Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e94569c-0854-409c-b9bc-cd06f346c92b.roa
File:                     7e94569c-0854-409c-b9bc-cd06f346c92b.roa (raw, json)
Hash identifier:          DW2jxNyLsOrIE0rdFhT9ru/ZLFawVr23h1sQYuyJCTo=
Subject key identifier:   D8:0A:A0:FA:93:1F:32:78:11:5F:9A:65:02:DE:25:09:37:6C:C1:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5462D81DEE0140BEA64E4FD81360DBC646217E4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e94569c-0854-409c-b9bc-cd06f346c92b.roa
Signing time:             Thu 23 Jul 2026 12:01:51 +0000
ROA not before:           Thu 23 Jul 2026 12:01:51 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e00::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:62:d8:1d:ee:01:40:be:a6:4e:4f:d8:13:60:db:c6:46:21:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 12:01:51 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=3c8634c52e5d2a6c069852277f4a9137d2f05c16b02ae35850dc860d273e03c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:22:84:5a:41:3c:84:d6:d0:f4:13:91:b0:
                    5d:7e:20:07:79:86:99:59:11:73:13:ad:93:51:73:
                    cb:9b:c4:76:6b:a8:26:76:fd:b9:9b:48:e0:63:cf:
                    19:a2:7f:11:03:bb:43:50:b8:b2:e6:27:c3:77:1a:
                    a7:16:48:65:63:32:17:00:03:cf:9e:3f:84:73:c7:
                    76:ae:47:8d:57:01:38:d8:f7:13:0f:8e:93:e5:e1:
                    cd:77:04:a1:c2:a5:e0:fe:14:d3:0e:91:d9:86:3e:
                    23:0a:69:90:8d:b1:57:44:14:8d:53:6b:2f:c2:c1:
                    3d:58:30:ee:9b:ff:26:df:c7:c3:32:5e:f1:0a:5d:
                    a5:ac:f8:68:f1:8d:b0:8d:3d:30:8b:4f:98:5a:ec:
                    7c:74:f0:7d:ab:69:ca:4a:52:5c:e3:20:62:5e:6c:
                    be:6c:31:67:84:bc:fa:f3:d4:13:bf:15:5e:15:ed:
                    aa:c9:fb:3e:52:be:b7:5f:46:92:1d:c6:72:2f:75:
                    01:ed:4c:12:63:ee:f3:67:38:77:d9:1b:a5:90:00:
                    23:31:92:f7:bd:c5:eb:5e:c8:31:88:6b:d3:80:f2:
                    7a:71:2f:bf:c1:68:6e:9f:97:6c:71:3c:bf:00:e7:
                    25:63:1d:9a:82:92:ff:90:0d:ae:d9:ca:5d:06:55:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:A0:FA:93:1F:32:78:11:5F:9A:65:02:DE:25:09:37:6C:C1:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e94569c-0854-409c-b9bc-cd06f346c92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e00::/45

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:70:7c:14:2f:ba:11:36:a6:27:de:9d:d3:fa:54:e6:db:
         cd:bf:c2:9f:fc:9e:b9:3e:9d:a6:2c:0f:03:51:34:fc:6f:4f:
         64:61:b3:f7:34:1b:56:a4:12:75:a0:25:57:6d:c8:44:0c:2c:
         42:ed:9e:13:7d:03:fd:dc:f4:42:4f:b7:29:7e:6d:ae:df:f8:
         c3:9c:24:68:97:34:68:74:36:46:1f:b1:56:11:d9:ea:50:7e:
         63:4c:6c:80:61:c0:8d:b5:d4:38:6f:e3:ab:55:5b:5b:34:9f:
         f2:56:f1:45:41:21:95:62:73:a7:63:0c:fc:39:ab:75:a7:6f:
         d2:7d:fa:4f:ba:b9:26:5e:da:04:c3:01:1f:6f:91:09:d3:83:
         0b:49:e5:a3:3b:ba:21:62:a0:6f:71:4b:f6:03:c0:5c:47:8b:
         75:2f:9e:96:fa:a7:a3:9b:32:72:bb:ee:60:37:60:da:1d:01:
         1d:98:a5:f3:86:2a:8e:d2:8e:c0:95:59:ed:8c:ff:e6:1c:9d:
         3b:fb:e7:da:f0:f6:24:0d:19:f9:07:c7:e0:eb:fd:4d:32:2d:
         f5:ab:88:3f:6d:26:3c:7c:dc:1c:9c:7e:86:33:b3:78:4c:54:
         31:82:b3:f6:7a:34:2b:23:b1:f2:01:cc:24:98:44:7e:05:9b:
         80:76:68:35
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVGLYHe4BQL6mTk/YE2DbxkYhfkwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTIwMTUxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzg2MzRjNTJlNWQyYTZjMDY5ODUyMjc3ZjRhOTEzN2Qy
ZjA1YzE2YjAyYWUzNTg1MGRjODYwZDI3M2UwM2MwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjkSKEWkE8hNbQ9BORsF1+IAd5hplZEXMTrZNRc8ubxHZr
qCZ2/bmbSOBjzxmifxEDu0NQuLLmJ8N3GqcWSGVjMhcAA8+eP4Rzx3auR41XATjY
9xMPjpPl4c13BKHCpeD+FNMOkdmGPiMKaZCNsVdEFI1Tay/CwT1YMO6b/ybfx8My
XvEKXaWs+GjxjbCNPTCLT5ha7Hx08H2racpKUlzjIGJebL5sMWeEvPrz1BO/FV4V
7arJ+z5SvrdfRpIdxnIvdQHtTBJj7vNnOHfZG6WQACMxkve9xeteyDGIa9OA8npx
L7/BaG6fl2xxPL8A5yVjHZqCkv+QDa7Zyl0GVRmZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU2Aqg+pMfMngRX5plAt4lCTdswbAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdlOTQ1NjljLTA4NTQtNDA5Yy1iOWJjLWNkMDZmMzQ2YzkyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPgAwDQYJKoZIhvcNAQELBQADggEBALEwcHwUL7oRNqYn3p3T+lTm
282/wp/8nrk+naYsDwNRNPxvT2Rhs/c0G1akEnWgJVdtyEQMLELtnhN9A/3c9EJP
tyl+ba7f+MOcJGiXNGh0NkYfsVYR2epQfmNMbIBhwI211Dhv46tVW1s0n/JW8UVB
IZVic6djDPw5q3Wnb9J9+k+6uSZe2gTDAR9vkQnTgwtJ5aM7uiFioG9xS/YDwFxH
i3Uvnpb6p6ObMnK77mA3YNodAR2YpfOGKo7SjsCVWe2M/+YcnTv759rw9iQNGfkH
x+Dr/U0yLfWriD9tJjx83BycfoYzs3hMVDGCs/Z6NCsjsfIBzCSYRH4Fm4B2aDU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:47 2026 by rpki-client