Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58e1ee13-5c75-4cb8-8ac5-93f28feede29.roa
File:                     58e1ee13-5c75-4cb8-8ac5-93f28feede29.roa (raw, json)
Hash identifier:          Irs7lDShYgbvebAij4iT+kQlp6McnKsGKPqjd8tMdT4=
Subject key identifier:   2E:64:92:DD:23:C7:56:26:8F:AE:3A:DA:60:A1:0A:20:B6:AB:C5:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       16A89507416F4831BC484D32FAB7B75E4647E749
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58e1ee13-5c75-4cb8-8ac5-93f28feede29.roa
Signing time:             Thu 23 Jul 2026 09:50:06 +0000
ROA not before:           Thu 23 Jul 2026 09:50:06 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:358a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a8:95:07:41:6f:48:31:bc:48:4d:32:fa:b7:b7:5e:46:47:e7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:50:06 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=e1fc1c50f6cd353da155e90e548ebe5ff97cfd5ea9c396a99d6a4794373b5aa9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:15:87:21:bd:77:85:b0:1f:07:98:6e:6f:
                    39:e1:c4:4f:ef:40:ab:f4:8c:25:be:54:5f:42:12:
                    48:33:7d:ae:b4:e3:eb:24:99:fe:54:97:e9:4b:9c:
                    54:b8:cb:b7:74:f9:93:9a:fd:b5:a9:43:1a:c4:7f:
                    e0:7a:f6:9e:08:55:28:e1:4c:bb:95:b9:51:dd:27:
                    34:5a:d3:ae:6e:0f:9f:96:d3:e4:ea:43:0a:13:a1:
                    99:70:d8:c8:4d:2d:d0:26:5d:3b:b4:fb:45:9a:1a:
                    ae:cf:85:14:30:9f:5b:97:8d:b2:d6:c5:68:55:04:
                    86:b6:28:a2:b3:30:02:82:bc:47:5f:90:8b:25:e0:
                    6c:44:c8:44:29:8e:6d:74:cb:83:fa:38:fe:6c:82:
                    ab:97:18:8b:80:05:87:40:0b:6e:3c:d0:c1:bb:d8:
                    64:e0:21:15:bd:39:63:f7:f9:4d:57:70:df:5d:33:
                    92:86:c3:59:14:b1:7e:55:4b:34:7d:c6:5a:57:b5:
                    dc:50:a8:33:e8:f7:dd:ea:b5:d0:e4:8d:69:01:34:
                    71:eb:2f:5c:17:eb:be:a2:51:6d:a8:03:b4:99:1e:
                    cc:fa:36:56:04:18:24:62:3e:cd:6f:1e:f3:30:9f:
                    54:21:54:18:88:ac:c7:0f:de:b7:a1:dc:f3:7d:15:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:92:DD:23:C7:56:26:8F:AE:3A:DA:60:A1:0A:20:B6:AB:C5:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58e1ee13-5c75-4cb8-8ac5-93f28feede29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:358a::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:74:e4:ab:c3:e5:85:a9:0b:87:62:11:5d:b3:2b:1f:7f:be:
         40:30:8a:90:51:17:da:c2:8c:4a:3d:d5:55:22:af:9a:7e:c4:
         03:57:66:5f:0e:5b:1e:3d:67:9d:c1:f7:f4:32:61:f3:fa:28:
         d4:16:fd:3a:5c:d8:95:52:8d:4b:6a:d6:c8:36:95:8c:6d:70:
         d5:8b:13:9b:b5:29:86:9d:33:67:1b:1c:ae:df:9b:16:5f:d5:
         01:54:24:ed:15:66:98:07:85:7c:b1:4c:72:a4:99:99:b3:a0:
         fe:1b:e7:2f:85:8b:8b:69:95:31:b5:d5:f0:69:fb:23:fa:30:
         c7:45:08:9e:1b:b4:5f:c0:97:b8:86:fd:22:82:3a:38:f2:a0:
         36:82:db:6a:d3:1e:10:f6:e1:cb:19:a8:b8:e3:5a:07:b7:ff:
         44:09:06:b4:21:bd:30:94:01:de:9e:db:97:a4:b6:4c:d2:91:
         28:83:93:86:00:03:43:e2:83:95:69:ed:b9:8c:d2:6e:2a:4f:
         a5:5b:fb:ca:2d:00:c8:7a:20:4f:83:98:91:85:80:2d:2e:a5:
         1d:40:01:6d:bd:a1:40:9a:33:2a:4b:a9:20:55:90:05:5a:43:
         b7:a7:85:88:ec:ab:c8:d8:9b:76:6a:5c:24:09:3b:de:92:f3:
         06:73:ba:c7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFqiVB0FvSDG8SE0y+re3XkZH50kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDk1MDA2WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWZjMWM1MGY2Y2QzNTNkYTE1NWU5MGU1NDhlYmU1ZmY5
N2NmZDVlYTljMzk2YTk5ZDZhNDc5NDM3M2I1YWE5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNSRWHIb13hbAfB5hubznhxE/vQKv0jCW+VF9CEkgzfa60
4+skmf5Ul+lLnFS4y7d0+ZOa/bWpQxrEf+B69p4IVSjhTLuVuVHdJzRa065uD5+W
0+TqQwoToZlw2MhNLdAmXTu0+0WaGq7PhRQwn1uXjbLWxWhVBIa2KKKzMAKCvEdf
kIsl4GxEyEQpjm10y4P6OP5sgquXGIuABYdAC2480MG72GTgIRW9OWP3+U1XcN9d
M5KGw1kUsX5VSzR9xlpXtdxQqDPo993qtdDkjWkBNHHrL1wX676iUW2oA7SZHsz6
NlYEGCRiPs1vHvMwn1QhVBiIrMcP3reh3PN9FU0XAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULmSS3SPHViaPrjraYKEKILarxVIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU4ZTFlZTEzLTVjNzUtNGNiOC04YWM1LTkzZjI4ZmVlZGUyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANYowDQYJKoZIhvcNAQELBQADggEBAIl05KvD5YWpC4diEV2zKx9/
vkAwipBRF9rCjEo91VUir5p+xANXZl8OWx49Z53B9/QyYfP6KNQW/Tpc2JVSjUtq
1sg2lYxtcNWLE5u1KYadM2cbHK7fmxZf1QFUJO0VZpgHhXyxTHKkmZmzoP4b5y+F
i4tplTG11fBp+yP6MMdFCJ4btF/Al7iG/SKCOjjyoDaC22rTHhD24csZqLjjWge3
/0QJBrQhvTCUAd6e25ektkzSkSiDk4YAA0Pig5Vp7bmM0m4qT6Vb+8otAMh6IE+D
mJGFgC0upR1AAW29oUCaMypLqSBVkAVaQ7enhYjsq8jYm3ZqXCQJO96S8wZzusc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:47 2026 by rpki-client