Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ad0786-703a-42e2-870d-92efa83aea50.roa
File:                     33ad0786-703a-42e2-870d-92efa83aea50.roa (raw, json)
Hash identifier:          i41UiASuyhP5TZWI5L+YXahQfg8ktCwR/TehiPnAtrY=
Subject key identifier:   1F:6A:80:F7:06:BA:FD:CF:F9:3E:C2:3A:F1:D4:61:F5:F2:F9:46:0B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       77B0F9344D817FA04459109A5738567148AF5CE9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ad0786-703a-42e2-870d-92efa83aea50.roa
Signing time:             Thu 23 Jul 2026 11:40:50 +0000
ROA not before:           Thu 23 Jul 2026 11:40:50 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:f9:34:4d:81:7f:a0:44:59:10:9a:57:38:56:71:48:af:5c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:40:50 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=501175f3223c278ae52d0feeae1b90214a7f9d30e3b288929d152873d3dfe869, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:9c:da:9a:de:47:08:90:3f:74:31:39:cd:
                    3d:1b:75:32:4f:21:a7:4b:f0:bd:0b:28:4f:0a:87:
                    fd:dc:54:48:80:fa:5c:08:4c:c2:0e:51:55:d0:ca:
                    ce:d0:b5:04:ce:ab:8b:03:a5:d0:6a:34:d2:fe:ee:
                    55:7d:8b:4a:7e:bf:a4:24:d5:ce:aa:1d:dd:c0:36:
                    75:40:b5:9a:b2:a4:48:f2:98:b0:f5:2d:ae:61:19:
                    b5:76:6e:ae:75:a9:9e:fc:96:c4:9b:9f:0a:54:ea:
                    09:18:4a:f5:f1:d5:27:f2:20:97:18:8e:52:97:ed:
                    d7:ae:bd:b9:a1:83:2f:67:ef:06:68:67:38:e5:66:
                    64:14:24:db:f5:83:fd:b0:0b:78:ed:05:79:d2:82:
                    6b:d8:40:5d:59:c7:70:ce:81:d7:3c:78:24:61:1c:
                    f4:c1:b0:27:6f:20:96:aa:d3:d3:19:90:0c:dd:d6:
                    d8:db:2d:0a:f0:0a:65:a7:a4:f6:3e:8e:31:c1:b0:
                    c6:a9:c6:2b:6a:8b:ed:85:bc:6e:f9:e8:f2:21:0f:
                    1b:3f:dc:bc:75:f6:d2:74:3a:aa:5d:1d:80:c7:cf:
                    b2:41:a0:3e:89:5f:96:d9:f9:ed:17:d1:6a:f5:2d:
                    ba:7b:e4:59:71:07:6f:0c:fc:36:f5:12:1b:0e:30:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:80:F7:06:BA:FD:CF:F9:3E:C2:3A:F1:D4:61:F5:F2:F9:46:0B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ad0786-703a-42e2-870d-92efa83aea50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a90::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:48:6d:fe:d6:53:dc:75:77:1e:f8:7a:7c:89:6e:83:9a:7c:
         71:dd:01:4c:24:80:3a:3d:d4:8b:0c:f9:1a:1f:2d:fe:9b:c3:
         df:25:59:5a:83:61:f0:ae:8b:9e:8a:69:3b:88:6c:9f:75:29:
         8f:39:1b:77:b9:c9:9b:58:d7:bb:44:c6:0b:aa:a3:83:df:84:
         79:e4:c5:53:4e:cb:cc:dd:52:2b:96:72:cc:bb:47:e4:2f:66:
         8c:24:b0:88:ed:82:ca:c5:5d:3b:c5:7d:ca:c5:3b:f5:04:b8:
         2e:32:d4:5f:e5:7b:4f:29:ef:79:d8:cb:da:87:3d:36:b1:7b:
         cd:4b:9f:40:da:3b:4c:4d:a9:2e:bf:50:8a:ea:8c:17:b0:f2:
         be:f8:c1:fc:5a:3c:f5:5f:aa:28:c6:a1:c1:a7:60:29:f0:5f:
         4b:c6:b3:36:9d:6c:2c:07:39:a1:6b:14:9e:2a:3a:ba:7c:80:
         97:2a:7a:b4:68:da:81:9b:88:6d:f6:95:51:62:5e:6f:ca:4c:
         da:d7:58:58:d6:93:89:50:ad:52:df:b8:b6:3c:ab:d0:4c:e9:
         c8:70:9b:6d:99:21:4b:9b:ea:f3:41:8f:8f:47:80:cc:18:a5:
         e9:c6:35:7d:ca:37:1a:20:3e:29:f7:ad:7d:5d:cb:c6:73:bb:
         40:28:e9:80
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUd7D5NE2Bf6BEWRCaVzhWcUivXOkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTE0MDUwWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDExNzVmMzIyM2MyNzhhZTUyZDBmZWVhZTFiOTAyMTRh
N2Y5ZDMwZTNiMjg4OTI5ZDE1Mjg3M2QzZGZlODY5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4O5zamt5HCJA/dDE5zT0bdTJPIadL8L0LKE8Kh/3cVEiA
+lwITMIOUVXQys7QtQTOq4sDpdBqNNL+7lV9i0p+v6Qk1c6qHd3ANnVAtZqypEjy
mLD1La5hGbV2bq51qZ78lsSbnwpU6gkYSvXx1SfyIJcYjlKX7deuvbmhgy9n7wZo
ZzjlZmQUJNv1g/2wC3jtBXnSgmvYQF1Zx3DOgdc8eCRhHPTBsCdvIJaq09MZkAzd
1tjbLQrwCmWnpPY+jjHBsMapxitqi+2FvG756PIhDxs/3Lx19tJ0OqpdHYDHz7JB
oD6JX5bZ+e0X0Wr1Lbp75FlxB28M/Db1EhsOMJflAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUH2qA9wa6/c/5PsI68dRh9fL5RgswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzMzYWQwNzg2LTcwM2EtNDJlMi04NzBkLTkyZWZhODNhZWE1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAKpAwDQYJKoZIhvcNAQELBQADggEBAJxIbf7WU9x1dx74enyJboOa
fHHdAUwkgDo91IsM+RofLf6bw98lWVqDYfCui56KaTuIbJ91KY85G3e5yZtY17tE
xguqo4PfhHnkxVNOy8zdUiuWcsy7R+QvZowksIjtgsrFXTvFfcrFO/UEuC4y1F/l
e08p73nYy9qHPTaxe81Ln0DaO0xNqS6/UIrqjBew8r74wfxaPPVfqijGocGnYCnw
X0vGszadbCwHOaFrFJ4qOrp8gJcqerRo2oGbiG32lVFiXm/KTNrXWFjWk4lQrVLf
uLY8q9BM6chwm22ZIUub6vNBj49HgMwYpenGNX3KNxogPin3rX1dy8Zzu0Ao6YA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:12 2026 by rpki-client