Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa
File:                     35094e1e-1224-4d21-afe7-f9902821a63e.roa (raw, json)
Hash identifier:          iYtIqQNvIx3BLOnRXaxKP77xydPYZ6ypkv0kMuvRHqM=
Subject key identifier:   03:96:09:47:8E:14:7B:C0:16:3E:70:2C:72:46:A6:18:7F:A0:04:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2EC89589F686353C74F88B91656F8B242468D816
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa
Signing time:             Thu 23 Jul 2026 04:00:54 +0000
ROA not before:           Thu 23 Jul 2026 04:00:54 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32f8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:95:89:f6:86:35:3c:74:f8:8b:91:65:6f:8b:24:24:68:d8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:00:54 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=fd30abe786d822ae955900bd3eeb70446ea49a1aa2c537676a6d3363843c7dc6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:91:38:2c:f9:c6:3a:97:1c:27:2b:9d:9e:
                    1a:db:af:5f:06:18:74:48:db:c6:80:4d:3c:16:a8:
                    90:69:a3:3e:b0:78:a2:52:1e:de:1e:6a:3d:d9:47:
                    fc:b2:5f:4b:1b:59:0d:d7:28:21:36:73:f9:f7:67:
                    e6:b4:aa:f3:f8:b6:f5:56:5c:08:f1:d1:da:d3:12:
                    60:6f:fa:27:ec:20:ef:23:ea:0c:97:9f:ee:54:b6:
                    b1:73:78:5b:69:ad:6b:c6:3d:ab:82:7c:0a:84:e5:
                    40:95:83:6f:9c:40:4f:36:e0:b6:29:a2:a8:7a:ed:
                    4f:e1:13:a7:7e:54:cb:38:b1:96:30:30:c9:f8:c6:
                    67:fa:90:a4:3a:d4:91:40:1e:7b:8b:5c:d7:20:d0:
                    15:cb:bf:d5:1c:52:81:79:c4:78:a9:60:3e:ca:5c:
                    10:8d:a7:a0:e9:5e:1a:1e:4d:3a:4c:4c:45:46:4a:
                    4a:4e:9a:0d:eb:e3:40:9d:e4:6f:3f:63:b4:91:fe:
                    45:3c:af:b9:e8:67:fe:1e:04:5d:de:04:87:ba:a6:
                    83:4e:1c:d5:9e:65:96:6f:d4:09:ac:fe:b4:cd:d5:
                    2e:45:01:78:a0:50:7b:c9:fe:9c:57:d8:d1:3a:4a:
                    ad:0e:d9:48:f2:b8:8f:5e:e5:43:11:92:c5:1b:e5:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:96:09:47:8E:14:7B:C0:16:3E:70:2C:72:46:A6:18:7F:A0:04:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32f8::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:d1:44:77:dc:fe:13:16:c0:eb:a7:a4:21:80:aa:54:68:
         f4:85:ca:df:4b:fd:67:63:1d:13:27:fa:2e:05:b2:cc:c6:5d:
         27:3f:60:af:7f:0c:22:33:5c:22:1d:99:50:c0:e0:2e:a4:e8:
         8c:d3:43:47:ce:e1:f8:44:29:2f:f6:62:55:28:e5:68:6a:b5:
         f7:01:4f:47:ec:8f:5f:e4:4c:5e:b5:ed:9b:b9:ee:08:18:f7:
         76:9d:77:51:38:ba:2f:0e:e1:26:7f:cf:bf:15:67:9a:e9:4e:
         a7:6c:5e:0b:1e:b9:34:ee:27:95:e1:05:c7:54:77:60:60:57:
         1c:00:2d:34:b0:ca:9b:f3:35:ab:e6:6c:90:7b:8a:cd:8d:3a:
         22:32:3f:56:34:26:cc:0a:18:45:db:33:d4:12:c6:92:38:be:
         b4:e0:f7:1a:22:31:5a:c6:ff:18:c9:6b:4c:1b:44:e4:c7:65:
         c6:22:a3:fe:99:7f:e4:dd:3c:82:aa:cd:78:7c:ce:0f:a4:4c:
         f8:a6:f0:9a:ff:99:87:8d:2c:bd:50:2a:71:eb:d0:27:07:79:
         d3:b6:12:bb:ed:89:42:7c:a7:9b:31:47:b2:b3:92:78:e4:c2:
         41:bd:a4:2c:55:3a:c6:c7:52:4f:0f:2d:18:3b:eb:cc:13:c0:
         cc:26:4e:dc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULsiVifaGNTx0+IuRZW+LJCRo2BYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDQwMDU0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDMwYWJlNzg2ZDgyMmFlOTU1OTAwYmQzZWViNzA0NDZl
YTQ5YTFhYTJjNTM3Njc2YTZkMzM2Mzg0M2M3ZGM2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqX5E4LPnGOpccJyudnhrbr18GGHRI28aATTwWqJBpoz6w
eKJSHt4eaj3ZR/yyX0sbWQ3XKCE2c/n3Z+a0qvP4tvVWXAjx0drTEmBv+ifsIO8j
6gyXn+5UtrFzeFtprWvGPauCfAqE5UCVg2+cQE824LYpoqh67U/hE6d+VMs4sZYw
MMn4xmf6kKQ61JFAHnuLXNcg0BXLv9UcUoF5xHipYD7KXBCNp6DpXhoeTTpMTEVG
SkpOmg3r40Cd5G8/Y7SR/kU8r7noZ/4eBF3eBIe6poNOHNWeZZZv1Ams/rTN1S5F
AXigUHvJ/pxX2NE6Sq0O2UjyuI9e5UMRksUb5dUlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUA5YJR44Ue8AWPnAsckamGH+gBDwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM1MDk0ZTFlLTEyMjQtNGQyMS1hZmU3LWY5OTAyODIxYTYzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAMvgwDQYJKoZIhvcNAQELBQADggEBACwm0UR33P4TFsDrp6QhgKpU
aPSFyt9L/WdjHRMn+i4FsszGXSc/YK9/DCIzXCIdmVDA4C6k6IzTQ0fO4fhEKS/2
YlUo5WhqtfcBT0fsj1/kTF617Zu57ggY93add1E4ui8O4SZ/z78VZ5rpTqdsXgse
uTTuJ5XhBcdUd2BgVxwALTSwypvzNavmbJB7is2NOiIyP1Y0JswKGEXbM9QSxpI4
vrTg9xoiMVrG/xjJa0wbROTHZcYio/6Zf+TdPIKqzXh8zg+kTPim8Jr/mYeNLL1Q
KnHr0CcHedO2ErvtiUJ8p5sxR7KzknjkwkG9pCxVOsbHUk8PLRg768wTwMwmTtw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:50 2026 by rpki-client