Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b6e36b-3ba4-4994-8f6e-466313d4bafc.roa
File:                     77b6e36b-3ba4-4994-8f6e-466313d4bafc.roa (raw, json)
Hash identifier:          29TtVs/WfdKA8HZv4YmBSHQsw5KxEkaK/eV2gtHjw3g=
Subject key identifier:   EC:5C:2A:CF:A8:0A:63:44:65:21:97:C1:0F:61:47:4A:3C:B2:5C:C2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       615F4A95A1B688F9E299A82806ABF14390647AEC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b6e36b-3ba4-4994-8f6e-466313d4bafc.roa
Signing time:             Thu 23 Jul 2026 11:12:00 +0000
ROA not before:           Thu 23 Jul 2026 11:12:00 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5f:4a:95:a1:b6:88:f9:e2:99:a8:28:06:ab:f1:43:90:64:7a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 11:12:00 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=2d7c32881051eca6425d28e76c9cc4b89b2710a7d1e0ed3d0d501e7d29470677, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:d9:27:e6:2f:76:0e:70:b2:c0:d8:0e:a0:
                    ef:22:89:0b:6c:29:18:d2:4f:f9:78:5d:bd:8d:27:
                    32:92:8c:82:24:23:19:71:99:5c:be:84:b4:0c:24:
                    ec:e2:60:47:c5:55:d7:4b:f3:fa:41:2d:64:1f:ad:
                    9d:9f:f9:d0:ff:e8:48:17:80:37:5d:92:3e:ce:7f:
                    47:53:0a:ac:9e:10:4b:47:68:67:ce:b1:8f:d1:cb:
                    57:75:f5:02:2f:8e:18:61:5c:39:1c:38:3a:42:7d:
                    61:82:b9:54:1b:46:ee:ba:6c:ea:7e:51:e7:65:8d:
                    b1:d4:34:96:d3:91:f3:a1:9e:bb:b7:7a:91:11:30:
                    e3:79:a7:9f:61:0c:87:21:12:b2:58:66:36:f7:4f:
                    cd:1d:57:7e:67:4c:8a:e9:f1:a1:62:b3:b5:a0:5f:
                    1f:91:5a:2c:b4:58:77:81:68:d0:21:30:ef:d6:1a:
                    53:e1:47:d5:fe:35:ec:ae:67:d5:75:e8:e4:eb:ff:
                    d4:80:a0:80:05:d5:da:80:bd:54:95:67:d2:dd:f9:
                    fb:74:44:06:a3:e7:33:d3:0b:aa:15:c8:17:9a:ef:
                    78:5c:7d:b6:d0:46:87:69:71:f8:1d:65:90:ce:26:
                    6a:ba:bd:73:40:4f:ff:48:42:a1:0a:c1:ce:e3:4e:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:2A:CF:A8:0A:63:44:65:21:97:C1:0F:61:47:4A:3C:B2:5C:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b6e36b-3ba4-4994-8f6e-466313d4bafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f00::/42

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:47:4c:fc:6f:6a:6a:7f:8d:66:5b:b8:39:aa:1e:41:61:
         21:ad:33:ac:04:1d:1f:8e:3a:67:65:a1:9b:fb:38:d5:1a:da:
         7b:de:20:8c:d5:02:db:b2:1b:8a:0a:f2:9e:26:3c:9c:3c:aa:
         46:6c:04:5a:20:d2:47:a2:63:33:1e:a6:fd:08:cf:75:1e:a8:
         1b:29:6e:1f:b6:40:df:f5:f5:fc:50:40:55:58:2a:f1:28:47:
         d5:8f:42:df:4d:c9:28:5f:6a:e7:11:b4:59:c4:ab:cf:a0:73:
         fc:9d:3d:54:9a:a6:87:4b:84:c6:17:72:e7:01:be:fe:8e:82:
         eb:8a:65:00:62:25:da:37:40:36:97:79:38:19:3f:cc:1f:fa:
         e1:b0:cd:3a:78:1a:d1:52:8b:fc:22:a8:57:38:6a:ab:49:2a:
         03:53:91:eb:6e:b7:87:d1:f5:1f:2e:84:b6:98:e0:73:f5:df:
         b7:f4:3b:c2:8c:82:74:55:ca:df:61:7c:13:99:58:82:3e:b9:
         c4:f4:ae:62:0a:99:15:da:cd:45:d7:8e:76:6d:99:30:c0:db:
         72:38:16:90:dd:28:da:2c:3e:4d:62:2d:97:42:bb:c2:40:e7:
         1b:cf:28:2c:27:1c:bc:29:d0:c7:c1:f1:05:f8:e1:7a:b4:9c:
         f0:92:2f:51
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYV9KlaG2iPnimagoBqvxQ5BkeuwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTExMjAwWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZDdjMzI4ODEwNTFlY2E2NDI1ZDI4ZTc2YzljYzRiODli
MjcxMGE3ZDFlMGVkM2QwZDUwMWU3ZDI5NDcwNjc3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdgtkn5i92DnCywNgOoO8iiQtsKRjST/l4Xb2NJzKSjIIk
IxlxmVy+hLQMJOziYEfFVddL8/pBLWQfrZ2f+dD/6EgXgDddkj7Of0dTCqyeEEtH
aGfOsY/Ry1d19QIvjhhhXDkcODpCfWGCuVQbRu66bOp+UedljbHUNJbTkfOhnru3
epERMON5p59hDIchErJYZjb3T80dV35nTIrp8aFis7WgXx+RWiy0WHeBaNAhMO/W
GlPhR9X+NeyuZ9V16OTr/9SAoIAF1dqAvVSVZ9Ld+ft0RAaj5zPTC6oVyBea73hc
fbbQRodpcfgdZZDOJmq6vXNAT/9IQqEKwc7jTnGZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU7Fwqz6gKY0RlIZfBD2FHSjyyXMIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc3YjZlMzZiLTNiYTQtNDk5NC04ZjZlLTQ2NjMxM2Q0YmFmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAJAAPwAwDQYJKoZIhvcNAQELBQADggEBALsLR0z8b2pqf41mW7g5qh5B
YSGtM6wEHR+OOmdloZv7ONUa2nveIIzVAtuyG4oK8p4mPJw8qkZsBFog0keiYzMe
pv0Iz3UeqBspbh+2QN/19fxQQFVYKvEoR9WPQt9NyShfaucRtFnEq8+gc/ydPVSa
podLhMYXcucBvv6OguuKZQBiJdo3QDaXeTgZP8wf+uGwzTp4GtFSi/wiqFc4aqtJ
KgNTketut4fR9R8uhLaY4HP137f0O8KMgnRVyt9hfBOZWII+ucT0rmIKmRXazUXX
jnZtmTDA23I4FpDdKNosPk1iLZdCu8JA5xvPKCwnHLwp0MfB8QX44Xq0nPCSL1E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:11 2026 by rpki-client