Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47f0530f-8b6d-4cd1-80ee-4048e69163e3.roa
File:                     47f0530f-8b6d-4cd1-80ee-4048e69163e3.roa (raw, json)
Hash identifier:          2Hu04Mfvb4zAYzBDhjtS8fkujpafdURTUbIPq2rSDXo=
Subject key identifier:   27:8A:48:6C:FF:E5:14:50:E1:44:3F:7C:1D:7D:51:9C:AA:78:71:73
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FF73145B1F0C9A6630482A2BBD2BC483AC7F7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47f0530f-8b6d-4cd1-80ee-4048e69163e3.roa
Signing time:             Thu 23 Jul 2026 02:31:12 +0000
ROA not before:           Thu 23 Jul 2026 02:31:12 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2690::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f7:31:45:b1:f0:c9:a6:63:04:82:a2:bb:d2:bc:48:3a:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:31:12 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=61d7822391e008e3335cd8576f701aa2f34991b9e2013a33802d062e3d98b2a5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:e8:da:ee:d4:d3:e6:68:dd:4b:5c:6f:87:
                    5c:cf:43:a2:17:bb:dd:a6:84:2d:82:0c:2f:c4:04:
                    88:a4:24:e5:07:d8:07:6b:b0:5b:f3:6d:03:a2:f0:
                    a2:4e:1c:31:05:0e:f2:4a:ef:6a:89:7b:ea:56:c8:
                    bc:4f:b8:1c:20:53:65:95:35:f0:75:7b:87:56:18:
                    a1:6e:a4:eb:e6:c3:5f:e1:91:c3:0d:aa:8a:ed:14:
                    08:9d:61:1c:92:f7:cc:55:31:b7:48:6e:7b:18:34:
                    a0:73:a3:0b:45:81:ff:14:e2:99:1a:34:13:8b:e5:
                    3d:cf:b7:ae:34:f7:95:e4:a9:0e:63:b3:4d:c9:60:
                    39:4b:88:d5:40:31:61:cc:2d:4f:b7:ac:0f:b8:b4:
                    60:a8:86:24:0a:35:ec:7e:df:83:02:f3:9e:67:ea:
                    28:53:e5:01:b4:de:ea:74:c5:cf:76:36:76:7b:32:
                    f1:8a:45:10:c8:ca:65:d3:b2:45:bf:5e:1a:d9:28:
                    75:02:5e:0d:7b:30:a8:ed:00:24:89:7a:c5:b6:7a:
                    c1:4d:e3:84:21:fb:a8:46:e5:07:7d:29:45:71:0d:
                    28:8b:35:4a:2b:ec:77:e9:b7:96:f7:c2:77:c3:97:
                    cf:e8:91:59:70:3f:78:39:15:4b:a3:64:41:8c:50:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:48:6C:FF:E5:14:50:E1:44:3F:7C:1D:7D:51:9C:AA:78:71:73
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47f0530f-8b6d-4cd1-80ee-4048e69163e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2690::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:20:08:8c:fc:dc:6a:e6:f9:0c:54:a3:ee:90:c5:d2:6e:
         ef:a4:ba:6f:44:f4:aa:11:c0:bb:d6:63:26:41:d4:77:28:87:
         9f:92:4a:71:a6:e0:43:58:e2:b6:4e:e2:98:03:4d:bc:c9:a5:
         a1:48:16:64:73:d1:c7:68:18:8c:f0:45:bf:e8:d3:cc:1e:51:
         5e:1a:f1:18:c7:ca:af:3a:72:32:1c:2d:93:65:cc:4c:52:30:
         5f:14:8f:7c:f9:93:6a:da:c0:3d:58:d5:8b:60:4c:9b:92:ff:
         4d:a3:59:13:23:e9:b8:fd:f3:d7:73:80:9b:cc:8c:dc:09:db:
         42:8e:1f:15:a2:db:f1:a6:39:2f:e0:44:4f:75:82:aa:8a:49:
         a3:1b:89:88:c5:36:e5:8f:50:5d:ff:2c:95:b5:47:81:62:cb:
         b3:32:e5:0c:8d:32:ca:46:aa:f2:4a:c1:29:c6:03:fc:c1:37:
         01:28:e9:a3:82:83:29:10:25:22:f2:2b:8e:8d:b0:3a:30:c3:
         ab:e8:d0:2e:9f:51:06:6e:c0:58:21:0e:e4:7b:54:78:99:e7:
         1d:56:da:4b:c8:0b:de:20:ef:37:93:5f:44:73:d4:d6:e6:6b:
         05:2c:18:06:e3:cb:bf:c7:c2:99:c6:10:78:6c:67:c8:a3:4a:
         ed:ed:e0:a8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITH/cxRbHwyaZjBIKiu9K8SDrH9zANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA3MjMwMjMxMTJaFw0yNjEwMjEyMzU5NTla
MHoxSTBHBgNVBAUTQDYxZDc4MjIzOTFlMDA4ZTMzMzVjZDg1NzZmNzAxYWEyZjM0
OTkxYjllMjAxM2EzMzgwMmQwNjJlM2Q5OGIyYTUxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7I6Nru1NPmaN1LXG+HXM9Dohe73aaELYIML8QEiKQk5QfY
B2uwW/NtA6Lwok4cMQUO8krvaol76lbIvE+4HCBTZZU18HV7h1YYoW6k6+bDX+GR
ww2qiu0UCJ1hHJL3zFUxt0huexg0oHOjC0WB/xTimRo0E4vlPc+3rjT3leSpDmOz
TclgOUuI1UAxYcwtT7esD7i0YKiGJAo17H7fgwLznmfqKFPlAbTe6nTFz3Y2dnsy
8YpFEMjKZdOyRb9eGtkodQJeDXswqO0AJIl6xbZ6wU3jhCH7qEblB30pRXENKIs1
Sivsd+m3lvfCd8OXz+iRWXA/eDkVS6NkQYxQ1RkCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQnikhs/+UUUOFEP3wdfVGcqnhxczAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvNDdmMDUzMGYtOGI2ZC00Y2QxLTgwZWUtNDA0OGU2OTE2M2UzLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCYAkAAmkDANBgkqhkiG9w0BAQsFAAOCAQEAizogCIz83Grm+QxUo+6QxdJu
76S6b0T0qhHAu9ZjJkHUdyiHn5JKcabgQ1jitk7imANNvMmloUgWZHPRx2gYjPBF
v+jTzB5RXhrxGMfKrzpyMhwtk2XMTFIwXxSPfPmTatrAPVjVi2BMm5L/TaNZEyPp
uP3z13OAm8yM3AnbQo4fFaLb8aY5L+BET3WCqopJoxuJiMU25Y9QXf8slbVHgWLL
szLlDI0yykaq8krBKcYD/ME3ASjpo4KDKRAlIvIrjo2wOjDDq+jQLp9RBm7AWCEO
5HtUeJnnHVbaS8gL3iDvN5NfRHPU1uZrBSwYBuPLv8fCmcYQeGxnyKNK7e3gqA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:54 2026 by rpki-client