Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/731b9d52-5d78-4d98-a0a3-2641d7ed108a.roa
File:                     731b9d52-5d78-4d98-a0a3-2641d7ed108a.roa (raw, json)
Hash identifier:          4lkMA/ZxcwiAej2y1/Q9Qew+qTRHlcuhN0mQ+2gF8fs=
Subject key identifier:   70:57:A6:3D:82:99:19:9F:6C:31:7F:11:64:87:3D:D6:FA:DD:BF:92
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0E9BA08096E9A27A1CB827C94565F8B65903364B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/731b9d52-5d78-4d98-a0a3-2641d7ed108a.roa
Signing time:             Thu 23 Jul 2026 01:50:34 +0000
ROA not before:           Thu 23 Jul 2026 01:50:34 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cb4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9b:a0:80:96:e9:a2:7a:1c:b8:27:c9:45:65:f8:b6:59:03:36:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:50:34 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0e5e927580be2f892748881f88420b9fdd4fc738778119277009c96df6afc037, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:06:e5:05:ad:a0:b6:fa:4e:d1:cb:00:41:
                    8d:f0:fc:72:e0:09:e5:a1:7a:28:87:71:29:fa:84:
                    91:1f:14:ab:40:f7:05:2e:c1:b4:cf:bc:fa:5a:e6:
                    b3:fb:f0:0e:d0:0d:f8:98:68:5b:e9:18:1e:c5:2a:
                    af:6d:a5:d4:91:76:0c:c2:c4:d5:e2:c1:0f:80:01:
                    19:3e:87:a7:98:02:1f:d9:82:67:47:ea:fb:ee:bc:
                    32:45:0b:15:74:84:d6:45:21:f4:75:6b:b6:c1:3a:
                    59:0d:04:89:b0:e1:1a:99:9f:b6:d0:b8:50:8a:f2:
                    91:55:34:33:06:4e:0e:ff:2d:3c:99:da:4e:20:7b:
                    b2:54:58:3a:9d:1e:ff:20:5b:88:ec:f7:fe:aa:8b:
                    4d:9d:2d:68:df:47:6a:7e:a9:82:b2:db:6a:77:6b:
                    7b:41:16:19:7c:81:82:79:e3:e5:7a:3b:62:1b:00:
                    cc:cb:60:87:bb:f0:88:d0:52:fd:33:d4:5c:e8:57:
                    ac:fa:28:2d:e8:96:90:36:e8:c7:b9:6f:98:5a:fb:
                    c2:56:28:b5:c1:5e:83:4f:02:39:27:38:62:a1:57:
                    6d:be:86:b9:ac:90:89:0c:f6:ed:15:1d:9e:c1:d1:
                    b8:cb:b4:b2:70:1b:ed:2b:2b:6a:7b:21:e4:f9:56:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:57:A6:3D:82:99:19:9F:6C:31:7F:11:64:87:3D:D6:FA:DD:BF:92
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/731b9d52-5d78-4d98-a0a3-2641d7ed108a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cb4::/46

    Signature Algorithm: sha256WithRSAEncryption
         9d:1f:19:12:7e:09:c6:a6:d4:ed:5d:e7:ed:8c:f5:2f:4b:7f:
         03:bb:68:45:91:b3:ae:f0:fc:1e:ca:02:ba:ef:82:64:c9:bc:
         a7:a7:f3:b7:ef:a7:8b:32:fe:b2:ff:26:4e:ef:56:42:8e:d7:
         4e:aa:e2:15:f5:6c:93:79:a8:e7:c8:52:c5:01:00:18:27:d0:
         8b:b2:fe:ae:b6:2e:08:71:17:53:1b:05:e0:49:e0:b8:75:03:
         dd:55:48:b1:3f:33:09:15:06:fc:69:39:6c:33:a2:af:d7:4f:
         19:85:15:61:48:f3:ab:86:c7:ae:c2:8a:c0:6a:83:62:38:f7:
         26:ad:09:28:59:c8:0e:18:1a:77:0d:8a:ec:45:b2:d7:05:45:
         d3:ce:a1:de:4d:d9:57:d2:61:0e:83:09:a7:89:a7:00:c4:88:
         fd:2b:74:b2:94:33:54:e5:4f:65:93:17:4d:57:d9:69:c5:26:
         bc:4a:5a:13:10:5f:35:33:32:59:dd:53:54:b1:c1:55:92:79:
         5d:49:32:97:83:ee:df:59:09:f0:a0:9b:01:41:69:bf:18:e5:
         8a:14:6c:be:8b:dc:5e:ea:0e:43:44:b0:72:5c:59:be:75:6b:
         44:8d:bf:ed:38:44:4f:df:dd:b5:0c:50:60:24:be:6c:12:e1:
         7c:d6:62:3e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDpuggJbponocuCfJRWX4tlkDNkswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDE1MDM0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZTVlOTI3NTgwYmUyZjg5Mjc0ODg4MWY4ODQyMGI5ZmRk
NGZjNzM4Nzc4MTE5Mjc3MDA5Yzk2ZGY2YWZjMDM3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChLgblBa2gtvpO0csAQY3w/HLgCeWheiiHcSn6hJEfFKtA
9wUuwbTPvPpa5rP78A7QDfiYaFvpGB7FKq9tpdSRdgzCxNXiwQ+AARk+h6eYAh/Z
gmdH6vvuvDJFCxV0hNZFIfR1a7bBOlkNBImw4RqZn7bQuFCK8pFVNDMGTg7/LTyZ
2k4ge7JUWDqdHv8gW4js9/6qi02dLWjfR2p+qYKy22p3a3tBFhl8gYJ54+V6O2Ib
AMzLYIe78IjQUv0z1FzoV6z6KC3olpA26Me5b5ha+8JWKLXBXoNPAjknOGKhV22+
hrmskIkM9u0VHZ7B0bjLtLJwG+0rK2p7IeT5VuKfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUcFemPYKZGZ9sMX8RZIc91vrdv5IwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzczMWI5ZDUyLTVkNzgtNGQ5OC1hMGEzLTI2NDFkN2VkMTA4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALLQwDQYJKoZIhvcNAQELBQADggEBAJ0fGRJ+Ccam1O1d5+2M9S9L
fwO7aEWRs67w/B7KArrvgmTJvKen87fvp4sy/rL/Jk7vVkKO106q4hX1bJN5qOfI
UsUBABgn0Iuy/q62LghxF1MbBeBJ4Lh1A91VSLE/MwkVBvxpOWwzoq/XTxmFFWFI
86uGx67CisBqg2I49yatCShZyA4YGncNiuxFstcFRdPOod5N2VfSYQ6DCaeJpwDE
iP0rdLKUM1TlT2WTF01X2WnFJrxKWhMQXzUzMlndU1SxwVWSeV1JMpeD7t9ZCfCg
mwFBab8Y5YoUbL6L3F7qDkNEsHJcWb51a0SNv+04RE/f3bUMUGAkvmwS4XzWYj4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:23 2026 by rpki-client