Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7031cba3-ea29-4a1f-8495-88d0d4c7c9d9.roa
File:                     7031cba3-ea29-4a1f-8495-88d0d4c7c9d9.roa (raw, json)
Hash identifier:          kqLYxGqdwLJvYxNfP32Aeuxuuc9FUYfY83kE4HZDLME=
Subject key identifier:   17:DD:ED:91:C1:2F:46:C9:36:D9:44:7D:61:A1:01:EB:51:23:14:31
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       755C53C6A58085E6460F825719ED0D2BB267111A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7031cba3-ea29-4a1f-8495-88d0d4c7c9d9.roa
Signing time:             Thu 23 Jul 2026 09:41:32 +0000
ROA not before:           Thu 23 Jul 2026 09:41:32 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33cc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5c:53:c6:a5:80:85:e6:46:0f:82:57:19:ed:0d:2b:b2:67:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 09:41:32 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c3fef6389045a7150d363f23307ca479f8a9872946eeb3fa0119870a58f334c7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:27:5d:8a:57:fd:6c:44:b3:10:df:15:36:
                    95:d5:9b:e0:58:2f:a6:8e:e0:97:f8:c1:20:a6:9f:
                    9b:8b:e0:64:42:bc:29:94:af:94:bc:3d:81:e8:e9:
                    c1:bb:a1:cc:c3:43:8a:c0:25:c3:cf:52:58:b4:04:
                    f1:a1:81:88:cd:f1:91:ad:ce:dd:30:36:75:d0:2b:
                    fe:c7:47:a6:4c:78:33:fe:77:69:96:c6:13:17:95:
                    34:68:c2:db:47:fb:ba:6d:b4:fc:a6:39:d4:24:99:
                    34:50:74:8c:9e:15:88:9e:1f:4f:c1:eb:f7:ea:a1:
                    f4:a9:14:9e:df:ab:c2:d8:d5:11:de:20:5b:2d:66:
                    9c:05:a0:ea:98:f8:44:3b:65:fc:e7:3f:e0:bd:f3:
                    af:32:6d:36:9e:ec:e0:ca:26:41:46:3f:ea:0f:cf:
                    96:74:2d:bd:f0:d1:c3:59:32:5e:c9:5e:9f:21:a3:
                    df:0a:80:c3:78:21:f8:c0:e6:03:de:66:51:48:ac:
                    28:5e:c6:99:aa:2a:8d:c1:a6:72:bc:4f:d2:22:58:
                    02:62:40:1e:94:91:d8:5b:23:9c:75:b8:e1:1a:75:
                    72:e3:01:4a:7f:d6:2a:4b:ea:c5:40:d4:35:dc:8f:
                    c1:a9:17:59:48:d8:fd:dc:52:f9:c4:5c:14:fd:1a:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:ED:91:C1:2F:46:C9:36:D9:44:7D:61:A1:01:EB:51:23:14:31
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7031cba3-ea29-4a1f-8495-88d0d4c7c9d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33cc::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:b0:e2:9f:9d:c1:9d:8c:b4:cc:fd:08:4f:13:56:45:3c:78:
         80:41:86:7b:e0:b8:60:f2:c2:79:81:e9:38:7d:4f:a0:02:68:
         18:cb:53:4b:d1:50:64:1d:15:2e:81:c2:c6:82:ef:e7:d2:a4:
         3c:8b:22:f9:a5:b4:2b:0a:59:e1:a2:b3:c8:d4:4d:5e:33:4b:
         10:3f:dd:0e:e3:96:27:30:55:d9:de:a0:09:a5:ae:ef:8b:31:
         92:f5:c1:74:32:5a:0d:d9:14:4c:f9:42:ad:c9:b3:12:2d:b6:
         f8:10:d9:72:14:f0:1c:ce:ab:2c:44:a7:f9:e2:19:24:ba:c9:
         d5:03:f0:c8:33:62:e0:e3:03:22:30:c3:40:d0:86:d1:b7:4e:
         87:89:2a:f3:51:3e:6f:75:a3:45:67:c9:15:19:c9:3f:fb:f8:
         89:e9:f3:f4:89:54:71:54:a0:56:76:78:fd:17:51:f8:0d:60:
         10:fd:4e:79:06:98:3a:bf:6c:80:07:7d:af:a1:67:98:21:04:
         bc:ca:30:19:d4:44:e6:89:44:df:31:9d:a2:ea:15:40:16:1f:
         7d:2d:64:30:fc:bd:3c:9e:cd:c2:e4:bd:10:59:ac:35:e2:ff:
         3d:20:3d:66:41:16:06:2f:b2:d3:18:78:9a:f1:2c:8b:cc:d0:
         38:b3:1b:17
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdVxTxqWAheZGD4JXGe0NK7JnERowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDk0MTMyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjM2ZlZjYzODkwNDVhNzE1MGQzNjNmMjMzMDdjYTQ3OWY4
YTk4NzI5NDZlZWIzZmEwMTE5ODcwYTU4ZjMzNGM3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQpSddilf9bESzEN8VNpXVm+BYL6aO4Jf4wSCmn5uL4GRC
vCmUr5S8PYHo6cG7oczDQ4rAJcPPUli0BPGhgYjN8ZGtzt0wNnXQK/7HR6ZMeDP+
d2mWxhMXlTRowttH+7pttPymOdQkmTRQdIyeFYieH0/B6/fqofSpFJ7fq8LY1RHe
IFstZpwFoOqY+EQ7ZfznP+C9868ybTae7ODKJkFGP+oPz5Z0Lb3w0cNZMl7JXp8h
o98KgMN4IfjA5gPeZlFIrChexpmqKo3BpnK8T9IiWAJiQB6UkdhbI5x1uOEadXLj
AUp/1ipL6sVA1DXcj8GpF1lI2P3cUvnEXBT9GintAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUF93tkcEvRsk22UR9YaEB61EjFDEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwMzFjYmEzLWVhMjktNGExZi04NDk1LTg4ZDBkNGM3YzlkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAM8wwDQYJKoZIhvcNAQELBQADggEBALSw4p+dwZ2MtMz9CE8TVkU8
eIBBhnvguGDywnmB6Th9T6ACaBjLU0vRUGQdFS6BwsaC7+fSpDyLIvmltCsKWeGi
s8jUTV4zSxA/3Q7jlicwVdneoAmlru+LMZL1wXQyWg3ZFEz5Qq3JsxIttvgQ2XIU
8BzOqyxEp/niGSS6ydUD8MgzYuDjAyIww0DQhtG3ToeJKvNRPm91o0VnyRUZyT/7
+Inp8/SJVHFUoFZ2eP0XUfgNYBD9TnkGmDq/bIAHfa+hZ5ghBLzKMBnUROaJRN8x
naLqFUAWH30tZDD8vTyezcLkvRBZrDXi/z0gPWZBFgYvstMYeJrxLIvM0DizGxc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:53 2026 by rpki-client