Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a11676e-a6ea-443c-85e3-b115d6ec78ea.roa
File:                     5a11676e-a6ea-443c-85e3-b115d6ec78ea.roa (raw, json)
Hash identifier:          MddClbXrs9uINpsFxqsgoJzpFlcznhIbbnlfI2rRkrQ=
Subject key identifier:   42:B2:C2:5C:34:FD:A0:74:20:F0:A7:02:0E:5A:FF:44:99:71:B5:BE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4C931A5510202D561B0256D33176340D2618A569
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a11676e-a6ea-443c-85e3-b115d6ec78ea.roa
Signing time:             Wed 22 Jul 2026 00:42:08 +0000
ROA not before:           Wed 22 Jul 2026 00:42:08 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c9e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:1a:55:10:20:2d:56:1b:02:56:d3:31:76:34:0d:26:18:a5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:42:08 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=faaf6803cd40c17aa773e40d9bd9389a5dcce49ed2a66f3707d4addd59029f51, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:db:9f:01:f4:9b:f8:bf:65:2c:93:ce:c2:
                    18:a3:2d:82:99:a4:59:d0:c5:2d:75:1f:a7:ab:99:
                    d3:13:84:86:76:5b:55:12:ce:02:c0:a6:64:51:91:
                    46:3d:1f:fe:ad:08:c9:25:81:ab:9c:cd:ef:6a:90:
                    24:52:63:88:34:e3:0a:62:dd:f2:16:72:57:9c:12:
                    63:4d:96:3b:91:5a:25:05:6e:ab:3e:f8:ee:ba:3c:
                    35:70:07:c6:07:53:45:27:f9:1b:3c:f4:60:a5:f7:
                    21:55:ee:20:e4:79:76:6b:92:c6:d3:11:a6:2e:9d:
                    15:03:08:96:8c:52:f2:d1:8f:3a:a2:2d:8e:8b:7e:
                    3d:06:89:59:c8:54:5a:a7:66:6a:f9:90:83:71:30:
                    76:4c:aa:09:89:84:00:29:08:03:43:f9:d0:5c:5a:
                    12:d9:5e:ca:29:90:0b:0e:15:be:ae:18:fc:0d:58:
                    55:36:23:67:00:dd:b0:c6:aa:63:aa:04:c4:ab:5e:
                    ec:13:7c:4a:cf:f3:d9:da:11:b0:fa:0f:3c:12:56:
                    4b:ab:60:c1:74:d2:8d:cb:0e:eb:68:50:95:dc:01:
                    f9:27:4c:cd:59:f1:a0:eb:eb:f2:59:49:f2:89:ed:
                    a0:0c:f7:62:9d:5d:dc:54:d5:1a:22:9d:24:3f:9f:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B2:C2:5C:34:FD:A0:74:20:F0:A7:02:0E:5A:FF:44:99:71:B5:BE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a11676e-a6ea-443c-85e3-b115d6ec78ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c9e::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:67:30:7c:19:04:fd:37:9c:77:65:8f:fa:2f:70:35:ae:
         87:d5:6d:3b:18:49:d6:e3:d0:4f:c8:df:7b:db:8b:8f:64:bd:
         b7:62:9a:0b:fd:8c:b3:ec:3c:ac:92:7c:47:2d:41:7d:40:b1:
         b8:03:b1:ba:fb:64:bc:86:40:43:29:07:93:a2:2f:88:aa:34:
         3f:8a:85:15:54:01:94:1d:05:42:e0:67:60:e0:f8:37:a4:a8:
         c8:4d:fb:90:e8:fc:fd:be:c2:41:04:3b:b5:9f:90:2e:62:30:
         c3:b7:23:34:4a:37:9b:7b:a8:99:61:ad:fc:16:94:b5:9c:8c:
         72:fa:05:eb:a4:f7:9d:5c:b3:89:78:19:65:13:6f:dd:c5:5b:
         71:0a:24:ce:50:22:b2:d5:e2:08:03:6f:50:dc:68:52:47:b2:
         95:ba:be:bb:76:cc:99:73:ad:05:fc:6f:f9:34:e0:c9:4c:0e:
         2c:70:ec:f8:8d:d0:e0:70:c1:a5:7e:29:67:1b:3f:bb:9c:b6:
         74:b7:8d:ec:be:17:72:00:66:f9:b4:0a:56:ce:fa:00:ea:43:
         97:8e:6c:63:df:2b:1b:93:9f:8b:26:3a:cd:67:40:87:7c:f9:
         77:01:9c:60:a6:fd:62:d9:ce:f7:eb:38:a1:ad:97:8c:56:13:
         16:4d:fd:42
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTJMaVRAgLVYbAlbTMXY0DSYYpWkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDA0MjA4WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYWFmNjgwM2NkNDBjMTdhYTc3M2U0MGQ5YmQ5Mzg5YTVk
Y2NlNDllZDJhNjZmMzcwN2Q0YWRkZDU5MDI5ZjUxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLmNufAfSb+L9lLJPOwhijLYKZpFnQxS11H6ermdMThIZ2
W1USzgLApmRRkUY9H/6tCMklgaucze9qkCRSY4g04wpi3fIWclecEmNNljuRWiUF
bqs++O66PDVwB8YHU0Un+Rs89GCl9yFV7iDkeXZrksbTEaYunRUDCJaMUvLRjzqi
LY6Lfj0GiVnIVFqnZmr5kINxMHZMqgmJhAApCAND+dBcWhLZXsopkAsOFb6uGPwN
WFU2I2cA3bDGqmOqBMSrXuwTfErP89naEbD6DzwSVkurYMF00o3LDutoUJXcAfkn
TM1Z8aDr6/JZSfKJ7aAM92KdXdxU1RoinSQ/n1RNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQrLCXDT9oHQg8KcCDlr/RJlxtb4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVhMTE2NzZlLWE2ZWEtNDQzYy04NWUzLWIxMTVkNmVjNzhlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALJ4wDQYJKoZIhvcNAQELBQADggEBAH5nZzB8GQT9N5x3ZY/6L3A1
rofVbTsYSdbj0E/I33vbi49kvbdimgv9jLPsPKySfEctQX1AsbgDsbr7ZLyGQEMp
B5OiL4iqND+KhRVUAZQdBULgZ2Dg+DekqMhN+5Do/P2+wkEEO7WfkC5iMMO3IzRK
N5t7qJlhrfwWlLWcjHL6Beuk951cs4l4GWUTb93FW3EKJM5QIrLV4ggDb1DcaFJH
spW6vrt2zJlzrQX8b/k04MlMDixw7PiN0OBwwaV+KWcbP7uctnS3jey+F3IAZvm0
ClbO+gDqQ5eObGPfKxuTn4smOs1nQId8+XcBnGCm/WLZzvfrOKGtl4xWExZN/UI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:27 2026 by rpki-client