Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f8661fe-da1b-43d8-9424-d083a3365116.roa
File:                     1f8661fe-da1b-43d8-9424-d083a3365116.roa (raw, json)
Hash identifier:          +G7lIDDQMzgTPhhIParl/5F7Pe7wZIUZqFbLjZq+nJ0=
Subject key identifier:   B4:A6:86:75:AD:C9:C8:DF:76:73:B0:8C:89:1F:0D:31:16:5C:E7:C8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7AED924F9CCD8DA6EBE1C1310C43AF9247340261
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f8661fe-da1b-43d8-9424-d083a3365116.roa
Signing time:             Thu 23 Jul 2026 05:10:55 +0000
ROA not before:           Thu 23 Jul 2026 05:10:55 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3632::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ed:92:4f:9c:cd:8d:a6:eb:e1:c1:31:0c:43:af:92:47:34:02:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 05:10:55 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=459fcc0e00b68356ce504771234e4fd5537fff3024beaa8d012eda5e6372d1c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:6a:9b:85:22:36:b0:c5:89:7d:94:75:89:
                    5c:cb:cc:80:f5:f6:d8:82:dd:6a:61:fa:ba:16:b0:
                    bf:6c:4c:30:bc:8d:5f:15:72:86:f0:ad:ee:59:7a:
                    40:19:88:12:31:70:12:31:81:af:d5:bc:69:89:e3:
                    64:6b:e5:34:e5:fa:88:ed:f5:12:01:8e:04:72:91:
                    3e:96:22:bc:a3:61:65:2c:27:56:4f:42:1c:48:b9:
                    e6:37:04:f9:01:ab:d2:92:f2:a4:f4:b5:87:5c:ec:
                    a6:52:ae:97:07:44:47:29:63:34:cb:39:bc:62:00:
                    51:1e:51:2f:34:a9:9e:81:ba:27:d1:e8:b7:c7:30:
                    f9:94:57:7f:78:1c:83:84:d5:fe:e2:b5:cc:0e:05:
                    57:a0:e4:0a:51:34:5b:b3:70:00:e8:a6:95:d1:17:
                    c4:d5:4f:4c:70:a0:d2:9d:16:1b:1b:1a:aa:08:de:
                    5a:31:c1:5b:68:0a:d5:ee:8c:14:b2:24:4d:4f:d4:
                    20:a4:0e:71:77:d4:49:55:70:cf:18:7b:95:3b:56:
                    23:da:66:19:eb:8f:19:1a:84:24:d0:3f:62:87:4c:
                    78:95:5c:0a:38:04:0f:24:07:21:40:89:eb:6f:00:
                    f0:92:41:1a:b6:f8:2c:8a:2b:5d:3f:4d:b2:44:35:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A6:86:75:AD:C9:C8:DF:76:73:B0:8C:89:1F:0D:31:16:5C:E7:C8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f8661fe-da1b-43d8-9424-d083a3365116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3632::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:12:84:0a:71:b8:32:cf:70:45:19:6c:74:e3:4f:19:f3:
         ff:74:92:04:94:70:d0:59:ba:a6:04:97:65:10:2b:38:de:15:
         2a:dd:55:3f:25:8a:21:87:28:53:25:b3:f0:77:a0:11:bc:3b:
         ba:d1:54:76:d3:2c:48:50:2c:7d:a4:d8:2e:9a:65:cc:be:e0:
         6f:be:6d:5a:0c:91:63:23:ad:ae:a5:ee:ff:00:c3:2c:dc:fb:
         8f:97:41:0a:52:3c:d1:64:03:c8:82:f7:ec:85:01:20:7e:44:
         34:a4:55:30:87:32:54:c2:55:67:08:f0:b9:98:3d:4c:47:69:
         d2:9a:af:88:ae:e7:28:57:e2:3c:61:57:73:70:38:4c:da:00:
         e7:ba:d5:48:d9:94:59:43:bb:dd:e2:34:dd:e3:86:0b:85:5d:
         7a:31:e6:30:3b:9a:cc:19:6f:1c:59:98:05:65:bc:73:a8:53:
         b5:f0:e7:7e:e9:55:cc:3d:e0:84:9b:c7:03:f5:74:f5:58:56:
         a8:77:7c:ab:97:3d:bc:1a:74:92:d0:79:36:bd:66:7e:4c:9c:
         31:e1:52:e7:e3:4f:9d:ad:f2:c6:ee:ad:71:b3:7a:15:5b:56:
         d7:0b:5d:90:7c:f1:4f:9d:fb:7e:e6:c0:e3:89:f3:b0:1d:6e:
         1b:bb:c4:46
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeu2ST5zNjabr4cExDEOvkkc0AmEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDUxMDU1WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTlmY2MwZTAwYjY4MzU2Y2U1MDQ3NzEyMzRlNGZkNTUz
N2ZmZjMwMjRiZWFhOGQwMTJlZGE1ZTYzNzJkMWMwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCHhGqbhSI2sMWJfZR1iVzLzID19tiC3Wph+roWsL9sTDC8
jV8Vcobwre5ZekAZiBIxcBIxga/VvGmJ42Rr5TTl+ojt9RIBjgRykT6WIryjYWUs
J1ZPQhxIueY3BPkBq9KS8qT0tYdc7KZSrpcHREcpYzTLObxiAFEeUS80qZ6BuifR
6LfHMPmUV394HIOE1f7itcwOBVeg5ApRNFuzcADoppXRF8TVT0xwoNKdFhsbGqoI
3loxwVtoCtXujBSyJE1P1CCkDnF31ElVcM8Ye5U7ViPaZhnrjxkahCTQP2KHTHiV
XAo4BA8kByFAietvAPCSQRq2+CyKK10/TbJENcZPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtKaGda3JyN92c7CMiR8NMRZc58gwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFmODY2MWZlLWRhMWItNDNkOC05NDI0LWQwODNhMzM2NTExNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANjIwDQYJKoZIhvcNAQELBQADggEBAFWqEoQKcbgyz3BFGWx0408Z
8/90kgSUcNBZuqYEl2UQKzjeFSrdVT8liiGHKFMls/B3oBG8O7rRVHbTLEhQLH2k
2C6aZcy+4G++bVoMkWMjra6l7v8Awyzc+4+XQQpSPNFkA8iC9+yFASB+RDSkVTCH
MlTCVWcI8LmYPUxHadKar4iu5yhX4jxhV3NwOEzaAOe61UjZlFlDu93iNN3jhguF
XXox5jA7mswZbxxZmAVlvHOoU7Xw537pVcw94ISbxwP1dPVYVqh3fKuXPbwadJLQ
eTa9Zn5MnDHhUufjT52t8sburXGzehVbVtcLXZB88U+d+37mwOOJ87Adbhu7xEY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:44 2026 by rpki-client