Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5866406f-85aa-476d-8f86-266e5c4a84e2.roa
File:                     5866406f-85aa-476d-8f86-266e5c4a84e2.roa (raw, json)
Hash identifier:          sc31r/FXzNyTsh8SSaUntoIifUAmHFp2c/XHrPgg9/c=
Subject key identifier:   EF:4B:83:06:BB:9F:E6:88:5E:70:F1:94:EC:8F:96:16:CD:BB:12:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1255EF1E1ED4FDAC312E539A805B4BF46BB722EA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5866406f-85aa-476d-8f86-266e5c4a84e2.roa
Signing time:             Thu 23 Jul 2026 03:52:05 +0000
ROA not before:           Thu 23 Jul 2026 03:52:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e00::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:ef:1e:1e:d4:fd:ac:31:2e:53:9a:80:5b:4b:f4:6b:b7:22:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:52:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=94e42e6873f52a4dd45efbd3697fb10f01285f28f590f20d17f207501d70ec3e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:67:64:c4:a8:4b:95:69:b4:93:fc:87:4b:
                    29:80:cd:71:b1:ae:90:b4:f9:17:97:2b:80:60:ea:
                    83:d0:ef:38:e2:1e:d1:3f:70:66:47:90:06:43:c8:
                    71:cc:c4:34:fb:bb:78:1f:4a:70:37:51:0f:f2:46:
                    75:ae:de:c3:e1:59:32:5e:9b:cd:9f:ee:84:d7:8c:
                    7f:ea:da:9f:d1:8a:8c:25:7d:70:0b:4d:18:da:8f:
                    79:20:ab:97:16:59:c4:41:2e:6d:18:18:2a:ca:79:
                    e2:ca:50:99:cc:d8:fe:1f:47:2b:68:f7:79:00:30:
                    3b:d3:04:17:bb:4f:e6:74:4a:77:78:15:3f:fe:35:
                    48:a9:c1:1f:07:31:ca:e1:12:68:d8:d9:95:01:6f:
                    d6:f2:ec:45:66:ce:99:49:22:ea:32:22:d4:af:9f:
                    f1:90:ff:27:43:d9:4f:3b:b9:79:5c:ec:de:41:6f:
                    10:c7:c0:7d:50:39:bf:ff:f6:52:f2:9e:d5:bb:2c:
                    8c:c5:6a:84:f7:95:95:19:35:7d:38:ff:ba:69:ea:
                    02:cf:0f:f3:78:55:01:40:87:35:31:1b:6d:da:b3:
                    0e:8d:f5:72:0c:94:97:58:f3:df:85:35:94:45:66:
                    73:d0:11:ea:52:38:98:b7:d2:fb:f9:78:ec:fd:9a:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:83:06:BB:9F:E6:88:5E:70:F1:94:EC:8F:96:16:CD:BB:12:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5866406f-85aa-476d-8f86-266e5c4a84e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e00::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:f8:08:f3:83:79:25:67:4d:c1:2c:71:60:03:4b:02:7d:
         2b:38:a6:51:00:20:30:38:37:e2:8a:05:c1:39:5c:c5:72:b1:
         fe:95:50:b0:47:27:13:35:2a:e0:a6:0b:71:a2:f5:f9:4b:06:
         ca:71:f8:22:99:50:1c:eb:df:bd:9d:2f:16:0a:29:72:40:31:
         78:04:e6:f3:21:af:e9:f5:9f:47:6b:df:4a:50:9d:60:cf:37:
         42:fe:35:de:07:86:e6:45:ff:c4:27:74:4c:6d:25:6b:7e:57:
         68:72:1c:76:9b:8a:3a:b6:a9:19:b4:77:8b:31:7f:a2:59:3c:
         aa:78:5d:a7:ca:69:07:59:70:20:d2:63:8c:28:4c:79:f4:2b:
         bb:61:75:d0:8b:c2:b2:17:7c:4a:a9:fd:f3:3d:27:ed:84:da:
         7a:bd:08:b2:b5:38:58:b8:6a:fb:ce:89:10:86:f5:d2:c8:a9:
         04:e2:62:af:81:2a:b2:4f:2b:39:7e:46:70:dd:5c:b8:53:47:
         3d:b9:50:c0:88:0d:2b:75:a6:b9:f2:bd:7f:7d:2d:eb:8f:d9:
         17:46:aa:75:6a:c5:64:58:8d:10:0d:ce:80:8f:e8:38:e4:ce:
         9d:a0:16:17:b0:21:23:09:fe:83:13:ae:7e:e1:2b:b2:e6:65:
         96:c9:1d:93
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUElXvHh7U/awxLlOagFtL9Gu3IuowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDM1MjA1WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NGU0MmU2ODczZjUyYTRkZDQ1ZWZiZDM2OTdmYjEwZjAx
Mjg1ZjI4ZjU5MGYyMGQxN2YyMDc1MDFkNzBlYzNlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSDWdkxKhLlWm0k/yHSymAzXGxrpC0+ReXK4Bg6oPQ7zji
HtE/cGZHkAZDyHHMxDT7u3gfSnA3UQ/yRnWu3sPhWTJem82f7oTXjH/q2p/Riowl
fXALTRjaj3kgq5cWWcRBLm0YGCrKeeLKUJnM2P4fRyto93kAMDvTBBe7T+Z0Snd4
FT/+NUipwR8HMcrhEmjY2ZUBb9by7EVmzplJIuoyItSvn/GQ/ydD2U87uXlc7N5B
bxDHwH1QOb//9lLyntW7LIzFaoT3lZUZNX04/7pp6gLPD/N4VQFAhzUxG23asw6N
9XIMlJdY89+FNZRFZnPQEepSOJi30vv5eOz9moiRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU70uDBruf5ohecPGU7I+WFs27Eo8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU4NjY0MDZmLTg1YWEtNDc2ZC04Zjg2LTI2NmU1YzRhODRlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALgAwDQYJKoZIhvcNAQELBQADggEBAIO5+Ajzg3klZ03BLHFgA0sC
fSs4plEAIDA4N+KKBcE5XMVysf6VULBHJxM1KuCmC3Gi9flLBspx+CKZUBzr372d
LxYKKXJAMXgE5vMhr+n1n0dr30pQnWDPN0L+Nd4HhuZF/8QndExtJWt+V2hyHHab
ijq2qRm0d4sxf6JZPKp4XafKaQdZcCDSY4woTHn0K7thddCLwrIXfEqp/fM9J+2E
2nq9CLK1OFi4avvOiRCG9dLIqQTiYq+BKrJPKzl+RnDdXLhTRz25UMCIDSt1prny
vX99LeuP2RdGqnVqxWRYjRANzoCP6Djkzp2gFhewISMJ/oMTrn7hK7LmZZbJHZM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:04 2026 by rpki-client