Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa
File:                     752d61d4-93db-4ae1-8968-c1844486cc6a.roa (raw, json)
Hash identifier:          JL6IJ3OVwegQM9Rkx9Z2RHvv15WOBBk1nVBPgJmge8s=
Subject key identifier:   66:D7:1A:CA:5E:4A:9E:01:74:19:44:16:50:F7:ED:CD:5A:81:EB:02
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       14EB4E41BF0861BF3FC6CB0802A76C40F558F618
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa
Signing time:             Wed 22 Jul 2026 03:20:55 +0000
ROA not before:           Wed 22 Jul 2026 03:20:55 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e38::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:eb:4e:41:bf:08:61:bf:3f:c6:cb:08:02:a7:6c:40:f5:58:f6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 03:20:55 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=85e169c923a65bb24395c42753c20d12909c8c32c58e059e48ebba070f31fe60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:74:37:e6:65:8f:23:16:44:70:ff:85:14:
                    98:35:54:aa:73:95:ff:12:ab:fd:c9:7f:15:99:e9:
                    e3:0f:49:e0:04:32:df:c2:65:fe:db:50:21:70:b9:
                    d7:e0:d2:b8:7a:1f:c9:1e:bf:f8:58:bc:1e:c3:7e:
                    88:26:31:bc:8d:3f:5a:9d:5e:27:8b:cf:fe:6a:4d:
                    89:5d:f1:ff:1e:1f:ab:6f:23:53:45:cf:2a:db:03:
                    56:60:55:41:0a:4b:04:7e:46:a3:d9:c9:37:66:0d:
                    e6:97:68:6b:25:74:5f:a5:78:97:07:52:bf:8c:68:
                    42:0d:71:32:17:62:14:82:7b:fe:d1:10:dc:9c:fe:
                    cc:81:3a:5b:b0:3b:94:d5:fe:fc:f6:5b:50:51:4f:
                    c8:31:83:51:76:0c:e6:68:00:75:a7:15:a7:8b:2b:
                    1f:22:f5:7a:0b:91:ae:4b:54:2a:b8:b4:2e:2f:22:
                    f6:bd:12:49:5a:79:bb:78:40:f5:b1:9f:7e:41:0e:
                    b7:c4:59:c6:58:fd:95:c0:b3:f3:e9:3e:4e:f3:d4:
                    a7:cc:42:24:2c:53:3d:d7:b6:c2:cd:9a:b2:6c:91:
                    4f:d0:ad:d8:43:99:e9:26:8c:25:e8:e2:1c:f0:2f:
                    6b:39:8f:b0:2d:fa:26:39:b3:00:3c:b5:f8:26:9b:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D7:1A:CA:5E:4A:9E:01:74:19:44:16:50:F7:ED:CD:5A:81:EB:02
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e38::/47

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:71:2c:c1:62:06:63:c6:14:7f:17:a6:b4:02:00:82:4c:
         bb:1b:6b:a5:f9:8b:c5:34:23:50:08:f2:b7:e6:2c:37:51:34:
         29:22:8a:ea:7f:75:e8:23:f0:88:88:f2:3c:8a:62:96:7f:7f:
         72:9f:8e:03:6d:fd:11:73:a4:ff:7c:54:0b:64:b2:97:e1:5d:
         b8:55:83:08:f5:33:ec:ee:92:e5:0d:a1:28:2c:b8:fb:81:57:
         0a:eb:08:5a:bf:e9:d1:ab:05:a9:18:bf:3d:a2:7c:63:7f:df:
         98:21:de:6e:1c:6a:96:da:7d:c2:96:8b:d1:23:c6:38:13:4a:
         a3:9c:9f:cc:b7:2c:9b:c6:a6:b8:1f:c7:5f:84:da:57:ce:29:
         07:8c:4d:b2:f7:89:f1:3a:79:af:c9:2e:c8:c0:19:4a:5d:70:
         00:07:ec:09:9c:26:50:8e:8d:bd:07:e2:51:40:39:2b:b1:8a:
         ae:66:32:16:2f:ed:28:37:5f:bc:15:9b:9e:c3:8b:65:1b:bc:
         bd:2f:b3:46:28:17:51:a4:79:14:6e:bf:52:e1:a8:bd:e9:bc:
         40:4e:35:7f:8a:7b:7b:64:48:fe:de:6e:ab:7d:78:af:1f:b2:
         13:ed:e9:ad:41:22:0a:4d:1d:8d:60:8e:50:87:d8:71:ac:f5:
         21:da:3d:d6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFOtOQb8IYb8/xssIAqdsQPVY9hgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMyMDU1WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWUxNjljOTIzYTY1YmIyNDM5NWM0Mjc1M2MyMGQxMjkw
OWM4YzMyYzU4ZTA1OWU0OGViYmEwNzBmMzFmZTYwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdGXQ35mWPIxZEcP+FFJg1VKpzlf8Sq/3JfxWZ6eMPSeAE
Mt/CZf7bUCFwudfg0rh6H8kev/hYvB7DfogmMbyNP1qdXieLz/5qTYld8f8eH6tv
I1NFzyrbA1ZgVUEKSwR+RqPZyTdmDeaXaGsldF+leJcHUr+MaEINcTIXYhSCe/7R
ENyc/syBOluwO5TV/vz2W1BRT8gxg1F2DOZoAHWnFaeLKx8i9XoLka5LVCq4tC4v
Iva9Eklaebt4QPWxn35BDrfEWcZY/ZXAs/PpPk7z1KfMQiQsUz3XtsLNmrJskU/Q
rdhDmekmjCXo4hzwL2s5j7At+iY5swA8tfgmm7MdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZtcayl5KngF0GUQWUPftzVqB6wIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc1MmQ2MWQ0LTkzZGItNGFlMS04OTY4LWMxODQ0NDg2Y2M2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALjgwDQYJKoZIhvcNAQELBQADggEBAKeTcSzBYgZjxhR/F6a0AgCC
TLsba6X5i8U0I1AI8rfmLDdRNCkiiup/degj8IiI8jyKYpZ/f3KfjgNt/RFzpP98
VAtkspfhXbhVgwj1M+zukuUNoSgsuPuBVwrrCFq/6dGrBakYvz2ifGN/35gh3m4c
apbafcKWi9EjxjgTSqOcn8y3LJvGprgfx1+E2lfOKQeMTbL3ifE6ea/JLsjAGUpd
cAAH7AmcJlCOjb0H4lFAOSuxiq5mMhYv7Sg3X7wVm57Di2UbvL0vs0YoF1GkeRRu
v1LhqL3pvEBONX+Ke3tkSP7ebqt9eK8fshPt6a1BIgpNHY1gjlCH2HGs9SHaPdY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:30 2026 by rpki-client