Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7800869c-d6c6-46af-b528-3e2abc84b706.roa
File:                     7800869c-d6c6-46af-b528-3e2abc84b706.roa (raw, json)
Hash identifier:          KDD+ayzNlacdhWqrWRrV5G3a/k0AC2/uZFiZgkIvtPo=
Subject key identifier:   D1:62:33:88:C0:D4:3E:A3:A0:7D:7C:8D:97:5C:8A:2E:CC:35:1C:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01ECC16DF8B47C60F5C6790F17582EA2F01DCA36
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7800869c-d6c6-46af-b528-3e2abc84b706.roa
Signing time:             Thu 23 Jul 2026 02:11:21 +0000
ROA not before:           Thu 23 Jul 2026 02:11:21 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37c8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:c1:6d:f8:b4:7c:60:f5:c6:79:0f:17:58:2e:a2:f0:1d:ca:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:11:21 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ffeaf3a22286b8b38cc18ec43f377a741ff65e30722a402566f44ad1cc0d6d8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:5d:2d:fe:28:18:c7:a9:36:74:27:41:03:
                    a0:d8:10:79:d3:4e:d7:4e:3c:20:dd:99:99:c2:63:
                    fe:dc:1b:87:5c:0d:cf:03:ce:88:dc:9a:22:a8:15:
                    36:85:8a:32:0d:36:f0:1c:bb:fb:78:4a:15:d0:bd:
                    e7:2c:f5:12:1d:d2:1c:06:f0:9e:84:7d:e8:e0:78:
                    b7:40:44:98:b3:4c:71:13:6c:5e:e8:45:f6:5d:13:
                    d8:4a:12:88:38:30:03:37:34:d0:f8:31:73:f4:08:
                    36:43:69:6b:c3:6b:91:ee:ae:e2:d1:b7:22:51:61:
                    c0:7b:d8:2c:c2:7c:91:2d:c2:ff:25:16:91:6b:70:
                    1b:6a:79:af:93:06:b7:c9:9d:77:41:cf:78:5b:c2:
                    46:75:48:8c:f1:29:61:15:06:e6:c2:07:40:b1:a7:
                    d8:66:d9:9d:8a:4d:77:00:a1:bb:15:b1:c3:78:36:
                    94:05:0a:26:29:99:96:29:91:97:49:c8:bf:18:42:
                    b9:f7:31:b9:87:84:5f:44:1d:2b:1c:11:ef:40:2e:
                    91:e9:9c:b3:83:98:19:bb:d1:ad:db:15:d8:8d:b7:
                    67:fa:9c:a3:c0:af:c7:6a:84:ba:3f:c2:ca:c7:c9:
                    dc:bb:9b:48:3c:58:ce:18:cf:60:f6:21:9d:29:3e:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:33:88:C0:D4:3E:A3:A0:7D:7C:8D:97:5C:8A:2E:CC:35:1C:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7800869c-d6c6-46af-b528-3e2abc84b706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37c8::/46

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:c6:10:58:65:f4:59:8f:8d:8f:b9:d6:35:72:d4:28:fc:
         4f:b4:09:2c:c0:d1:21:2a:a8:06:31:e9:32:bf:a2:de:fd:9a:
         e3:d1:60:54:7c:96:bf:91:78:ec:f2:ed:af:ff:29:28:ba:75:
         15:88:8f:e1:97:71:4e:61:c6:24:ba:65:e3:bb:d6:e6:da:c3:
         e0:96:db:7e:a5:b8:ea:d5:38:d4:8d:ee:c9:98:6a:a8:0f:50:
         e3:fd:73:aa:85:2c:99:c6:09:e7:37:95:25:1a:ad:07:c0:af:
         3d:4a:e6:e3:10:62:f9:a1:b8:96:15:9a:38:cb:55:8a:ea:9b:
         a2:ad:37:54:1c:0d:fa:f9:8b:c9:a8:ba:6b:b1:38:37:f6:4e:
         7d:8b:c4:46:78:f3:4b:6e:43:52:95:fd:b5:ae:d3:45:68:8d:
         17:f0:cf:ba:52:72:40:ab:6a:f9:60:30:b7:2d:86:58:79:6a:
         53:23:52:96:a6:6d:ce:aa:8a:e0:a6:16:9f:37:22:fa:99:78:
         ed:33:ce:d1:30:3a:f7:b8:12:89:05:fb:a1:bb:e6:e8:c0:55:
         1d:76:a1:96:36:65:a5:f6:fd:5e:20:29:f3:55:e5:a2:05:eb:
         f8:75:97:4c:81:e8:1e:0e:e1:da:c6:9d:4e:18:7a:19:48:82:
         09:ad:b3:42
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAezBbfi0fGD1xnkPF1guovAdyjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIxMTIxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZmVhZjNhMjIyODZiOGIzOGNjMThlYzQzZjM3N2E3NDFm
ZjY1ZTMwNzIyYTQwMjU2NmY0NGFkMWNjMGQ2ZDhhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsmF0t/igYx6k2dCdBA6DYEHnTTtdOPCDdmZnCY/7cG4dc
Dc8DzojcmiKoFTaFijINNvAcu/t4ShXQvecs9RId0hwG8J6EfejgeLdARJizTHET
bF7oRfZdE9hKEog4MAM3NND4MXP0CDZDaWvDa5HuruLRtyJRYcB72CzCfJEtwv8l
FpFrcBtqea+TBrfJnXdBz3hbwkZ1SIzxKWEVBubCB0Cxp9hm2Z2KTXcAobsVscN4
NpQFCiYpmZYpkZdJyL8YQrn3MbmHhF9EHSscEe9ALpHpnLODmBm70a3bFdiNt2f6
nKPAr8dqhLo/wsrHydy7m0g8WM4Yz2D2IZ0pPtV9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU0WIziMDUPqOgfXyNl1yKLsw1HKQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc4MDA4NjljLWQ2YzYtNDZhZi1iNTI4LTNlMmFiYzg0YjcwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAN8gwDQYJKoZIhvcNAQELBQADggEBAExzxhBYZfRZj42PudY1ctQo
/E+0CSzA0SEqqAYx6TK/ot79muPRYFR8lr+ReOzy7a//KSi6dRWIj+GXcU5hxiS6
ZeO71ubaw+CW236luOrVONSN7smYaqgPUOP9c6qFLJnGCec3lSUarQfArz1K5uMQ
YvmhuJYVmjjLVYrqm6KtN1QcDfr5i8moumuxODf2Tn2LxEZ480tuQ1KV/bWu00Vo
jRfwz7pSckCravlgMLcthlh5alMjUpambc6qiuCmFp83IvqZeO0zztEwOve4EokF
+6G75ujAVR12oZY2ZaX2/V4gKfNV5aIF6/h1l0yB6B4O4drGnU4YehlIggmts0I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:07 2026 by rpki-client