Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59a0b0d7-e2a6-4ba1-a80e-9f4b6150aa98.roa
File:                     59a0b0d7-e2a6-4ba1-a80e-9f4b6150aa98.roa (raw, json)
Hash identifier:          3HD3+799ctD3dPnIpwnQoD0ak3uyoSNi3pzgoGL4/24=
Subject key identifier:   A9:73:1E:6E:92:26:D5:D6:A1:98:09:66:01:0F:D1:A1:43:D2:3F:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       53A69D8E444CF652A8B0E89780E6E57D07FC05E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59a0b0d7-e2a6-4ba1-a80e-9f4b6150aa98.roa
Signing time:             Thu 23 Jul 2026 04:20:06 +0000
ROA not before:           Thu 23 Jul 2026 04:20:06 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fa8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:9d:8e:44:4c:f6:52:a8:b0:e8:97:80:e6:e5:7d:07:fc:05:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 04:20:06 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=8bb98080c53c07dec54850ac87f54281f1504ef582442fc6f6764b80d3901a3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:f1:7e:2c:3e:fe:80:aa:d9:93:2e:bc:9a:
                    00:09:57:83:34:00:5f:05:2d:8d:31:fa:67:55:75:
                    58:31:cd:55:3d:86:ad:c4:fc:16:5a:3b:82:95:48:
                    ad:78:90:a3:45:27:fc:6c:3b:a0:17:58:99:f1:ea:
                    3e:e2:81:d9:83:91:ee:45:6d:ed:2f:c0:47:89:46:
                    01:7f:dc:63:b0:5a:02:84:29:31:f9:68:c8:fb:9c:
                    cf:ee:df:97:2b:65:d5:51:a1:40:ba:37:25:22:0b:
                    29:68:c6:b9:1d:15:1f:8a:71:a0:bb:a6:4d:dc:70:
                    f2:1f:3a:3a:17:b1:35:b5:d3:e1:40:c0:e1:5e:43:
                    89:83:e3:d1:14:02:75:44:1e:7f:c0:fb:08:ca:12:
                    5a:30:54:89:7c:37:93:28:a1:4a:49:5a:2a:e2:c6:
                    26:6c:7a:9a:0e:bd:3d:7f:e5:00:0b:fd:e6:7a:ee:
                    56:96:3e:b4:c7:2f:d7:86:fc:aa:8e:ef:9a:a9:9d:
                    18:d4:e0:b3:eb:a3:7b:78:99:00:56:83:93:c2:f0:
                    62:6c:40:5d:23:26:02:37:80:70:98:c0:0d:be:a3:
                    04:12:7b:14:bd:ce:11:af:25:09:8a:b3:fa:15:0f:
                    53:78:f6:e3:1c:86:ee:4b:f7:fe:62:f5:75:89:3e:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:1E:6E:92:26:D5:D6:A1:98:09:66:01:0F:D1:A1:43:D2:3F:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59a0b0d7-e2a6-4ba1-a80e-9f4b6150aa98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fa8::/46

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:3f:ca:11:d7:93:dd:da:be:67:33:6e:48:e1:fe:d8:fb:
         89:2e:42:3f:17:d3:1c:4d:c8:36:e8:d6:db:d9:8f:31:02:73:
         b4:95:00:a0:d0:d4:91:80:99:7a:0a:3f:01:75:cb:87:5f:44:
         4c:16:9f:4d:15:e4:a5:d3:0e:81:4b:85:34:5a:18:2f:74:01:
         e6:6a:f1:e8:94:ea:9c:27:e1:ec:5d:6f:bf:01:74:67:f9:2a:
         c5:dd:5e:25:0c:54:39:48:cc:05:c9:c2:b8:db:f1:f0:cd:5c:
         43:0c:67:9c:08:d5:5c:b5:b9:15:78:33:1d:d2:91:4f:00:88:
         eb:7e:24:1e:66:2d:84:77:88:27:31:ac:b2:60:f0:cc:c5:21:
         89:20:58:7d:9e:10:ce:96:07:28:87:2f:8e:52:97:fb:db:15:
         95:42:b2:33:b5:43:7e:cc:36:24:37:56:53:17:8f:7c:18:99:
         1b:70:bc:d4:f8:a1:b7:57:3f:e5:aa:29:a6:d9:79:d6:b8:1e:
         91:c9:1d:4b:74:fb:2a:66:04:57:f4:56:4c:5c:68:b9:fa:61:
         7e:cc:44:61:02:d5:e3:4a:e0:79:c7:1c:33:da:c9:a4:d8:c0:
         d0:c5:cc:0b:8a:84:cc:d0:20:ef:46:a8:77:3d:af:99:e7:06:
         c9:1b:e1:a2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUU6adjkRM9lKosOiXgOblfQf8BeMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDQyMDA2WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YmI5ODA4MGM1M2MwN2RlYzU0ODUwYWM4N2Y1NDI4MWYx
NTA0ZWY1ODI0NDJmYzZmNjc2NGI4MGQzOTAxYTNjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQ6PF+LD7+gKrZky68mgAJV4M0AF8FLY0x+mdVdVgxzVU9
hq3E/BZaO4KVSK14kKNFJ/xsO6AXWJnx6j7igdmDke5Fbe0vwEeJRgF/3GOwWgKE
KTH5aMj7nM/u35crZdVRoUC6NyUiCyloxrkdFR+KcaC7pk3ccPIfOjoXsTW10+FA
wOFeQ4mD49EUAnVEHn/A+wjKElowVIl8N5MooUpJWirixiZsepoOvT1/5QAL/eZ6
7laWPrTHL9eG/KqO75qpnRjU4LPro3t4mQBWg5PC8GJsQF0jJgI3gHCYwA2+owQS
exS9zhGvJQmKs/oVD1N49uMchu5L9/5i9XWJPuE3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqXMebpIm1dahmAlmAQ/RoUPSPyUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU5YTBiMGQ3LWUyYTYtNGJhMS1hODBlLTlmNGI2MTUwYWE5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAP6gwDQYJKoZIhvcNAQELBQADggEBAAatP8oR15Pd2r5nM25I4f7Y
+4kuQj8X0xxNyDbo1tvZjzECc7SVAKDQ1JGAmXoKPwF1y4dfREwWn00V5KXTDoFL
hTRaGC90AeZq8eiU6pwn4exdb78BdGf5KsXdXiUMVDlIzAXJwrjb8fDNXEMMZ5wI
1Vy1uRV4Mx3SkU8AiOt+JB5mLYR3iCcxrLJg8MzFIYkgWH2eEM6WByiHL45Sl/vb
FZVCsjO1Q37MNiQ3VlMXj3wYmRtwvNT4obdXP+WqKabZeda4HpHJHUt0+ypmBFf0
VkxcaLn6YX7MRGEC1eNK4HnHHDPayaTYwNDFzAuKhMzQIO9GqHc9r5nnBskb4aI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:15 2026 by rpki-client