Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48175993-40e0-4a6c-96e8-e8fa9c4221b7.roa
File:                     48175993-40e0-4a6c-96e8-e8fa9c4221b7.roa (raw, json)
Hash identifier:          TRxlGJFcX5h3CORocF/yLDWlQcrm5NprzdaHGZYAyJg=
Subject key identifier:   B8:A7:D2:81:50:43:9C:83:E1:0E:B1:D5:15:5A:2C:F3:D8:C1:C7:B1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       613A8D1C661EBDC883E903F7E54BD0AFE809BDA4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48175993-40e0-4a6c-96e8-e8fa9c4221b7.roa
Signing time:             Thu 23 Jul 2026 01:20:14 +0000
ROA not before:           Thu 23 Jul 2026 01:20:14 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c38::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:8d:1c:66:1e:bd:c8:83:e9:03:f7:e5:4b:d0:af:e8:09:bd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:20:14 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=8a96c771f28b8129bf71f71a40afb308e2aacfe350c7e91f5fc5a9007df91405, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:de:7e:2b:10:1f:48:11:42:07:05:99:e9:
                    16:e6:c3:99:66:24:37:08:d4:0e:fc:89:cf:74:c4:
                    ec:56:92:a9:ba:16:11:d7:b7:3a:c1:97:59:e7:e1:
                    3c:54:82:b0:3f:36:d0:e4:57:8d:65:71:1c:ae:3f:
                    47:c7:9c:3d:8f:d9:75:fa:64:f7:12:6c:be:df:93:
                    43:73:77:cd:1f:e5:76:a8:09:ca:00:0d:a7:a4:dd:
                    5a:bd:f3:38:56:63:58:02:11:c1:63:0b:27:69:d0:
                    2b:a0:07:21:e7:9d:67:a1:5b:f0:06:dc:f5:39:63:
                    0e:5a:77:c6:f8:ed:5a:db:12:5e:18:3b:a6:73:7f:
                    69:8a:da:b8:21:3e:45:33:0f:2f:5d:ff:b5:4c:93:
                    fc:bd:95:eb:f7:8e:fe:f6:ec:bb:3d:9f:8a:3b:e3:
                    32:ba:fa:c4:89:19:13:bf:25:3e:fe:c6:76:db:a7:
                    3c:9e:0f:7e:99:10:c7:7c:4c:26:60:0a:60:9b:42:
                    a7:50:e3:df:98:1f:ad:d0:9f:f8:46:c6:84:33:2e:
                    2c:6c:27:84:fc:53:a0:e5:42:d7:3c:c2:12:6f:7a:
                    b6:2d:81:eb:de:43:1c:49:c3:00:98:00:b7:02:a0:
                    e2:d1:68:6b:8b:c5:1b:e2:e9:c8:b0:a1:4e:7e:ae:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:D2:81:50:43:9C:83:E1:0E:B1:D5:15:5A:2C:F3:D8:C1:C7:B1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48175993-40e0-4a6c-96e8-e8fa9c4221b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c38::/45

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:a8:ac:0d:a5:e2:3b:27:51:7d:f5:e4:f8:9c:00:a4:91:
         7d:50:eb:26:41:7b:d9:90:c8:4a:9d:ee:2b:60:a6:79:04:6f:
         b5:84:ce:bb:44:b8:e5:19:22:b9:7e:18:52:d9:6f:91:a6:6d:
         24:d3:ea:7a:76:54:13:a8:03:2e:43:26:ce:ba:4b:99:ba:21:
         a6:d3:43:60:c7:48:20:4f:e4:bf:52:fa:18:e4:00:95:17:af:
         d6:c9:30:04:12:25:40:12:55:f8:69:c0:d2:42:a7:a8:ea:8f:
         16:d3:cc:80:97:43:80:10:f5:32:22:f3:b8:76:f4:ed:29:07:
         a1:02:bd:9e:7f:72:e9:d7:b1:62:be:b9:0a:63:9d:bf:cf:2d:
         11:c0:5b:25:74:43:26:89:ca:50:6f:e0:14:ef:e9:96:56:c0:
         17:a8:cc:12:c2:68:97:c0:ca:da:a3:5e:2b:d3:3d:3c:ac:b4:
         ec:82:c5:55:3a:0c:98:cf:34:20:86:63:46:04:3e:69:34:99:
         d5:92:ae:c5:30:0b:94:4f:48:68:68:b2:41:72:d1:ba:15:0d:
         07:fd:2c:49:93:9f:75:b6:e7:7f:0d:33:23:c3:5b:ca:fc:ef:
         8d:39:46:8e:0a:66:66:80:11:2c:14:a8:6d:35:b1:95:d1:53:
         14:2c:b3:64
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYTqNHGYevciD6QP35UvQr+gJvaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDEyMDE0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTk2Yzc3MWYyOGI4MTI5YmY3MWY3MWE0MGFmYjMwOGUy
YWFjZmUzNTBjN2U5MWY1ZmM1YTkwMDdkZjkxNDA1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgDt5+KxAfSBFCBwWZ6Rbmw5lmJDcI1A78ic90xOxWkqm6
FhHXtzrBl1nn4TxUgrA/NtDkV41lcRyuP0fHnD2P2XX6ZPcSbL7fk0Nzd80f5Xao
CcoADaek3Vq98zhWY1gCEcFjCydp0CugByHnnWehW/AG3PU5Yw5ad8b47VrbEl4Y
O6Zzf2mK2rghPkUzDy9d/7VMk/y9lev3jv727Ls9n4o74zK6+sSJGRO/JT7+xnbb
pzyeD36ZEMd8TCZgCmCbQqdQ49+YH63Qn/hGxoQzLixsJ4T8U6DlQtc8whJverYt
geveQxxJwwCYALcCoOLRaGuLxRvi6ciwoU5+rvnRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuKfSgVBDnIPhDrHVFVos89jBx7EwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQ4MTc1OTkzLTQwZTAtNGE2Yy05NmU4LWU4ZmE5YzQyMjFiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPDgwDQYJKoZIhvcNAQELBQADggEBAAN8qKwNpeI7J1F99eT4nACk
kX1Q6yZBe9mQyEqd7itgpnkEb7WEzrtEuOUZIrl+GFLZb5GmbSTT6np2VBOoAy5D
Js66S5m6IabTQ2DHSCBP5L9S+hjkAJUXr9bJMAQSJUASVfhpwNJCp6jqjxbTzICX
Q4AQ9TIi87h29O0pB6ECvZ5/cunXsWK+uQpjnb/PLRHAWyV0QyaJylBv4BTv6ZZW
wBeozBLCaJfAytqjXivTPTystOyCxVU6DJjPNCCGY0YEPmk0mdWSrsUwC5RPSGho
skFy0boVDQf9LEmTn3W2538NMyPDW8r87405Ro4KZmaAESwUqG01sZXRUxQss2Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:49 2026 by rpki-client