Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f01c13-050e-4f50-a82e-d58b27e5c46b.roa
File:                     28f01c13-050e-4f50-a82e-d58b27e5c46b.roa (raw, json)
Hash identifier:          dht4fiE0Izoqc1CWOOV6UmV/eQ0cMWmCvvmCiOhEi+g=
Subject key identifier:   98:60:9B:BC:00:87:6C:25:E0:71:CE:FA:CA:88:B3:C7:7C:C5:02:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17E86B220C7B94BF08C8A01EF12C9D267159D009
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f01c13-050e-4f50-a82e-d58b27e5c46b.roa
Signing time:             Thu 23 Jul 2026 01:32:05 +0000
ROA not before:           Thu 23 Jul 2026 01:32:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35dc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:6b:22:0c:7b:94:bf:08:c8:a0:1e:f1:2c:9d:26:71:59:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:32:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4f79a7540f8e34ce4f80b5a47ad62ccd18ed06ce504c4104eff57819e775d74e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:26:4c:24:37:5d:a3:12:6b:d5:84:5e:65:
                    e0:6c:b2:d3:0f:a1:81:31:21:13:37:d9:81:e8:8c:
                    f4:6b:78:ca:46:d0:54:49:ae:3a:9e:4a:98:c3:a0:
                    99:5b:70:fc:32:6b:11:84:05:ba:f4:4f:27:67:93:
                    ad:5f:b5:d3:36:c2:22:bc:51:30:a8:ea:90:ba:ac:
                    53:64:79:53:06:6b:c4:45:a8:e0:54:6d:bb:8c:b0:
                    33:eb:3e:0f:10:22:a5:ea:4f:b7:1b:cf:4b:e3:18:
                    34:3a:2d:00:b6:29:77:21:c8:2f:81:67:7a:ab:94:
                    66:a1:99:48:0e:bf:74:8d:4a:1f:ac:32:aa:82:3c:
                    69:39:b7:f1:18:91:a2:ea:fe:e1:7d:4c:00:be:07:
                    ea:ac:76:e4:a8:52:08:c4:7f:27:fb:46:0a:07:5e:
                    28:67:23:57:e7:32:62:af:2b:ed:2c:bc:04:ac:e1:
                    df:ad:02:87:6b:da:ea:32:17:25:b4:fd:a9:ca:93:
                    7e:11:43:b8:39:fb:c6:29:b9:c9:58:16:16:6a:88:
                    8a:b9:03:1b:1a:8c:44:0b:cf:5b:bd:90:8e:d6:b7:
                    7d:26:85:2f:62:14:6c:e8:f2:7a:0c:c0:fd:51:66:
                    27:cd:19:fc:6c:c7:08:a1:cb:06:06:9e:50:69:2b:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:60:9B:BC:00:87:6C:25:E0:71:CE:FA:CA:88:B3:C7:7C:C5:02:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f01c13-050e-4f50-a82e-d58b27e5c46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35dc::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:1d:2d:2e:f0:0f:f7:ab:d2:a2:9d:46:b1:c1:dc:c4:e1:
         4b:73:3a:08:82:4e:02:25:40:89:8d:e6:c6:1e:56:54:74:1a:
         e8:2a:28:76:45:da:ad:cc:83:ea:43:fd:be:2a:a6:d4:19:b7:
         be:18:83:ba:bf:43:95:6d:27:ce:2d:44:74:dd:f4:26:9a:00:
         6c:b7:10:25:20:d6:26:5b:69:ff:89:53:aa:6a:f9:3d:0f:1a:
         3d:5d:68:03:78:0b:58:60:54:dd:ec:4a:1f:79:2a:89:48:e3:
         f9:ec:7f:ac:82:fb:8f:97:52:40:cf:cf:ed:cb:d7:70:df:d8:
         7a:28:f7:ed:44:65:ec:89:1d:30:d2:a0:3d:b1:bb:df:58:33:
         2e:4a:9d:e4:5b:59:08:48:a1:8a:7b:ba:b5:47:a7:84:b8:97:
         9f:8f:42:a9:cc:bf:c8:45:41:de:28:c0:de:17:0c:ae:5d:dd:
         0e:27:5c:ef:93:ea:1e:87:cd:61:c1:a8:49:c4:e0:3b:da:99:
         2c:7c:89:5e:ab:33:c9:8e:fc:a1:33:a1:71:6d:d0:bd:96:92:
         86:88:f8:bc:7b:17:57:95:12:e0:31:92:91:19:a7:ad:bd:67:
         7d:db:88:95:d5:1b:7a:5d:51:41:3c:e2:2c:bb:ca:53:f2:d0:
         85:66:5b:8a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF+hrIgx7lL8IyKAe8SydJnFZ0AkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDEzMjA1WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0Zjc5YTc1NDBmOGUzNGNlNGY4MGI1YTQ3YWQ2MmNjZDE4
ZWQwNmNlNTA0YzQxMDRlZmY1NzgxOWU3NzVkNzRlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO8CZMJDddoxJr1YReZeBsstMPoYExIRM32YHojPRreMpG
0FRJrjqeSpjDoJlbcPwyaxGEBbr0Tydnk61ftdM2wiK8UTCo6pC6rFNkeVMGa8RF
qOBUbbuMsDPrPg8QIqXqT7cbz0vjGDQ6LQC2KXchyC+BZ3qrlGahmUgOv3SNSh+s
MqqCPGk5t/EYkaLq/uF9TAC+B+qsduSoUgjEfyf7RgoHXihnI1fnMmKvK+0svASs
4d+tAodr2uoyFyW0/anKk34RQ7g5+8YpuclYFhZqiIq5AxsajEQLz1u9kI7Wt30m
hS9iFGzo8noMwP1RZifNGfxsxwihywYGnlBpKyzhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUmGCbvACHbCXgcc76yoizx3zFAp0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI4ZjAxYzEzLTA1MGUtNGY1MC1hODJlLWQ1OGIyN2U1YzQ2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANdwwDQYJKoZIhvcNAQELBQADggEBAC+JHS0u8A/3q9KinUaxwdzE
4UtzOgiCTgIlQImN5sYeVlR0GugqKHZF2q3Mg+pD/b4qptQZt74Yg7q/Q5VtJ84t
RHTd9CaaAGy3ECUg1iZbaf+JU6pq+T0PGj1daAN4C1hgVN3sSh95KolI4/nsf6yC
+4+XUkDPz+3L13Df2Hoo9+1EZeyJHTDSoD2xu99YMy5KneRbWQhIoYp7urVHp4S4
l5+PQqnMv8hFQd4owN4XDK5d3Q4nXO+T6h6HzWHBqEnE4DvamSx8iV6rM8mO/KEz
oXFt0L2WkoaI+Lx7F1eVEuAxkpEZp629Z33biJXVG3pdUUE84iy7ylPy0IVmW4o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:48 2026 by rpki-client