Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3a50e0-f2a6-4c57-8590-1e027d291d6e.roa
File:                     5c3a50e0-f2a6-4c57-8590-1e027d291d6e.roa (raw, json)
Hash identifier:          AloBsxNbsUmYfm2otIOZavdr2Sx0uX9Ab0Wpf+rpPSs=
Subject key identifier:   54:B6:64:90:E8:25:53:91:8C:A8:DC:97:05:79:A8:E0:43:D5:2B:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       076219911AA4E9C03DF39B220C4261063EA57502
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3a50e0-f2a6-4c57-8590-1e027d291d6e.roa
Signing time:             Wed 22 Jul 2026 02:40:06 +0000
ROA not before:           Wed 22 Jul 2026 02:40:06 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d88::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:62:19:91:1a:a4:e9:c0:3d:f3:9b:22:0c:42:61:06:3e:a5:75:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:40:06 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=a542367e51098da273c81e24757d26dabcaaa59c9bda20b69787b1fae338dbf5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:10:5d:9f:56:2c:34:64:25:f0:42:2e:8a:
                    d5:aa:5f:90:93:23:35:43:d9:7f:37:6d:89:d9:36:
                    4a:b9:ed:9b:56:4b:0b:ca:e4:48:c2:8b:47:69:06:
                    6c:24:29:32:0f:75:16:18:c0:65:b0:64:0e:e4:ab:
                    9a:27:63:34:76:9c:04:e1:9c:07:1a:5d:45:63:a4:
                    14:1b:dc:59:8e:d4:7a:99:7b:da:c7:7e:1f:d7:dd:
                    81:d4:23:35:a7:12:40:e0:34:19:e0:3a:68:a3:41:
                    eb:7b:1f:8a:d9:6a:76:5c:07:ba:15:a4:4d:76:0b:
                    f4:58:fb:52:67:08:d7:b2:e6:a7:f6:a8:cd:19:9f:
                    29:a9:ba:1b:1c:18:cc:49:10:73:61:67:59:0a:f7:
                    53:ee:78:b7:96:c3:01:d4:8f:a1:e3:a0:a0:84:30:
                    67:ac:7e:68:a4:97:4e:cc:32:30:c9:8c:c1:c4:b2:
                    9f:e2:f6:fa:6d:fa:2a:4e:47:99:e7:b3:91:31:bd:
                    a7:62:ca:54:14:1e:04:60:e4:3e:e7:65:80:2a:2d:
                    48:b4:56:b5:56:16:0d:b3:69:f0:b3:75:75:75:42:
                    21:9d:ef:b1:81:72:d6:e5:d1:19:a8:d0:ec:e9:39:
                    8f:6a:6d:5f:e8:86:81:da:59:79:70:7c:1b:54:2d:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:64:90:E8:25:53:91:8C:A8:DC:97:05:79:A8:E0:43:D5:2B:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c3a50e0-f2a6-4c57-8590-1e027d291d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d88::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:03:8d:43:2a:e7:a5:1b:a5:3c:9d:03:2f:3e:2a:ea:9c:
         8e:78:76:89:e1:2e:f2:f8:58:76:1d:ba:84:7d:cd:4b:8f:9c:
         0b:90:7b:04:89:12:d3:02:28:60:21:8f:2b:e3:ce:b2:1c:09:
         e3:c1:4e:03:a9:51:48:cc:e5:ca:33:90:28:5f:d2:1c:a5:48:
         92:60:9d:2e:f3:b4:d6:3b:92:71:be:bb:f1:35:65:48:36:9d:
         3d:15:9f:7e:e7:0d:7f:bb:10:c8:e9:96:9c:38:61:dc:5f:0c:
         01:aa:de:44:15:54:7e:6c:68:26:9f:0a:4f:1c:53:76:11:20:
         0c:1a:ef:f1:7b:99:5a:4e:3e:49:30:6b:4c:23:99:52:56:11:
         8d:d6:e5:3c:c4:70:7e:e6:b4:b5:1a:64:54:b6:88:6c:1d:c4:
         02:c1:75:87:17:ce:c2:27:0b:44:5d:f6:5a:c9:44:9f:79:26:
         0d:23:f2:d0:bb:b2:9d:46:bc:97:88:5c:31:12:5a:c4:e4:03:
         c9:5f:2a:0e:ed:6d:0f:cc:9f:af:e2:af:5b:eb:2b:33:f7:d3:
         31:fa:cf:2a:c6:69:e2:87:b8:b2:59:b1:e5:ad:ae:e2:06:38:
         93:e3:6a:a9:74:fa:ab:09:c6:e7:be:4a:73:00:6c:e6:b7:00:
         1d:64:1c:76
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUB2IZkRqk6cA985siDEJhBj6ldQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDI0MDA2WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTQyMzY3ZTUxMDk4ZGEyNzNjODFlMjQ3NTdkMjZkYWJj
YWFhNTljOWJkYTIwYjY5Nzg3YjFmYWUzMzhkYmY1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkZRBdn1YsNGQl8EIuitWqX5CTIzVD2X83bYnZNkq57ZtW
SwvK5EjCi0dpBmwkKTIPdRYYwGWwZA7kq5onYzR2nAThnAcaXUVjpBQb3FmO1HqZ
e9rHfh/X3YHUIzWnEkDgNBngOmijQet7H4rZanZcB7oVpE12C/RY+1JnCNey5qf2
qM0ZnympuhscGMxJEHNhZ1kK91PueLeWwwHUj6HjoKCEMGesfmikl07MMjDJjMHE
sp/i9vpt+ipOR5nns5ExvadiylQUHgRg5D7nZYAqLUi0VrVWFg2zafCzdXV1QiGd
77GBctbl0Rmo0OzpOY9qbV/ohoHaWXlwfBtULTJbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUVLZkkOglU5GMqNyXBXmo4EPVKwcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVjM2E1MGUwLWYyYTYtNGM1Ny04NTkwLTFlMDI3ZDI5MWQ2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALYgwDQYJKoZIhvcNAQELBQADggEBACM+A41DKuelG6U8nQMvPirq
nI54donhLvL4WHYduoR9zUuPnAuQewSJEtMCKGAhjyvjzrIcCePBTgOpUUjM5coz
kChf0hylSJJgnS7ztNY7knG+u/E1ZUg2nT0Vn37nDX+7EMjplpw4YdxfDAGq3kQV
VH5saCafCk8cU3YRIAwa7/F7mVpOPkkwa0wjmVJWEY3W5TzEcH7mtLUaZFS2iGwd
xALBdYcXzsInC0Rd9lrJRJ95Jg0j8tC7sp1GvJeIXDESWsTkA8lfKg7tbQ/Mn6/i
r1vrKzP30zH6zyrGaeKHuLJZseWtruIGOJPjaql0+qsJxue+SnMAbOa3AB1kHHY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:16 2026 by rpki-client