Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c9229fb-98de-43dd-87bd-4b9fa2dc8c3e.roa
File:                     9c9229fb-98de-43dd-87bd-4b9fa2dc8c3e.roa (raw, json)
Hash identifier:          ReF8dlOpjCR8rbM4cyd4lqMDLoeFrpYmYZH0JblX03Q=
Subject key identifier:   11:64:63:F7:58:EE:C8:B1:AA:B9:04:BB:21:4C:2A:DD:6C:E1:65:84
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2340370DF687F6D0BB4B31F9C3AD90FFD02191E8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c9229fb-98de-43dd-87bd-4b9fa2dc8c3e.roa
Signing time:             Thu 23 Jul 2026 02:01:36 +0000
ROA not before:           Thu 23 Jul 2026 02:01:36 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:40:37:0d:f6:87:f6:d0:bb:4b:31:f9:c3:ad:90:ff:d0:21:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:01:36 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=4349f8fe1b2904e6246a0451ac86a2cfc434e5fb91b9414e329ab84ececcc34e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:80:75:b3:a1:c2:86:2d:03:34:9f:86:19:
                    07:f5:2c:e2:b8:d7:5a:37:75:23:d4:6c:ef:d6:05:
                    a9:ee:24:b2:81:78:5b:2e:f5:ae:97:fd:74:6c:38:
                    16:38:2f:95:97:c9:53:45:47:c1:44:5f:02:1a:4d:
                    c1:8d:37:57:68:4f:c5:c9:c4:0f:7c:a2:ad:21:ab:
                    5f:ba:2b:fe:1f:59:bb:d4:ba:bb:a9:aa:01:bd:05:
                    7a:3b:c5:3d:26:08:8f:a3:cc:5b:28:47:88:85:b2:
                    0e:2d:fc:23:2f:31:8b:16:b3:97:21:78:38:a6:69:
                    76:f0:b2:e0:37:58:11:d9:4f:2f:52:5f:d4:ee:2a:
                    83:ab:e7:c0:44:12:a3:57:68:5a:60:1d:24:37:14:
                    c4:4a:c9:94:81:ff:cb:01:3a:13:47:74:78:6b:f6:
                    07:ac:d2:88:b6:a9:60:e7:cf:2f:c5:00:85:1b:d8:
                    3d:b4:35:ad:31:a9:3a:fe:69:cb:15:35:39:9e:13:
                    52:6e:53:cd:d0:1f:78:f3:a3:c7:51:e6:48:15:81:
                    82:9d:12:9b:ca:74:26:a2:83:4d:cd:14:7d:ce:f1:
                    ca:54:39:20:f0:88:ac:64:51:55:fe:11:97:57:d4:
                    b5:b7:50:8a:39:e7:72:27:f6:a0:d0:e5:44:00:0a:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:64:63:F7:58:EE:C8:B1:AA:B9:04:BB:21:4C:2A:DD:6C:E1:65:84
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c9229fb-98de-43dd-87bd-4b9fa2dc8c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37e6::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:04:93:fc:b4:52:bf:9a:fb:93:2b:a2:76:7c:c4:16:a1:fe:
         8c:e9:81:b5:0d:ae:2a:55:8a:1b:f5:f0:c1:d4:00:52:8b:32:
         43:9c:d9:45:38:00:75:97:9d:de:ec:f6:cc:ca:de:51:cd:bf:
         33:7e:4b:90:00:e6:1b:ac:96:c7:fb:46:99:ad:29:f9:c0:bd:
         7b:67:a8:61:25:ec:26:6e:e4:84:9a:13:9c:c1:08:db:fb:6b:
         c8:61:2d:68:f5:2c:17:f8:49:0a:f6:5c:2e:b6:3a:0c:c5:d6:
         97:52:75:d8:df:46:d3:e2:37:23:ce:2f:e0:da:0a:96:8b:35:
         86:48:b4:c9:25:c4:41:67:dd:99:59:de:58:2e:5d:12:e1:47:
         9d:90:73:09:d1:ee:86:5f:1e:8f:0d:39:8f:ce:08:74:d6:0b:
         93:ef:fe:76:85:56:ff:8b:a2:42:be:40:48:fc:36:83:50:ab:
         9d:aa:26:40:6f:9e:93:d3:eb:cd:bd:36:79:4c:9a:70:d4:af:
         c9:e5:1f:e3:06:2c:6b:d7:fd:7d:0c:f9:61:f4:72:37:bf:f2:
         a1:1a:6f:c9:79:6b:aa:f2:6b:07:21:d7:e1:ca:7b:0c:16:56:
         b5:a6:8b:42:68:ec:9f:e7:75:7b:f0:a5:c0:f9:0b:96:22:71:
         e4:8d:50:0f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUI0A3DfaH9tC7SzH5w62Q/9AhkegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIwMTM2WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzQ5ZjhmZTFiMjkwNGU2MjQ2YTA0NTFhYzg2YTJjZmM0
MzRlNWZiOTFiOTQxNGUzMjlhYjg0ZWNlY2NjMzRlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpkIB1s6HChi0DNJ+GGQf1LOK411o3dSPUbO/WBanuJLKB
eFsu9a6X/XRsOBY4L5WXyVNFR8FEXwIaTcGNN1doT8XJxA98oq0hq1+6K/4fWbvU
urupqgG9BXo7xT0mCI+jzFsoR4iFsg4t/CMvMYsWs5cheDimaXbwsuA3WBHZTy9S
X9TuKoOr58BEEqNXaFpgHSQ3FMRKyZSB/8sBOhNHdHhr9ges0oi2qWDnzy/FAIUb
2D20Na0xqTr+acsVNTmeE1JuU83QH3jzo8dR5kgVgYKdEpvKdCaig03NFH3O8cpU
OSDwiKxkUVX+EZdX1LW3UIo553In9qDQ5UQACgHtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEWRj91juyLGquQS7IUwq3WzhZYQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzljOTIyOWZiLTk4ZGUtNDNkZC04N2JkLTRiOWZhMmRjOGMzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN+YwDQYJKoZIhvcNAQELBQADggEBAAEEk/y0Ur+a+5MronZ8xBah
/ozpgbUNripVihv18MHUAFKLMkOc2UU4AHWXnd7s9szK3lHNvzN+S5AA5huslsf7
RpmtKfnAvXtnqGEl7CZu5ISaE5zBCNv7a8hhLWj1LBf4SQr2XC62OgzF1pdSddjf
RtPiNyPOL+DaCpaLNYZItMklxEFn3ZlZ3lguXRLhR52QcwnR7oZfHo8NOY/OCHTW
C5Pv/naFVv+LokK+QEj8NoNQq52qJkBvnpPT6829NnlMmnDUr8nlH+MGLGvX/X0M
+WH0cje/8qEab8l5a6ryawch1+HKewwWVrWmi0Jo7J/ndXvwpcD5C5YiceSNUA8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:02 2026 by rpki-client