Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa
File:                     1cedca13-83c5-4e28-aaac-1b749ae13577.roa (raw, json)
Hash identifier:          TYbU7s5ArmG8Kn8o+N+jb+iCF3n1n09Kwrh2QNSPMr0=
Subject key identifier:   18:7F:25:1F:84:A8:95:E0:6F:ED:DB:B1:E8:E2:3C:E9:15:0F:26:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4EC3FBF36EA7D9593098EE5875FC3676B142D70F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa
Signing time:             Thu 23 Jul 2026 08:12:01 +0000
ROA not before:           Thu 23 Jul 2026 08:12:01 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a78::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c3:fb:f3:6e:a7:d9:59:30:98:ee:58:75:fc:36:76:b1:42:d7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 08:12:01 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=08101f2bc13c906f90655f95d0f41ed2ae302f20d5d095b827c3f80e603fd8eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:f9:13:00:25:27:6d:2e:b8:dd:b1:ca:ab:
                    6a:68:53:00:61:6d:43:28:a0:da:62:05:79:07:17:
                    81:77:e9:c0:2f:b7:5a:7c:23:33:c4:da:fa:49:05:
                    55:c2:76:35:1b:bd:24:bf:af:e2:9c:ce:5c:59:59:
                    43:98:d1:21:b2:c5:e7:00:3a:f3:b4:88:f5:83:8b:
                    80:3d:c3:dd:b0:28:1b:a1:03:12:5f:eb:7d:7a:83:
                    e3:bd:4e:6f:6e:00:a0:86:dd:dd:5c:77:a9:ec:d9:
                    24:08:d5:6a:39:ee:b1:c1:35:c7:7d:da:a4:c9:72:
                    90:7f:9f:a0:c3:d3:f0:73:25:8a:45:ea:89:a5:ab:
                    ca:fd:6b:76:c4:10:e0:38:8a:e7:2a:80:45:3e:d1:
                    3d:94:3c:dc:da:e1:cd:c6:fa:f0:9a:18:bd:0d:da:
                    a3:72:2c:12:95:de:7d:e5:23:6c:e5:b7:4a:97:83:
                    17:79:78:3a:cc:e4:0e:c7:a9:be:d2:1d:da:14:e5:
                    a0:ce:a8:a1:99:38:95:27:0c:e9:d8:4d:20:68:d0:
                    8c:4b:2a:00:93:7f:87:e2:ce:9f:a7:f2:54:82:3b:
                    09:d1:d3:16:ca:c4:b4:c5:f1:e7:39:a7:e1:9c:e9:
                    2a:c6:eb:f1:45:cb:66:ed:e3:80:78:84:f7:77:dc:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:25:1F:84:A8:95:E0:6F:ED:DB:B1:E8:E2:3C:E9:15:0F:26:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1cedca13-83c5-4e28-aaac-1b749ae13577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a78::/46

    Signature Algorithm: sha256WithRSAEncryption
         20:12:3b:dc:cb:12:29:07:ff:57:9e:15:bb:f4:e8:d6:92:d6:
         66:ec:0a:92:e4:08:38:c8:12:35:67:71:d5:03:21:f6:b2:1c:
         dd:58:26:d8:e9:c4:75:4e:d7:d5:60:5b:c1:aa:50:bb:cd:53:
         97:66:bc:57:c8:e6:75:03:f6:8a:e6:96:7d:05:ea:78:e2:b8:
         69:54:ca:c4:bc:67:11:e1:6d:cc:03:df:08:5c:62:03:b0:eb:
         a3:7e:45:a9:7f:d2:d5:60:ca:97:65:6d:1b:ac:32:a0:fe:b6:
         ed:1e:23:30:33:c1:05:f9:c5:0b:65:b4:c0:cb:75:d2:2e:e8:
         5a:e5:5e:17:d4:d0:0e:0d:8a:a5:21:70:7d:65:a6:31:60:f6:
         7d:54:fe:fc:c6:4f:53:9e:32:84:a5:14:94:cf:fd:7c:22:55:
         7f:ef:42:e6:52:14:88:aa:87:60:1c:17:6a:1d:6f:95:5c:66:
         76:5a:23:85:50:05:2d:86:8a:d7:b2:f5:f9:2c:54:09:0b:9b:
         59:2d:48:b4:4b:05:ac:90:7c:68:b1:9b:db:46:50:f5:77:75:
         cd:8a:a4:13:12:58:09:e2:ef:c2:39:b9:38:b6:30:97:b9:ec:
         22:c2:92:30:e1:f5:00:0d:32:ff:5e:df:4b:b1:4d:bd:fb:60:
         e0:b1:14:6e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTsP7826n2VkwmO5Ydfw2drFC1w8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgxMjAxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwODEwMWYyYmMxM2M5MDZmOTA2NTVmOTVkMGY0MWVkMmFl
MzAyZjIwZDVkMDk1YjgyN2MzZjgwZTYwM2ZkOGViMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiWfkTACUnbS643bHKq2poUwBhbUMooNpiBXkHF4F36cAv
t1p8IzPE2vpJBVXCdjUbvSS/r+KczlxZWUOY0SGyxecAOvO0iPWDi4A9w92wKBuh
AxJf6316g+O9Tm9uAKCG3d1cd6ns2SQI1Wo57rHBNcd92qTJcpB/n6DD0/BzJYpF
6omlq8r9a3bEEOA4iucqgEU+0T2UPNza4c3G+vCaGL0N2qNyLBKV3n3lI2zlt0qX
gxd5eDrM5A7Hqb7SHdoU5aDOqKGZOJUnDOnYTSBo0IxLKgCTf4fizp+n8lSCOwnR
0xbKxLTF8ec5p+Gc6SrG6/FFy2bt44B4hPd33JYpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGH8lH4SoleBv7dux6OI86RUPJqQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFjZWRjYTEzLTgzYzUtNGUyOC1hYWFjLTFiNzQ5YWUxMzU3Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOngwDQYJKoZIhvcNAQELBQADggEBACASO9zLEikH/1eeFbv06NaS
1mbsCpLkCDjIEjVncdUDIfayHN1YJtjpxHVO19VgW8GqULvNU5dmvFfI5nUD9orm
ln0F6njiuGlUysS8ZxHhbcwD3whcYgOw66N+Ral/0tVgypdlbRusMqD+tu0eIzAz
wQX5xQtltMDLddIu6FrlXhfU0A4NiqUhcH1lpjFg9n1U/vzGT1OeMoSlFJTP/Xwi
VX/vQuZSFIiqh2AcF2odb5VcZnZaI4VQBS2Gitey9fksVAkLm1ktSLRLBayQfGix
m9tGUPV3dc2KpBMSWAni78I5uTi2MJe57CLCkjDh9QANMv9e30uxTb37YOCxFG4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:06 2026 by rpki-client