Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
File:                     64cd6bdf-02f3-45c5-a4db-5133df93db84.roa (raw, json)
Hash identifier:          VP25qRVTyk/lj53PJ8LoHhhs68qYYYqz2ShzPLhNcWs=
Subject key identifier:   F7:D1:D1:B4:92:A4:60:DD:CA:3A:0F:B9:08:48:F1:34:49:30:E7:E7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C89FD42825B66475D569667A0A6434287749B6A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
Signing time:             Wed 22 Jul 2026 00:40:58 +0000
ROA not before:           Wed 22 Jul 2026 00:40:58 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29c4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:fd:42:82:5b:66:47:5d:56:96:67:a0:a6:43:42:87:74:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:40:58 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=3eba8c476a47b40f978539b8e402e9be496ff57d19db91f36ec81e97fe70f51f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:2c:3d:74:b5:e6:69:c6:bc:8b:fe:f3:ae:
                    bd:dd:bf:24:62:21:f7:46:4f:6c:02:84:60:8a:7b:
                    44:35:03:da:38:98:95:f1:b3:76:87:75:e0:ce:fe:
                    e2:e8:29:e3:f7:ef:ab:fc:0f:68:a9:0f:06:c3:73:
                    dc:8a:b6:dd:38:9b:ce:2f:58:9d:06:50:1d:e1:78:
                    5f:d4:1a:df:88:9d:fa:da:fa:ca:44:f5:4d:5f:c1:
                    8a:27:aa:11:84:6c:65:8e:17:3c:6b:0a:c6:5a:e7:
                    8d:a2:8c:47:53:37:e9:be:ed:81:5a:1c:01:5c:d5:
                    e7:70:e8:9d:05:93:95:8a:96:47:dd:b2:32:89:9a:
                    53:3c:75:30:ed:5b:bc:1f:f1:55:92:22:35:98:77:
                    8c:f9:da:8a:94:84:76:37:2b:5b:d0:2a:2b:90:20:
                    5f:a8:55:ca:57:c3:61:d9:17:07:ac:77:ff:dc:d7:
                    7e:08:e5:73:3b:d2:7b:87:d4:05:00:f0:96:0a:9d:
                    1e:44:b9:21:b7:a1:3e:4c:ad:3f:bd:9e:37:e5:c9:
                    b1:ea:8c:fb:ef:7e:85:a3:9f:52:23:12:85:c0:78:
                    24:d0:d6:f1:04:64:8a:b6:fe:65:67:f5:e1:75:53:
                    a7:8f:c8:b4:aa:46:a3:5c:b5:64:cd:cd:ef:8d:ec:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D1:D1:B4:92:A4:60:DD:CA:3A:0F:B9:08:48:F1:34:49:30:E7:E7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29c4::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:c2:54:b0:7a:99:22:6e:ec:e5:09:4d:20:dd:99:74:0f:2f:
         68:a8:93:63:65:b4:59:4f:78:75:de:d0:5b:db:fe:2f:eb:61:
         02:1a:24:d4:e6:7f:4e:2c:8e:07:e9:40:7b:aa:82:3d:08:16:
         67:06:55:04:38:de:b0:62:b4:46:eb:91:36:fe:73:09:06:03:
         16:79:e1:27:a2:13:98:31:06:b1:ea:14:30:6e:b1:37:21:1d:
         0c:d0:1d:f5:c0:ee:5e:83:87:44:8a:6f:5e:74:72:26:4d:de:
         99:7b:b1:31:fe:83:6e:d6:b6:bf:77:b4:84:3b:a0:2d:e7:4f:
         a4:f8:13:6b:cd:e5:ff:0c:0d:33:91:10:4a:97:32:8a:6f:26:
         48:a9:56:0b:29:c2:42:c7:fa:b6:73:71:a8:99:99:3e:99:dc:
         46:8e:4d:d1:c5:c2:a7:4b:81:4f:a9:38:c1:3d:94:e8:c2:ba:
         b0:a3:4a:0a:8c:4d:0a:b5:1e:16:c5:06:52:c3:cf:bc:62:f2:
         d6:a2:e8:ba:81:89:1f:5c:45:f8:d2:af:0a:74:21:bb:92:54:
         fd:57:73:75:e9:c1:a1:a6:12:5f:c5:e5:57:98:47:0a:a2:31:
         3c:94:46:99:61:d2:82:83:1c:e6:fd:09:3e:3d:b2:90:4c:47:
         c5:8a:08:45
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDIn9QoJbZkddVpZnoKZDQod0m2owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDA0MDU4WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZWJhOGM0NzZhNDdiNDBmOTc4NTM5YjhlNDAyZTliZTQ5
NmZmNTdkMTlkYjkxZjM2ZWM4MWU5N2ZlNzBmNTFmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/tSw9dLXmaca8i/7zrr3dvyRiIfdGT2wChGCKe0Q1A9o4
mJXxs3aHdeDO/uLoKeP376v8D2ipDwbDc9yKtt04m84vWJ0GUB3heF/UGt+Infra
+spE9U1fwYonqhGEbGWOFzxrCsZa542ijEdTN+m+7YFaHAFc1edw6J0Fk5WKlkfd
sjKJmlM8dTDtW7wf8VWSIjWYd4z52oqUhHY3K1vQKiuQIF+oVcpXw2HZFwesd//c
134I5XM70nuH1AUA8JYKnR5EuSG3oT5MrT+9njflybHqjPvvfoWjn1IjEoXAeCTQ
1vEEZIq2/mVn9eF1U6ePyLSqRqNctWTNze+N7J83AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU99HRtJKkYN3KOg+5CEjxNEkw5+cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY0Y2Q2YmRmLTAyZjMtNDVjNS1hNGRiLTUxMzNkZjkzZGI4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKcQwDQYJKoZIhvcNAQELBQADggEBAMDCVLB6mSJu7OUJTSDdmXQP
L2iok2NltFlPeHXe0Fvb/i/rYQIaJNTmf04sjgfpQHuqgj0IFmcGVQQ43rBitEbr
kTb+cwkGAxZ54SeiE5gxBrHqFDBusTchHQzQHfXA7l6Dh0SKb150ciZN3pl7sTH+
g27Wtr93tIQ7oC3nT6T4E2vN5f8MDTOREEqXMopvJkipVgspwkLH+rZzcaiZmT6Z
3EaOTdHFwqdLgU+pOME9lOjCurCjSgqMTQq1HhbFBlLDz7xi8tai6LqBiR9cRfjS
rwp0IbuSVP1Xc3XpwaGmEl/F5VeYRwqiMTyURplh0oKDHOb9CT49spBMR8WKCEU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:28 2026 by rpki-client