Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa
File:                     70d79f44-5af2-482e-b7e4-fc0a744624b2.roa (raw, json)
Hash identifier:          qzEGTZvleQrmAodLyqzMWVZD6z8KFFFPhAmOtBXS/wo=
Subject key identifier:   23:2E:34:90:EF:75:71:4F:0F:06:40:20:80:57:A4:A4:41:42:21:FE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A8FB48843DF4B7ACC4C54FA6EDE8D93F3E393C4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa
Signing time:             Thu 23 Jul 2026 10:30:08 +0000
ROA not before:           Thu 23 Jul 2026 10:30:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8f:b4:88:43:df:4b:7a:cc:4c:54:fa:6e:de:8d:93:f3:e3:93:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 10:30:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=c4a2765ee3fad2da0b68a15704fa5027485c8b0cf21f09187d61e2d8d4ae0bf4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:e6:76:d6:2a:bb:df:c6:0a:44:65:16:a5:
                    3f:0a:ef:0e:49:a2:99:b6:d7:fd:c8:95:8f:11:89:
                    60:cf:9c:58:70:56:e3:a2:b9:a0:1d:64:73:23:d9:
                    63:40:76:f6:fa:03:dd:3d:a4:6f:12:01:2a:54:e3:
                    50:87:61:f4:38:fa:4f:00:34:f1:85:b8:eb:53:7b:
                    fe:8b:b0:5e:97:e8:cd:04:5d:ea:06:e8:4d:5c:3c:
                    d4:9c:4f:81:a5:a5:c1:a7:bc:57:f6:39:89:54:ac:
                    d3:f8:ee:a8:9d:fa:b5:b3:b2:ee:16:c4:59:5d:e8:
                    38:cd:33:46:82:a5:8b:bd:51:dd:f8:a9:35:f6:69:
                    b4:6e:de:9a:79:ff:c7:4f:ba:87:c8:2a:a9:53:be:
                    c8:e4:68:a2:56:9b:5a:5a:9e:a4:d3:64:51:52:aa:
                    ca:80:90:f9:49:a7:9f:1d:57:da:1b:f5:20:55:dd:
                    18:e9:4b:41:7a:9f:3d:5e:19:03:a8:e2:b5:96:04:
                    f5:60:d0:e5:90:4c:28:a5:2c:fa:30:84:52:b9:61:
                    4c:07:6e:63:f9:39:55:67:d0:87:8f:88:5d:ed:2d:
                    da:05:c4:93:e9:50:79:8b:50:d3:2c:86:9f:ff:0c:
                    f2:e5:22:62:35:33:c6:73:67:1c:5e:f0:d7:49:dc:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2E:34:90:EF:75:71:4F:0F:06:40:20:80:57:A4:A4:41:42:21:FE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2130::/45

    Signature Algorithm: sha256WithRSAEncryption
         94:96:25:a8:c9:00:5c:78:7e:f9:af:4a:39:14:99:d9:c2:90:
         2c:85:1e:0b:e0:76:85:ef:bd:e0:ba:c8:77:41:41:89:31:84:
         f2:02:17:f6:fb:bb:5b:aa:28:e1:28:36:39:db:79:64:57:01:
         48:0f:ac:fa:6f:30:c7:65:c5:ef:76:40:92:e3:f7:73:86:25:
         db:98:c3:d2:8c:1a:ac:6c:a7:d8:ba:8f:36:9c:c9:3a:1a:a6:
         35:b0:c9:16:aa:b7:f6:2c:25:f9:2c:65:77:22:22:3e:3e:45:
         f0:44:9b:ff:00:44:de:c1:dc:ed:d2:8d:5d:7d:43:b9:25:a3:
         6c:9b:9f:91:7f:df:0a:2b:69:68:26:bf:89:6b:4a:d9:1b:9d:
         76:8b:eb:bb:04:13:0f:ed:b8:59:60:4c:aa:5c:89:97:2b:f1:
         b0:4f:ee:4c:1c:49:1d:94:f3:5d:bb:b8:60:62:73:49:82:ea:
         bd:48:b9:2d:7a:4d:c7:8f:0d:0c:78:7a:0b:5b:8f:d1:2d:56:
         72:97:be:e8:7d:01:66:3f:86:2a:f5:c1:57:22:f9:60:d8:21:
         c8:46:f6:c2:fd:dc:bf:3a:6c:f9:27:ce:d6:22:b6:f3:d2:2f:
         31:c7:26:0f:da:db:54:68:ce:23:45:45:51:a3:6a:ef:77:2f:
         9f:a0:2f:f4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKo+0iEPfS3rMTFT6bt6Nk/Pjk8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTAzMDA4WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNGEyNzY1ZWUzZmFkMmRhMGI2OGExNTcwNGZhNTAyNzQ4
NWM4YjBjZjIxZjA5MTg3ZDYxZTJkOGQ0YWUwYmY0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJz+Z21iq738YKRGUWpT8K7w5Jopm21/3IlY8RiWDPnFhw
VuOiuaAdZHMj2WNAdvb6A909pG8SASpU41CHYfQ4+k8ANPGFuOtTe/6LsF6X6M0E
XeoG6E1cPNScT4GlpcGnvFf2OYlUrNP47qid+rWzsu4WxFld6DjNM0aCpYu9Ud34
qTX2abRu3pp5/8dPuofIKqlTvsjkaKJWm1panqTTZFFSqsqAkPlJp58dV9ob9SBV
3RjpS0F6nz1eGQOo4rWWBPVg0OWQTCilLPowhFK5YUwHbmP5OVVn0IePiF3tLdoF
xJPpUHmLUNMshp//DPLlImI1M8ZzZxxe8NdJ3FIrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUIy40kO91cU8PBkAggFekpEFCIf4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwZDc5ZjQ0LTVhZjItNDgyZS1iN2U0LWZjMGE3NDQ2MjRiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAITAwDQYJKoZIhvcNAQELBQADggEBAJSWJajJAFx4fvmvSjkUmdnC
kCyFHgvgdoXvveC6yHdBQYkxhPICF/b7u1uqKOEoNjnbeWRXAUgPrPpvMMdlxe92
QJLj93OGJduYw9KMGqxsp9i6jzacyToapjWwyRaqt/YsJfksZXciIj4+RfBEm/8A
RN7B3O3SjV19Q7klo2ybn5F/3woraWgmv4lrStkbnXaL67sEEw/tuFlgTKpciZcr
8bBP7kwcSR2U8127uGBic0mC6r1IuS16TcePDQx4egtbj9EtVnKXvuh9AWY/hir1
wVci+WDYIchG9sL93L86bPknztYitvPSLzHHJg/a21RoziNFRVGjau93L5+gL/Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:17 2026 by rpki-client