Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93ba9984-86bb-4478-9013-dff1d277acd8.roa
File:                     93ba9984-86bb-4478-9013-dff1d277acd8.roa (raw, json)
Hash identifier:          6ymgEJX1zBn22Cpf/6pA7TD8svros2MmCjEyn2BjokQ=
Subject key identifier:   7D:F2:F2:D1:DE:A0:C4:29:7A:AD:48:91:0B:8D:F6:9F:E8:72:59:5E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6753E24BA3A8CC101F5E8B0126FAB1FB6EEEAC7B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93ba9984-86bb-4478-9013-dff1d277acd8.roa
Signing time:             Thu 23 Jul 2026 03:00:49 +0000
ROA not before:           Thu 23 Jul 2026 03:00:49 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39e2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:e2:4b:a3:a8:cc:10:1f:5e:8b:01:26:fa:b1:fb:6e:ee:ac:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 03:00:49 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=9203d2faf9f65c58f4176f49db4c54cda1eb5f578036d0bbf45cea544e37fb51, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:34:7d:87:73:b6:51:67:04:cc:a9:ff:4c:
                    c7:e8:6a:1a:fe:50:ad:71:c1:93:a4:af:a7:79:1a:
                    a3:11:dc:67:fa:b5:00:d7:ba:6e:77:49:58:5f:4b:
                    cd:ef:ad:e7:64:bd:52:a4:8a:3b:2e:4a:4c:e2:20:
                    ae:47:39:22:78:99:8a:9e:c7:e8:ad:4c:16:a5:d5:
                    97:01:fc:4d:49:8b:9b:9f:8d:4a:40:1d:fa:64:b2:
                    1f:5c:7a:2c:1b:16:17:1e:a3:c1:26:52:6b:40:67:
                    76:f8:53:ba:53:79:eb:a9:3f:bb:e3:6c:8f:4f:ab:
                    6d:09:08:05:c9:75:40:55:72:45:6a:45:92:ae:e4:
                    03:08:ee:10:e0:88:fa:9c:8b:ba:9f:fa:f5:40:9f:
                    df:55:fb:35:cf:a5:24:72:72:00:d1:e7:09:29:2c:
                    1f:f0:f4:ec:df:4b:c1:7e:73:d7:f6:9a:cc:31:a4:
                    62:68:af:b5:73:b7:e2:66:8c:78:5d:03:28:92:af:
                    26:4b:7e:eb:8a:2a:70:5e:fa:e7:7a:4c:9b:40:aa:
                    e9:3e:14:c6:8d:fb:4b:cd:d6:8f:26:82:78:16:1c:
                    55:c8:aa:84:b5:f1:f4:99:2f:f9:cd:30:d3:8a:3f:
                    bc:37:7f:c2:65:76:79:42:78:77:7b:02:78:db:a0:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:F2:D1:DE:A0:C4:29:7A:AD:48:91:0B:8D:F6:9F:E8:72:59:5E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93ba9984-86bb-4478-9013-dff1d277acd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39e2::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:be:3f:08:e3:2e:a4:79:20:2d:e6:04:cf:6a:c7:61:57:2d:
         d3:68:4f:11:14:5b:8a:69:d6:a8:3f:01:cd:c9:86:f6:0c:32:
         95:57:01:c7:94:39:7d:9c:47:0a:96:1b:d0:c8:23:81:f9:0d:
         16:93:98:e9:89:83:13:a2:d8:26:b3:e6:13:9d:b7:28:3f:3b:
         d6:89:4f:e4:b4:f9:76:d4:10:fd:b9:69:c5:42:db:ba:a4:47:
         b6:01:60:25:74:45:e1:67:0a:2c:4f:d2:b6:75:17:ab:2e:b8:
         ce:ca:6a:bd:59:2e:70:dd:02:54:32:7c:77:0b:88:09:7a:7f:
         92:a8:e9:3c:81:69:06:1c:17:8c:df:d2:a1:a0:c8:1d:34:26:
         6a:4d:6d:6d:34:1a:28:8a:e3:7b:2b:d7:34:63:0b:d6:f8:a5:
         a0:8b:18:ab:df:fa:d3:a9:65:e3:3a:b4:3b:25:3c:96:6f:7b:
         94:f6:b6:d7:71:97:9e:cd:ef:7e:22:b3:82:1f:05:93:23:a2:
         b3:25:67:82:78:82:5d:b4:57:8b:54:be:d3:1d:12:61:7c:d9:
         2c:21:d0:18:bf:95:ef:c7:97:89:3a:c9:58:ed:62:e5:f1:5d:
         a2:09:1d:ad:d9:a1:39:f9:3f:98:ef:c1:c9:25:a5:04:79:2b:
         b4:e9:d1:03
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZ1PiS6OozBAfXosBJvqx+27urHswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDMwMDQ5WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjAzZDJmYWY5ZjY1YzU4ZjQxNzZmNDlkYjRjNTRjZGEx
ZWI1ZjU3ODAzNmQwYmJmNDVjZWE1NDRlMzdmYjUxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQbzR9h3O2UWcEzKn/TMfoahr+UK1xwZOkr6d5GqMR3Gf6
tQDXum53SVhfS83vredkvVKkijsuSkziIK5HOSJ4mYqex+itTBal1ZcB/E1Ji5uf
jUpAHfpksh9ceiwbFhceo8EmUmtAZ3b4U7pTeeupP7vjbI9Pq20JCAXJdUBVckVq
RZKu5AMI7hDgiPqci7qf+vVAn99V+zXPpSRycgDR5wkpLB/w9OzfS8F+c9f2mswx
pGJor7Vzt+JmjHhdAyiSryZLfuuKKnBe+ud6TJtAquk+FMaN+0vN1o8mgngWHFXI
qoS18fSZL/nNMNOKP7w3f8JldnlCeHd7AnjboIF1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUffLy0d6gxCl6rUiRC432n+hyWV4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkzYmE5OTg0LTg2YmItNDQ3OC05MDEzLWRmZjFkMjc3YWNkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOeIwDQYJKoZIhvcNAQELBQADggEBAAO+PwjjLqR5IC3mBM9qx2FX
LdNoTxEUW4pp1qg/Ac3JhvYMMpVXAceUOX2cRwqWG9DII4H5DRaTmOmJgxOi2Caz
5hOdtyg/O9aJT+S0+XbUEP25acVC27qkR7YBYCV0ReFnCixP0rZ1F6suuM7Kar1Z
LnDdAlQyfHcLiAl6f5Ko6TyBaQYcF4zf0qGgyB00JmpNbW00GiiK43sr1zRjC9b4
paCLGKvf+tOpZeM6tDslPJZve5T2ttdxl57N734is4IfBZMjorMlZ4J4gl20V4tU
vtMdEmF82Swh0Bi/le/Hl4k6yVjtYuXxXaIJHa3ZoTn5P5jvwcklpQR5K7Tp0QM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:20 2026 by rpki-client