Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5096812c-8eaf-4648-998b-0d48d01962fd.roa
File:                     5096812c-8eaf-4648-998b-0d48d01962fd.roa (raw, json)
Hash identifier:          vKTjGAp4Bk/jAHdfLML2OQHU0d8H4pgmvsu6dopcFlc=
Subject key identifier:   C4:F3:FB:D5:7B:B1:50:F1:DF:3F:30:99:EC:76:D1:BC:9A:DA:57:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       339541E5A360FF1C59229F3AC29DC379445E61C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5096812c-8eaf-4648-998b-0d48d01962fd.roa
Signing time:             Wed 22 Jul 2026 00:21:58 +0000
ROA not before:           Wed 22 Jul 2026 00:21:58 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2aa4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:95:41:e5:a3:60:ff:1c:59:22:9f:3a:c2:9d:c3:79:44:5e:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:21:58 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=ce8367c539d7f33cdf97bb7d310b69dadf0d54a5260c77cd26d60b14a0da8134, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:b2:4d:13:a7:6d:e4:fa:f8:64:11:45:42:
                    fd:6f:92:0b:b0:3c:6c:23:28:6e:f1:1b:ce:81:73:
                    93:b1:6e:18:c0:75:70:69:61:34:ed:e9:1a:92:6e:
                    ed:e7:a1:c6:9c:b5:68:86:47:90:f9:8f:5a:94:ee:
                    f8:9c:9d:44:c6:33:24:eb:28:1f:b5:29:14:d8:49:
                    64:26:66:6e:03:79:2f:93:96:c4:c3:e0:3c:fa:e8:
                    86:fe:b8:fa:48:11:ce:ea:e8:e2:65:43:b7:3b:e3:
                    97:fd:4d:67:14:b7:37:8d:78:a5:8a:65:a5:c1:5e:
                    ae:6f:2f:84:58:9b:4c:fe:ca:c9:2e:89:7e:11:ab:
                    1f:32:ec:1f:fe:99:cc:d0:07:0c:58:6e:37:0e:19:
                    76:35:aa:7e:54:25:d6:56:81:df:18:da:dc:65:84:
                    e6:9c:ff:ea:d9:40:10:90:19:23:41:76:31:78:eb:
                    51:04:ee:71:b9:af:35:e2:05:17:00:34:23:b7:3d:
                    5d:0c:fa:36:df:3d:1d:05:71:b3:46:a2:45:b5:7e:
                    25:d7:00:a4:c2:51:3f:22:66:85:8b:97:01:89:73:
                    d3:18:7e:24:10:80:af:31:e8:c4:14:39:7f:72:b0:
                    7c:79:25:6d:4a:26:17:40:f3:ae:b2:89:33:0a:4f:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:FB:D5:7B:B1:50:F1:DF:3F:30:99:EC:76:D1:BC:9A:DA:57:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5096812c-8eaf-4648-998b-0d48d01962fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2aa4::/47

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:86:7d:1c:ed:d8:dd:73:0c:e6:7c:de:90:7f:7c:48:82:
         a6:cc:79:a0:a5:bb:d1:c9:cf:36:be:ea:82:3b:d8:73:4e:7c:
         60:40:89:8c:4d:56:6f:c5:1a:a5:0b:f9:c3:60:3e:f4:ff:26:
         19:7c:f1:6f:a0:c1:51:a0:62:41:db:6a:ef:94:f7:49:06:f1:
         a2:c3:c8:d3:59:9f:46:ed:8f:c5:5d:ba:14:c8:fe:55:b9:9e:
         a8:bc:e1:fe:0c:2d:fe:e4:d0:f5:8f:d7:d7:2e:7d:e6:70:c7:
         f7:3e:d8:35:af:3f:95:bd:fe:f2:83:c9:db:f4:03:cf:67:4c:
         c8:e5:50:0a:6c:05:b7:0b:31:51:45:9a:18:ac:c8:ec:76:db:
         85:d4:5c:1f:68:32:d1:df:58:9d:28:19:80:a2:e6:be:7c:2a:
         76:3d:ff:29:58:30:5b:e9:ed:c5:cc:ca:23:ae:16:3e:91:a7:
         a1:e7:d4:0f:76:4c:e6:0f:e0:cb:09:87:ef:3c:01:b9:37:22:
         27:9c:c1:91:6e:43:ed:8c:46:b3:af:69:d6:3e:ce:06:e9:6f:
         2d:d4:ed:5a:8f:d6:01:e5:d8:3f:62:cf:a5:f5:03:71:83:9f:
         1c:10:7a:e1:7c:bf:b2:55:16:d4:a0:53:31:cc:03:3d:64:bc:
         b2:71:f6:9c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM5VB5aNg/xxZIp86wp3DeUReYcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDAyMTU4WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZTgzNjdjNTM5ZDdmMzNjZGY5N2JiN2QzMTBiNjlkYWRm
MGQ1NGE1MjYwYzc3Y2QyNmQ2MGIxNGEwZGE4MTM0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCldrJNE6dt5Pr4ZBFFQv1vkguwPGwjKG7xG86Bc5OxbhjA
dXBpYTTt6RqSbu3nocactWiGR5D5j1qU7vicnUTGMyTrKB+1KRTYSWQmZm4DeS+T
lsTD4Dz66Ib+uPpIEc7q6OJlQ7c745f9TWcUtzeNeKWKZaXBXq5vL4RYm0z+ysku
iX4Rqx8y7B/+mczQBwxYbjcOGXY1qn5UJdZWgd8Y2txlhOac/+rZQBCQGSNBdjF4
61EE7nG5rzXiBRcANCO3PV0M+jbfPR0FcbNGokW1fiXXAKTCUT8iZoWLlwGJc9MY
fiQQgK8x6MQUOX9ysHx5JW1KJhdA866yiTMKT04JAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxPP71XuxUPHfPzCZ7HbRvJraV7AwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzUwOTY4MTJjLThlYWYtNDY0OC05OThiLTBkNDhkMDE5NjJmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKqQwDQYJKoZIhvcNAQELBQADggEBADTthn0c7djdcwzmfN6Qf3xI
gqbMeaClu9HJzza+6oI72HNOfGBAiYxNVm/FGqUL+cNgPvT/Jhl88W+gwVGgYkHb
au+U90kG8aLDyNNZn0btj8VduhTI/lW5nqi84f4MLf7k0PWP19cufeZwx/c+2DWv
P5W9/vKDydv0A89nTMjlUApsBbcLMVFFmhisyOx224XUXB9oMtHfWJ0oGYCi5r58
KnY9/ylYMFvp7cXMyiOuFj6Rp6Hn1A92TOYP4MsJh+88Abk3IiecwZFuQ+2MRrOv
adY+zgbpby3U7VqP1gHl2D9iz6X1A3GDnxwQeuF8v7JVFtSgUzHMAz1kvLJx9pw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:48 2026 by rpki-client