Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f3eea52-e8ac-411e-b051-a54b55e26f2f.roa
File:                     5f3eea52-e8ac-411e-b051-a54b55e26f2f.roa (raw, json)
Hash identifier:          v4MyeF9qeJR+DOHKOZfOvpzkoWm/J2CCPjz0Kv+0Z98=
Subject key identifier:   24:F0:E3:80:A0:31:79:D8:20:30:0F:7A:91:C3:EF:19:95:7B:6C:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       084829E7C236F9E5037B5BC10F41AD30B00A2D02
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f3eea52-e8ac-411e-b051-a54b55e26f2f.roa
Signing time:             Wed 22 Jul 2026 03:20:07 +0000
ROA not before:           Wed 22 Jul 2026 03:20:07 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a0e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:29:e7:c2:36:f9:e5:03:7b:5b:c1:0f:41:ad:30:b0:0a:2d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:20:07 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=95920d9b79af05762f1d282facf2446d04047a2945117c6985953a4ac562a1fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:df:1f:10:ab:8b:2f:95:3a:0e:98:b9:93:
                    cb:66:9c:64:e1:48:b4:2c:66:4a:ec:e7:87:49:e3:
                    92:68:25:34:3d:fa:7d:91:f8:0f:e3:a4:57:b3:c3:
                    5f:95:44:52:14:66:98:e7:0d:1b:5c:7c:dd:bd:d1:
                    13:90:36:8c:b3:00:2f:3c:83:1c:b0:f7:e1:bb:0a:
                    25:f7:23:3d:1c:c0:9e:85:fc:bc:d9:58:f8:f7:9c:
                    fe:3b:da:bd:bc:81:eb:21:18:0b:3a:0b:57:3e:ad:
                    bb:c9:9b:b7:c0:fd:cd:69:64:b1:eb:c2:c3:49:e1:
                    2a:16:12:a8:c1:47:49:58:07:e2:2a:f6:70:1b:0d:
                    04:0c:8e:05:8a:5e:df:5c:d3:f1:49:9c:96:2e:69:
                    56:b7:39:f4:7d:f7:51:1b:9b:c7:73:a0:06:61:56:
                    61:8b:78:c0:ae:0f:8d:3c:78:44:8b:80:30:45:d3:
                    65:66:4c:21:a9:44:91:e6:3c:2c:12:88:b4:c7:a8:
                    71:1d:e1:10:75:63:ac:a3:ce:93:cf:a4:ac:82:f7:
                    15:dc:e1:bc:c1:bb:17:4c:f6:51:5a:10:1d:d9:f2:
                    1b:e6:04:bb:48:f5:c7:51:b6:35:c8:80:d4:e2:b8:
                    47:fa:e2:4f:57:0c:63:09:b5:a3:9c:a9:86:7e:75:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:E3:80:A0:31:79:D8:20:30:0F:7A:91:C3:EF:19:95:7B:6C:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f3eea52-e8ac-411e-b051-a54b55e26f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a0e::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:65:b7:be:ca:3d:3b:a7:f9:c7:f9:41:4e:c9:a7:90:16:
         10:c7:4d:31:85:93:65:2d:9a:05:ab:cc:c6:10:50:8a:81:24:
         6f:34:51:57:88:6d:4e:e7:9d:95:ae:b5:f3:42:73:01:b9:b5:
         58:c9:35:d1:eb:50:c2:37:6a:13:75:0c:63:6f:1f:4e:a6:b5:
         60:bb:62:26:ba:2d:34:79:3a:e7:c2:3a:64:4e:4b:43:32:24:
         11:25:c6:3c:6e:be:ce:54:d2:8d:bb:f8:63:2a:fa:e6:43:c8:
         10:bc:b3:51:c7:d4:21:5b:42:22:a8:8e:3f:db:88:64:b4:05:
         2d:3d:d7:9c:70:c2:b8:4d:32:8d:0d:0d:a1:e6:08:aa:76:6f:
         8d:d2:73:1c:68:41:52:f8:6b:c6:72:ad:d2:8f:5d:87:87:27:
         3f:8a:43:bf:7e:2c:ce:cd:b1:31:df:11:2c:c4:7a:6b:dc:fe:
         b9:37:81:a4:6c:19:71:3b:55:3e:e7:f0:cf:3f:89:b4:d6:69:
         2c:40:33:4f:a1:ff:fc:49:92:40:54:ad:39:76:be:96:aa:43:
         89:b7:c4:b3:41:d9:89:ef:49:81:a9:54:f2:b5:f5:c1:76:ef:
         68:39:5f:81:c6:6b:bf:d0:a1:f8:db:79:6d:ed:db:4d:a9:0e:
         35:ef:44:e5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCEgp58I2+eUDe1vBD0GtMLAKLQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMyMDA3WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTkyMGQ5Yjc5YWYwNTc2MmYxZDI4MmZhY2YyNDQ2ZDA0
MDQ3YTI5NDUxMTdjNjk4NTk1M2E0YWM1NjJhMWZlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtL98fEKuLL5U6Dpi5k8tmnGThSLQsZkrs54dJ45JoJTQ9
+n2R+A/jpFezw1+VRFIUZpjnDRtcfN290ROQNoyzAC88gxyw9+G7CiX3Iz0cwJ6F
/LzZWPj3nP472r28geshGAs6C1c+rbvJm7fA/c1pZLHrwsNJ4SoWEqjBR0lYB+Iq
9nAbDQQMjgWKXt9c0/FJnJYuaVa3OfR991Ebm8dzoAZhVmGLeMCuD408eESLgDBF
02VmTCGpRJHmPCwSiLTHqHEd4RB1Y6yjzpPPpKyC9xXc4bzBuxdM9lFaEB3Z8hvm
BLtI9cdRtjXIgNTiuEf64k9XDGMJtaOcqYZ+dVGDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJPDjgKAxedggMA96kcPvGZV7bFkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVmM2VlYTUyLWU4YWMtNDExZS1iMDUxLWE1NGI1NWUyNmYyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKg4wDQYJKoZIhvcNAQELBQADggEBAJLPZbe+yj07p/nH+UFOyaeQ
FhDHTTGFk2UtmgWrzMYQUIqBJG80UVeIbU7nnZWutfNCcwG5tVjJNdHrUMI3ahN1
DGNvH06mtWC7Yia6LTR5OufCOmROS0MyJBElxjxuvs5U0o27+GMq+uZDyBC8s1HH
1CFbQiKojj/biGS0BS0915xwwrhNMo0NDaHmCKp2b43ScxxoQVL4a8ZyrdKPXYeH
Jz+KQ79+LM7NsTHfESzEemvc/rk3gaRsGXE7VT7n8M8/ibTWaSxAM0+h//xJkkBU
rTl2vpaqQ4m3xLNB2YnvSYGpVPK19cF272g5X4HGa7/QofjbeW3t202pDjXvROU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:17 2026 by rpki-client