Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/244f977f-7101-4b04-9576-1ab2ba27c378.roa
File:                     244f977f-7101-4b04-9576-1ab2ba27c378.roa (raw, json)
Hash identifier:          OTybixcfZgWMdYuxGvZnbz2itk+0Pfql9R/xnGwqXXs=
Subject key identifier:   4D:83:C4:5E:12:9C:4A:A6:67:5A:73:62:39:58:CE:9B:B2:9F:A5:4D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4377D0F33759E62BAF79299B12A72A61E76A78A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/244f977f-7101-4b04-9576-1ab2ba27c378.roa
Signing time:             Thu 23 Jul 2026 11:00:08 +0000
ROA not before:           Thu 23 Jul 2026 11:00:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ea0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:77:d0:f3:37:59:e6:2b:af:79:29:9b:12:a7:2a:61:e7:6a:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:00:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=d28079b556275f60774d826520d9ce2f76092d1508e5e67e22102c45a555b67d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:fe:e7:5b:82:80:16:cf:7d:c8:6f:ca:65:
                    67:ac:b2:00:cf:91:75:07:b3:b0:b2:8c:82:ae:8c:
                    36:1d:21:91:ad:c8:ab:04:7f:13:62:cb:bf:db:57:
                    93:fe:41:e5:60:ba:c8:86:1d:56:ba:10:82:5d:dc:
                    66:f2:d3:a7:69:ae:9f:12:42:f7:86:fc:46:bb:ba:
                    55:a7:1d:67:5c:be:a8:ac:6c:d6:ed:a6:4f:43:64:
                    16:61:cf:40:ce:ed:45:7d:a8:4f:5b:0a:6b:62:5e:
                    db:a9:df:4e:b3:1b:ad:1c:30:95:5c:a4:22:dd:24:
                    86:6d:63:56:0a:bd:ed:9f:c6:91:71:0d:06:27:4f:
                    fc:37:1d:5d:19:d4:df:5b:68:52:60:41:9f:8e:cf:
                    24:cc:71:53:8d:29:15:45:72:d5:11:96:a6:e8:28:
                    e6:3b:f7:18:04:e4:41:57:c7:cf:72:90:26:77:ce:
                    40:25:ab:38:14:bf:14:88:2e:59:71:55:65:98:30:
                    c7:fc:19:45:4c:e1:d7:bc:6c:33:19:60:63:27:20:
                    5b:87:b8:33:ef:3e:8a:ff:f5:9e:df:37:1b:dc:6a:
                    9a:05:80:1b:29:ef:20:35:7d:7a:de:fd:a5:0e:1b:
                    af:e3:d5:8a:2a:4d:ef:e4:4c:b3:cd:5b:eb:34:9c:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:C4:5E:12:9C:4A:A6:67:5A:73:62:39:58:CE:9B:B2:9F:A5:4D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/244f977f-7101-4b04-9576-1ab2ba27c378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ea0::/43

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:55:29:ed:42:5b:f7:6d:5e:6d:55:a9:a6:6f:06:bd:18:
         6d:94:4d:85:1c:42:df:fe:1d:b8:aa:a8:86:77:90:2d:58:18:
         5d:6b:7c:af:98:57:1a:7d:cf:45:91:4e:97:8a:94:57:bb:49:
         7c:d0:f2:26:2e:56:d7:93:79:e6:f0:e9:4b:d2:8c:d1:38:b9:
         34:c7:6e:da:7b:7a:44:fe:3e:f5:d3:39:61:e0:1e:88:1b:e0:
         f5:e5:cc:b6:d4:43:f6:56:a6:11:e2:25:3e:5c:d7:32:7e:5f:
         af:cd:50:76:d3:77:e8:cf:bf:9c:ad:a4:72:7d:31:31:9e:b7:
         b3:50:50:dc:15:e0:dc:2d:3a:55:1e:07:00:ed:a4:fe:f2:7f:
         0b:8e:0e:a9:ea:f3:9a:df:c7:4a:cd:2a:9e:62:0b:a7:96:77:
         5f:e2:48:bb:2d:c2:b1:9f:21:e6:5e:0f:07:6a:1b:01:6b:1a:
         7e:c7:8c:1b:cb:db:c1:1c:e2:b7:f3:b1:c5:dd:d0:6f:b3:1a:
         0a:b9:40:a7:4f:5f:98:c1:5e:91:0c:a9:5b:8f:34:da:2c:b9:
         4a:d1:ba:42:2e:54:37:66:21:20:6e:98:e6:e9:f8:e7:e5:3e:
         c7:65:e4:92:9b:a1:ca:e5:ba:2f:41:58:2c:dd:77:b3:19:12:
         e1:1d:ee:91
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQ3fQ8zdZ5iuveSmbEqcqYedqeKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTEwMDA4WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjgwNzliNTU2Mjc1ZjYwNzc0ZDgyNjUyMGQ5Y2UyZjc2
MDkyZDE1MDhlNWU2N2UyMjEwMmM0NWE1NTViNjdkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzjP7nW4KAFs99yG/KZWessgDPkXUHs7CyjIKujDYdIZGt
yKsEfxNiy7/bV5P+QeVgusiGHVa6EIJd3Gby06dprp8SQveG/Ea7ulWnHWdcvqis
bNbtpk9DZBZhz0DO7UV9qE9bCmtiXtup306zG60cMJVcpCLdJIZtY1YKve2fxpFx
DQYnT/w3HV0Z1N9baFJgQZ+OzyTMcVONKRVFctURlqboKOY79xgE5EFXx89ykCZ3
zkAlqzgUvxSILllxVWWYMMf8GUVM4de8bDMZYGMnIFuHuDPvPor/9Z7fNxvcapoF
gBsp7yA1fXre/aUOG6/j1YoqTe/kTLPNW+s0nOT1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTYPEXhKcSqZnWnNiOVjOm7KfpU0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI0NGY5NzdmLTcxMDEtNGIwNC05NTc2LTFhYjJiYTI3YzM3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAALqAwDQYJKoZIhvcNAQELBQADggEBACDwVSntQlv3bV5tVammbwa9
GG2UTYUcQt/+HbiqqIZ3kC1YGF1rfK+YVxp9z0WRTpeKlFe7SXzQ8iYuVteTeebw
6UvSjNE4uTTHbtp7ekT+PvXTOWHgHogb4PXlzLbUQ/ZWphHiJT5c1zJ+X6/NUHbT
d+jPv5ytpHJ9MTGet7NQUNwV4NwtOlUeBwDtpP7yfwuODqnq85rfx0rNKp5iC6eW
d1/iSLstwrGfIeZeDwdqGwFrGn7HjBvL28Ec4rfzscXd0G+zGgq5QKdPX5jBXpEM
qVuPNNosuUrRukIuVDdmISBumObp+OflPsdl5JKbocrlui9BWCzdd7MZEuEd7pE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:21 2026 by rpki-client