier:   09:6B:D2:15:50:1A:36:50:E5:1B:13:A8:FB:71:88:26:A2:24:F5:78
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       10C4B256AD80D23507CC8CD27E1A0B8052CC355A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15863575-a1c2-4c46-b138-4e73cf9dcfea.roa
Signing time:             Wed 22 Jul 2026 00:31:25 +0000
ROA not before:           Wed 22 Jul 2026 00:31:25 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2eb2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c4:b2:56:ad:80:d2:35:07:cc:8c:d2:7e:1a:0b:80:52:cc:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:31:25 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=b9cf9f8be0525a2f04a04e90a5cc818e989a24b257ec0e4335b0e22722b81716, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:27:6c:ce:13:65:bd:da:3e:bc:85:66:18:
                    c0:71:17:8d:df:34:b5:5c:25:2d:5c:40:00:e3:6f:
                    25:c0:3f:71:5b:0c:53:d8:40:52:c1:9b:72:1c:fe:
                    46:c6:4a:85:fe:c2:3d:9c:48:eb:ad:80:34:d4:ef:
                    73:8a:79:aa:7d:52:63:df:e5:82:9b:ae:4e:fb:35:
                    ae:ee:33:bf:a8:86:bc:56:f0:b9:73:df:89:44:5b:
                    bb:15:08:85:00:27:df:db:0c:71:a1:6a:e6:d0:61:
                    6a:97:ab:39:ed:98:3b:6f:3b:65:28:58:9b:58:5b:
                    96:64:7b:47:ba:7b:a7:86:73:6d:4a:0f:45:a9:21:
                    dd:65:dc:65:8a:5f:04:b7:d5:ff:62:b2:9f:35:af:
                    30:10:c9:d5:98:97:c5:9c:1a:e9:f3:97:fa:dd:c3:
                    bb:71:80:db:c9:5e:b5:6f:df:c9:f0:f4:8b:84:d2:
                    e6:76:e4:4e:94:28:55:24:bb:f4:76:09:ac:59:f7:
                    d2:82:de:6c:f1:11:cb:f2:d6:69:bd:e6:d1:6c:b1:
                    1a:df:74:8f:08:9a:c9:8b:04:5c:ed:04:9f:81:c2:
                    7d:54:d2:60:24:5c:40:75:bb:61:3c:7d:0a:72:f4:
                    83:48:02:52:ef:9b:7b:cb:b2:9c:a9:54:b5:f1:ee:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:D2:15:50:1A:36:50:E5:1B:13:A8:FB:71:88:26:A2:24:F5:78
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15863575-a1c2-4c46-b138-4e73cf9dcfea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2eb2::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:e6:bf:19:84:ce:9a:a6:3e:04:ef:0b:75:88:43:92:c1:
         ba:04:56:9e:0a:cb:cc:7e:d1:c9:40:36:d6:2f:ad:01:4a:28:
         91:17:2c:bf:c2:51:6d:47:97:41:65:68:bc:45:ae:05:c6:02:
         f2:2b:57:d1:2f:b5:c0:33:75:3d:ef:44:a5:2d:a9:a0:85:86:
         a0:99:0d:35:55:3c:6e:8e:d4:f5:cf:7d:1f:17:e1:7d:58:71:
         92:24:2b:1a:2f:fd:29:88:9a:f7:50:a8:5b:51:27:18:ab:5e:
         c6:38:41:2a:df:bb:a5:bd:9d:3c:47:d2:54:6e:f0:e9:13:ee:
         dc:ac:c8:e6:8f:66:07:a4:63:cc:3d:58:de:20:6c:24:6d:b2:
         49:b9:95:5c:8f:8e:40:65:7b:3a:21:38:de:df:3e:70:e2:f5:
         13:25:01:08:81:58:3a:1e:d9:d6:f1:44:48:bd:65:66:1c:b9:
         db:b8:59:37:b1:bc:26:aa:a3:59:45:6e:3e:bf:1c:7f:51:43:
         85:a3:e9:2c:ea:2e:dc:1e:c7:61:1d:84:bd:4e:0f:35:ec:9f:
         61:4f:b5:ff:3f:ff:87:ce:b7:e5:07:7e:71:d1:ef:ab:18:b0:
         28:69:3d:36:51:5a:91:fa:dd:7c:ae:ca:20:ce:a0:fd:30:d1:
         23:bd:8b:c0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEMSyVq2A0jUHzIzSfhoLgFLMNVowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDAzMTI1WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWNmOWY4YmUwNTI1YTJmMDRhMDRlOTBhNWNjODE4ZTk4
OWEyNGIyNTdlYzBlNDMzNWIwZTIyNzIyYjgxNzE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6aCdszhNlvdo+vIVmGMBxF43fNLVcJS1cQADjbyXAP3Fb
DFPYQFLBm3Ic/kbGSoX+wj2cSOutgDTU73OKeap9UmPf5YKbrk77Na7uM7+ohrxW
8Llz34lEW7sVCIUAJ9/bDHGhaubQYWqXqzntmDtvO2UoWJtYW5Zke0e6e6eGc21K
D0WpId1l3GWKXwS31f9isp81rzAQydWYl8WcGunzl/rdw7txgNvJXrVv38nw9IuE
0uZ25E6UKFUku/R2CaxZ99KC3mzxEcvy1mm95tFssRrfdI8ImsmLBFztBJ+Bwn1U
0mAkXEB1u2E8fQpy9INIAlLvm3vLspypVLXx7oJDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCWvSFVAaNlDlGxOo+3GIJqIk9XgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE1ODYzNTc1LWExYzItNGM0Ni1iMTM4LTRlNzNjZjlkY2ZlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALrIwDQYJKoZIhvcNAQELBQADggEBAI6M5r8ZhM6apj4E7wt1iEOS
wboEVp4Ky8x+0clANtYvrQFKKJEXLL/CUW1Hl0FlaLxFrgXGAvIrV9EvtcAzdT3v
RKUtqaCFhqCZDTVVPG6O1PXPfR8X4X1YcZIkKxov/SmImvdQqFtRJxirXsY4QSrf
u6W9nTxH0lRu8OkT7tysyOaPZgekY8w9WN4gbCRtskm5lVyPjkBlezohON7fPnDi
9RMlAQiBWDoe2dbxREi9ZWYcudu4WTexvCaqo1lFbj6/HH9RQ4Wj6SzqLtwex2Ed
hL1ODzXsn2FPtf8//4fOt+UHfnHR76sYsChpPTZRWpH63XyuyiDOoP0w0SO9i8A=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:40 2026 by rpki-client