Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa
File:                     34cd602f-12d0-4f1e-8af2-9fef401af449.roa (raw, json)
Hash identifier:          FUT1zQLeovdLrLf9RU21TPBbRSF1oi+OaSJ7PXw8CV0=
Subject key identifier:   64:56:8A:27:CE:04:02:98:9A:D8:07:17:39:94:A7:AE:FA:50:4C:D2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0931139DB57E271CC732D13982E533274FF1C2F0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa
Signing time:             Wed 22 Jul 2026 02:31:25 +0000
ROA not before:           Wed 22 Jul 2026 02:31:25 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fe6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:31:13:9d:b5:7e:27:1c:c7:32:d1:39:82:e5:33:27:4f:f1:c2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:31:25 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=69cbeb030f130a5d2e764bc57e6867062f4ba20b2db38bc99c6e70991aed2b62, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:99:a3:fc:8a:68:34:d4:b2:47:bd:f2:13:
                    68:c5:6d:8e:f0:b2:1c:70:60:b9:45:c1:01:9d:fd:
                    01:d0:62:70:e9:ba:86:f9:04:85:8f:ae:6b:30:ed:
                    3f:49:7a:12:e0:82:15:60:46:c4:18:6d:f8:90:36:
                    c8:a7:50:6a:a3:ed:65:18:a5:ea:c2:75:a1:56:42:
                    9b:9f:6e:e5:2e:02:e4:16:ff:87:b4:43:60:c1:f2:
                    90:62:3b:95:51:08:f5:2e:ae:a3:3a:27:f1:36:a0:
                    f4:47:51:8f:28:2b:84:a6:da:56:2b:38:bc:53:20:
                    ca:c1:38:dc:a2:c1:4c:0d:9c:63:92:f9:0b:6d:08:
                    91:6d:61:80:fe:e2:c0:e7:e1:e4:cb:d1:dd:ed:cc:
                    08:3d:1f:2b:1c:d7:5c:f4:b3:99:96:41:99:e4:8c:
                    90:f7:c2:6e:ac:02:eb:43:6e:c1:79:f2:36:e9:4c:
                    24:f0:bf:e3:26:68:8d:1a:50:15:c6:10:02:12:c0:
                    76:2f:6f:5e:d2:60:20:00:63:c9:5b:3d:24:f6:d7:
                    c3:4b:a3:e3:a4:bf:fd:31:ea:aa:0b:45:60:6d:22:
                    7c:4a:03:9e:f3:b2:f8:ca:ac:38:46:15:4d:22:f8:
                    51:ab:89:58:e2:72:90:71:29:9c:1e:b0:1a:14:be:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:8A:27:CE:04:02:98:9A:D8:07:17:39:94:A7:AE:FA:50:4C:D2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fe6::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:a5:86:50:bb:26:b9:67:ae:3d:26:61:b3:12:6f:81:0b:
         bf:dc:66:53:43:c5:60:d6:b0:99:14:62:96:9d:6e:ba:4f:d2:
         16:cd:3e:f8:ab:61:ef:94:41:8a:b4:12:b3:21:19:79:70:4b:
         7a:cd:10:46:7d:ee:70:18:08:d6:12:5b:80:4c:25:e3:d4:a5:
         a6:bf:5e:99:b4:e0:16:f9:2a:1e:19:4e:30:1f:10:78:56:ad:
         8d:db:39:99:57:32:fd:28:d1:41:fd:ab:79:0e:be:50:a3:58:
         1e:5e:7e:2e:05:82:17:d2:6d:8e:bd:72:1a:e2:47:f3:da:24:
         a9:01:b2:c7:c5:0b:10:26:23:c4:e0:5d:2a:66:35:65:2e:1f:
         90:b2:de:f8:f2:5e:93:e4:de:ad:97:f9:18:3a:1a:a6:fe:a9:
         a3:ff:c4:b5:8d:ab:48:fd:2f:7e:44:84:b6:b5:bd:70:5a:67:
         8e:d8:80:0d:33:d7:99:fc:24:b8:30:df:60:c0:2e:1b:d9:d8:
         7a:aa:b9:75:3a:5b:92:f0:49:f7:43:9e:96:57:ce:bf:75:f6:
         fa:58:90:55:e5:f7:d0:45:99:af:d8:e5:cb:28:d7:bd:33:23:
         48:46:90:63:bc:ef:64:b3:0f:35:8e:e6:f6:b2:3b:16:5b:d7:
         ed:9f:34:f2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCTETnbV+JxzHMtE5guUzJ0/xwvAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDIzMTI1WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWNiZWIwMzBmMTMwYTVkMmU3NjRiYzU3ZTY4NjcwNjJm
NGJhMjBiMmRiMzhiYzk5YzZlNzA5OTFhZWQyYjYyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwHZmj/IpoNNSyR73yE2jFbY7wshxwYLlFwQGd/QHQYnDp
uob5BIWPrmsw7T9JehLgghVgRsQYbfiQNsinUGqj7WUYperCdaFWQpufbuUuAuQW
/4e0Q2DB8pBiO5VRCPUurqM6J/E2oPRHUY8oK4Sm2lYrOLxTIMrBONyiwUwNnGOS
+QttCJFtYYD+4sDn4eTL0d3tzAg9Hysc11z0s5mWQZnkjJD3wm6sAutDbsF58jbp
TCTwv+MmaI0aUBXGEAISwHYvb17SYCAAY8lbPST218NLo+Okv/0x6qoLRWBtInxK
A57zsvjKrDhGFU0i+FGriVjicpBxKZwesBoUvshRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZFaKJ84EApia2AcXOZSnrvpQTNIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM0Y2Q2MDJmLTEyZDAtNGYxZS04YWYyLTlmZWY0MDFhZjQ0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL+YwDQYJKoZIhvcNAQELBQADggEBAEbjpYZQuya5Z649JmGzEm+B
C7/cZlNDxWDWsJkUYpadbrpP0hbNPvirYe+UQYq0ErMhGXlwS3rNEEZ97nAYCNYS
W4BMJePUpaa/Xpm04Bb5Kh4ZTjAfEHhWrY3bOZlXMv0o0UH9q3kOvlCjWB5efi4F
ghfSbY69chriR/PaJKkBssfFCxAmI8TgXSpmNWUuH5Cy3vjyXpPk3q2X+Rg6Gqb+
qaP/xLWNq0j9L35EhLa1vXBaZ47YgA0z15n8JLgw32DALhvZ2HqquXU6W5LwSfdD
npZXzr919vpYkFXl99BFma/Y5cso170zI0hGkGO872SzDzWO5vayOxZb1+2fNPI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:44 2026 by rpki-client