Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a9eed3c-920d-4b7a-8444-3c0f0790953b.roa
File:                     2a9eed3c-920d-4b7a-8444-3c0f0790953b.roa (raw, json)
Hash identifier:          cwENIMm2giEhNZCgn+s1sfAL3bV8r8QhUegVRQVeyBA=
Subject key identifier:   11:92:E7:1A:BA:5B:D4:5F:C0:CA:D1:FC:94:D8:D2:4A:34:C0:4E:FF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5063C0DE3D1AE1EEF16A37E611D9981F3F06A42A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a9eed3c-920d-4b7a-8444-3c0f0790953b.roa
Signing time:             Wed 22 Jul 2026 01:40:40 +0000
ROA not before:           Wed 22 Jul 2026 01:40:40 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b6a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:63:c0:de:3d:1a:e1:ee:f1:6a:37:e6:11:d9:98:1f:3f:06:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 01:40:40 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=67da776ff555a048ec915947450cc5d62469e499e437add6a583a224e9094b43, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:d2:e6:a2:fd:6c:53:b4:6d:1e:83:6c:a0:
                    29:c2:20:d0:00:01:af:51:15:80:63:69:fa:7f:60:
                    66:e7:69:a3:b2:8f:a6:9b:72:94:04:fc:2f:30:75:
                    75:a4:08:11:43:29:be:ab:1c:98:de:c5:d7:7a:50:
                    2f:0b:cf:bd:a0:35:59:5b:0e:9b:6e:cc:d2:86:7c:
                    69:0c:2d:c3:50:0f:3b:80:37:e1:1a:a6:84:be:c6:
                    19:6b:8d:71:9c:c4:b7:69:f0:7e:df:8b:1b:e7:9f:
                    b2:01:bf:4c:4e:7a:b6:f2:aa:5a:f6:a6:df:7f:80:
                    d7:5d:a1:51:c8:4c:35:d4:f6:6f:37:99:6f:5a:52:
                    55:24:b4:0f:57:99:a5:4a:77:49:ce:20:82:59:83:
                    e0:61:70:af:df:d8:91:c5:66:ea:b5:fd:9a:db:6a:
                    cc:24:f5:0c:da:87:0c:6c:33:d0:4f:01:da:a9:a5:
                    82:02:ed:c3:6d:b6:d1:d4:a3:81:6b:2c:44:62:78:
                    67:70:44:ab:55:9b:c0:5b:c6:f6:d2:cb:da:95:c5:
                    56:cf:64:ac:b8:43:2d:1e:fe:b2:30:9d:67:42:42:
                    af:fa:06:53:13:3e:0b:fd:fe:e6:e4:0e:44:ae:92:
                    98:f6:f2:55:52:05:71:32:12:25:ea:83:84:b1:72:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:92:E7:1A:BA:5B:D4:5F:C0:CA:D1:FC:94:D8:D2:4A:34:C0:4E:FF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a9eed3c-920d-4b7a-8444-3c0f0790953b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b6a::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:04:e6:3e:00:dd:5e:5f:6d:16:07:1b:45:a8:0a:d9:06:0f:
         38:87:15:07:db:ee:26:e4:91:89:42:a0:06:d9:7f:ce:65:e7:
         2d:65:40:fd:9b:73:8f:a1:60:4d:71:7c:1a:ee:0b:e5:f1:1c:
         6d:63:47:8b:62:09:f5:4a:e4:74:49:b0:eb:63:23:12:72:f2:
         1f:de:41:4b:8e:f3:bc:8d:bf:4f:ec:da:fb:eb:18:01:d1:7a:
         37:d1:55:17:fd:d5:2e:32:0e:4c:2a:bc:c1:a1:73:fb:b4:d7:
         18:93:92:7b:c0:b1:0d:2e:2f:b7:aa:ea:d3:16:11:79:68:0b:
         4b:54:5c:30:4b:98:0f:29:92:e1:52:4a:e9:19:c6:92:62:1c:
         fb:60:11:4c:3a:fe:e6:f9:b5:16:8f:30:54:a0:8e:b2:df:38:
         ea:08:5b:66:bb:86:92:9a:38:20:4c:3b:a3:0f:de:1f:f8:36:
         f4:13:d1:42:fa:8f:25:6a:87:a0:bd:a7:62:51:df:3a:27:26:
         39:ca:8c:85:3e:f8:b4:21:4d:bf:85:56:f1:ce:dc:10:c6:00:
         92:69:40:d4:dd:30:e7:f8:f1:3f:1f:16:2f:37:84:39:25:28:
         e0:a8:28:4e:3c:28:54:18:57:69:b7:72:2b:83:10:78:36:0f:
         80:31:09:d6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUGPA3j0a4e7xajfmEdmYHz8GpCowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDE0MDQwWhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2N2RhNzc2ZmY1NTVhMDQ4ZWM5MTU5NDc0NTBjYzVkNjI0
NjllNDk5ZTQzN2FkZDZhNTgzYTIyNGU5MDk0YjQzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmYdLmov1sU7RtHoNsoCnCINAAAa9RFYBjafp/YGbnaaOy
j6abcpQE/C8wdXWkCBFDKb6rHJjexdd6UC8Lz72gNVlbDptuzNKGfGkMLcNQDzuA
N+EapoS+xhlrjXGcxLdp8H7fixvnn7IBv0xOerbyqlr2pt9/gNddoVHITDXU9m83
mW9aUlUktA9XmaVKd0nOIIJZg+BhcK/f2JHFZuq1/Zrbaswk9QzahwxsM9BPAdqp
pYIC7cNtttHUo4FrLERieGdwRKtVm8BbxvbSy9qVxVbPZKy4Qy0e/rIwnWdCQq/6
BlMTPgv9/ubkDkSukpj28lVSBXEyEiXqg4Sxciq3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEZLnGrpb1F/AytH8lNjSSjTATv8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzJhOWVlZDNjLTkyMGQtNGI3YS04NDQ0LTNjMGYwNzkwOTUzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAK2owDQYJKoZIhvcNAQELBQADggEBAFQE5j4A3V5fbRYHG0WoCtkG
DziHFQfb7ibkkYlCoAbZf85l5y1lQP2bc4+hYE1xfBruC+XxHG1jR4tiCfVK5HRJ
sOtjIxJy8h/eQUuO87yNv0/s2vvrGAHRejfRVRf91S4yDkwqvMGhc/u01xiTknvA
sQ0uL7eq6tMWEXloC0tUXDBLmA8pkuFSSukZxpJiHPtgEUw6/ub5tRaPMFSgjrLf
OOoIW2a7hpKaOCBMO6MP3h/4NvQT0UL6jyVqh6C9p2JR3zonJjnKjIU++LQhTb+F
VvHO3BDGAJJpQNTdMOf48T8fFi83hDklKOCoKE48KFQYV2m3ciuDEHg2D4AxCdY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:09 2026 by rpki-client