Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1f97e6-5723-404a-a971-00879a6cce74.roa
File:                     5c1f97e6-5723-404a-a971-00879a6cce74.roa (raw, json)
Hash identifier:          BGIGKHUjs+68z2pRG1Cr26CN2iAeiA93oqR4rhrb8H8=
Subject key identifier:   D2:18:8A:B3:7D:8D:29:41:1A:DC:A1:6B:0B:5A:40:C5:5D:BB:4E:57
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C0BA02470853FA6783EE7A25F79A8F77104E428
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1f97e6-5723-404a-a971-00879a6cce74.roa
Signing time:             Wed 22 Jul 2026 02:40:04 +0000
ROA not before:           Wed 22 Jul 2026 02:40:04 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0b:a0:24:70:85:3f:a6:78:3e:e7:a2:5f:79:a8:f7:71:04:e4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:40:04 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=3ef1218e7c4265dbfd1128d1a931a3737c7152fa1ac3d5dc3ce1455551c44627, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:3c:8d:b3:53:e0:bb:6d:ad:21:06:d4:ff:
                    cc:fe:32:f6:1d:3a:8b:34:ef:55:95:30:d7:df:92:
                    a4:4c:93:9b:2c:10:d2:e5:ff:56:fd:d6:db:c9:22:
                    ec:a8:23:7e:00:16:d4:a7:ad:72:6d:f5:12:66:1f:
                    3a:21:4a:e7:a6:65:75:2d:6d:66:b1:da:5c:59:9a:
                    90:3f:26:16:3b:c6:e9:61:ca:84:78:75:13:47:bf:
                    5c:64:6a:41:9c:d7:67:1b:38:a9:25:61:e4:f2:31:
                    bf:a5:44:f1:9a:5c:3c:02:93:24:66:5c:f2:d3:14:
                    d1:3d:a4:ec:bf:d7:50:dc:b3:2e:88:bc:9d:1e:2d:
                    ed:db:4c:3f:26:8f:ad:fe:9f:e2:03:be:1e:4e:14:
                    4e:06:bd:57:92:58:ad:f2:45:d8:85:1c:8a:d1:c2:
                    14:49:96:c1:3a:49:9a:3d:bd:86:be:48:98:50:93:
                    67:f0:e9:08:f6:ee:f8:6b:83:10:37:02:a9:ac:f3:
                    17:0c:65:75:7f:ac:11:c4:d1:d2:23:bc:db:31:5e:
                    43:fa:cb:72:8e:cf:3a:5c:ef:d3:5b:f3:d6:24:c7:
                    eb:f0:83:6b:82:20:b9:06:b2:a1:eb:02:c1:81:1b:
                    0a:fd:f1:ef:d0:2e:40:6b:d3:c9:aa:84:f3:17:14:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:8A:B3:7D:8D:29:41:1A:DC:A1:6B:0B:5A:40:C5:5D:BB:4E:57
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1f97e6-5723-404a-a971-00879a6cce74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c04::/47

    Signature Algorithm: sha256WithRSAEncryption
         05:90:bb:d0:46:78:10:7d:b2:08:2f:ad:5c:61:c8:9c:ca:31:
         63:14:cb:fb:f9:c3:b9:d5:75:a3:de:c6:39:d5:25:da:b2:01:
         2f:27:e0:7d:b5:25:56:2b:67:9c:ef:3d:e7:3e:ee:f8:fb:54:
         ad:0d:95:b5:76:eb:f7:ce:2d:df:cf:70:70:79:b7:14:11:ab:
         f6:3c:b4:1f:0e:eb:76:06:a1:34:91:33:21:9f:a3:b6:d2:ca:
         e3:e0:3e:1f:dc:57:5b:6b:20:ed:fc:26:41:19:55:32:40:da:
         a3:d7:56:86:fa:94:e7:04:23:85:0d:24:82:24:04:fb:3d:99:
         26:ac:17:d3:bd:df:5a:8c:7f:49:16:38:98:20:45:2e:94:cf:
         1e:10:97:e5:63:1e:b9:38:f6:11:e8:21:5b:36:61:e1:ce:be:
         ba:3f:18:a2:68:02:54:d4:2c:d1:ce:2c:cc:9d:6f:f0:47:12:
         4b:bb:fe:56:6a:25:fb:a0:01:44:dc:88:d3:bb:58:64:5c:60:
         ed:e2:03:d0:d7:02:26:a4:3c:a4:77:d7:a7:6a:b7:6b:0b:f1:
         bf:d4:33:8f:a7:c8:84:e3:d4:4f:0b:aa:a9:04:4d:c8:c2:19:
         6f:56:46:7c:9d:4f:44:a8:02:23:8e:eb:05:fc:09:29:95:68:
         d0:47:90:0a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDAugJHCFP6Z4PueiX3mo93EE5CgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDI0MDA0WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZWYxMjE4ZTdjNDI2NWRiZmQxMTI4ZDFhOTMxYTM3Mzdj
NzE1MmZhMWFjM2Q1ZGMzY2UxNDU1NTUxYzQ0NjI3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2ejyNs1Pgu22tIQbU/8z+MvYdOos071WVMNffkqRMk5ss
ENLl/1b91tvJIuyoI34AFtSnrXJt9RJmHzohSuemZXUtbWax2lxZmpA/JhY7xulh
yoR4dRNHv1xkakGc12cbOKklYeTyMb+lRPGaXDwCkyRmXPLTFNE9pOy/11Dcsy6I
vJ0eLe3bTD8mj63+n+IDvh5OFE4GvVeSWK3yRdiFHIrRwhRJlsE6SZo9vYa+SJhQ
k2fw6Qj27vhrgxA3Aqms8xcMZXV/rBHE0dIjvNsxXkP6y3KOzzpc79Nb89Ykx+vw
g2uCILkGsqHrAsGBGwr98e/QLkBr08mqhPMXFOZVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU0hiKs32NKUEa3KFrC1pAxV27TlcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVjMWY5N2U2LTU3MjMtNDA0YS1hOTcxLTAwODc5YTZjY2U3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALAQwDQYJKoZIhvcNAQELBQADggEBAAWQu9BGeBB9sggvrVxhyJzK
MWMUy/v5w7nVdaPexjnVJdqyAS8n4H21JVYrZ5zvPec+7vj7VK0NlbV26/fOLd/P
cHB5txQRq/Y8tB8O63YGoTSRMyGfo7bSyuPgPh/cV1trIO38JkEZVTJA2qPXVob6
lOcEI4UNJIIkBPs9mSasF9O931qMf0kWOJggRS6Uzx4Ql+VjHrk49hHoIVs2YeHO
vro/GKJoAlTULNHOLMydb/BHEku7/lZqJfugAUTciNO7WGRcYO3iA9DXAiakPKR3
16dqt2sL8b/UM4+nyITj1E8LqqkETcjCGW9WRnydT0SoAiOO6wX8CSmVaNBHkAo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:27 2026 by rpki-client