Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ed9936-5bcb-4fb1-a0be-a46004f2dac8.roa
File:                     91ed9936-5bcb-4fb1-a0be-a46004f2dac8.roa (raw, json)
Hash identifier:          X+vUNv7KfWuDHHeQ9P6Ot4gBMDK3P3XWwjejYsTesZQ=
Subject key identifier:   41:3E:7E:D6:C8:88:C8:03:8F:C6:D4:10:44:F6:F4:45:1C:BC:9C:0F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2FC278595A13F7ED4326A904F0C9AD83FDCCF38A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ed9936-5bcb-4fb1-a0be-a46004f2dac8.roa
Signing time:             Tue 07 Jul 2026 16:47:57 +0000
ROA not before:           Tue 07 Jul 2026 16:47:57 +0000
ROA not after:            Mon 05 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:ff8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:78:59:5a:13:f7:ed:43:26:a9:04:f0:c9:ad:83:fd:cc:f3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul  7 16:47:57 2026 GMT
            Not After : Oct  5 23:59:59 2026 GMT
        Subject: serialNumber=7855de8f8b48a3c9329f436f2238df7fdcc1e14263bc1b3cb0b092ca26f1732a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:3f:42:ae:44:bf:f1:d8:6a:cd:ab:ef:5e:
                    4f:d4:c8:6c:17:b4:a1:94:a0:d6:80:6f:b0:da:19:
                    62:be:d1:e8:7d:03:25:22:c6:32:13:e3:49:a2:b3:
                    9e:47:3c:9d:1b:69:53:28:e1:05:22:88:30:d1:30:
                    b7:f1:f0:89:cb:c9:e9:b6:eb:81:1d:78:b0:b4:cf:
                    b9:f5:6c:35:40:11:18:fe:f3:70:74:45:96:98:f9:
                    a4:aa:cd:b8:83:9d:81:05:5a:29:ac:2e:cc:dc:26:
                    b7:88:02:67:a4:8b:b2:6a:97:d5:13:39:0a:35:b0:
                    75:28:7f:fb:05:cd:3d:9b:e2:d6:93:43:e5:d9:cc:
                    bf:a2:c9:8f:1c:fd:17:fd:5c:75:3c:bb:24:7e:3c:
                    33:15:b7:8f:45:57:6a:67:80:fa:90:62:cb:c3:30:
                    e1:37:40:23:37:92:cf:9c:54:1a:aa:c8:db:a2:25:
                    74:31:f8:20:54:c5:8b:5c:99:56:bd:00:e0:dc:58:
                    7d:49:36:b6:c3:84:23:9e:92:3c:04:cb:3c:14:03:
                    27:17:6d:68:5c:99:25:1a:9c:b0:5b:7a:9a:97:17:
                    cd:45:c5:6c:60:e0:c9:c4:9f:5c:81:aa:f1:9c:da:
                    e0:e6:74:24:f3:7e:b6:28:f9:24:54:f6:d4:2d:a9:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:7E:D6:C8:88:C8:03:8F:C6:D4:10:44:F6:F4:45:1C:BC:9C:0F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/91ed9936-5bcb-4fb1-a0be-a46004f2dac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:ff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:0e:86:2b:cf:a7:26:ef:03:7d:44:e1:bd:bc:fe:c7:5e:
         07:d3:6e:5f:29:7f:55:cc:86:ff:51:7b:7d:46:ee:34:48:5f:
         9f:0c:9e:eb:67:c0:2b:62:47:84:ba:75:0d:ef:1c:ab:13:5d:
         7e:a7:b6:c0:a3:6e:cd:90:1d:8f:03:c9:b2:ea:e2:09:1e:dd:
         6b:9c:16:20:e3:3a:66:6a:98:c8:e4:26:2f:e3:91:bb:af:77:
         1a:50:be:6a:56:b2:28:64:28:9c:bc:dd:94:84:77:b9:b7:e8:
         89:67:54:09:dc:4e:e0:5f:fd:83:46:ca:a2:13:1d:55:15:0b:
         02:9e:9d:7e:db:d6:1a:e9:56:17:fc:64:dd:d4:8c:d8:9e:7f:
         20:bf:08:3f:34:31:ee:a2:89:32:ec:99:6d:cc:54:69:ad:c4:
         fe:35:58:fd:cb:39:1d:57:26:08:e4:d5:9a:44:27:b7:1e:a8:
         75:8e:60:3d:f7:83:ea:60:53:98:a7:a7:27:bd:86:26:f7:f2:
         dd:94:ca:54:4b:55:45:8e:1f:71:79:9a:e7:03:4b:31:41:06:
         68:6e:ef:04:c0:db:52:57:2c:c5:f7:80:fa:d8:0d:1e:5c:41:
         73:8b:87:25:92:09:1c:5c:0a:70:a3:05:c7:34:15:52:09:2e:
         3b:92:71:00
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUL8J4WVoT9+1DJqkE8Mmtg/3M84owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzA3MTY0NzU3WhcNMjYxMDA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODU1ZGU4ZjhiNDhhM2M5MzI5ZjQzNmYyMjM4ZGY3ZmRj
YzFlMTQyNjNiYzFiM2NiMGIwOTJjYTI2ZjE3MzJhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDc5z9CrkS/8dhqzavvXk/UyGwXtKGUoNaAb7DaGWK+0eh9
AyUixjIT40mis55HPJ0baVMo4QUiiDDRMLfx8InLyem264EdeLC0z7n1bDVAERj+
83B0RZaY+aSqzbiDnYEFWimsLszcJreIAmeki7Jql9UTOQo1sHUof/sFzT2b4taT
Q+XZzL+iyY8c/Rf9XHU8uyR+PDMVt49FV2pngPqQYsvDMOE3QCM3ks+cVBqqyNui
JXQx+CBUxYtcmVa9AODcWH1JNrbDhCOekjwEyzwUAycXbWhcmSUanLBbepqXF81F
xWxg4MnEn1yBqvGc2uDmdCTzfrYo+SRU9tQtqZSTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQT5+1siIyAOPxtQQRPb0RRy8nA8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkxZWQ5OTM2LTViY2ItNGZiMS1hMGJlLWE0NjAwNGYyZGFjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAD/gwDQYJKoZIhvcNAQELBQADggEBAKILDoYrz6cm7wN9ROG9vP7H
XgfTbl8pf1XMhv9Re31G7jRIX58MnutnwCtiR4S6dQ3vHKsTXX6ntsCjbs2QHY8D
ybLq4gke3WucFiDjOmZqmMjkJi/jkbuvdxpQvmpWsihkKJy83ZSEd7m36IlnVAnc
TuBf/YNGyqITHVUVCwKenX7b1hrpVhf8ZN3UjNiefyC/CD80Me6iiTLsmW3MVGmt
xP41WP3LOR1XJgjk1ZpEJ7ceqHWOYD33g+pgU5inpye9hib38t2UylRLVUWOH3F5
mucDSzFBBmhu7wTA21JXLMX3gPrYDR5cQXOLhyWSCRxcCnCjBcc0FVIJLjuScQA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:12 2026 by rpki-client