Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbbb490-2463-45da-b776-b9aa23450fa3.roa
File:                     afbbb490-2463-45da-b776-b9aa23450fa3.roa (raw, json)
Hash identifier:          CqwI3sKARgw6w1xtk2G4ZD7YuetktGFEeWL14+DuloM=
Subject key identifier:   E2:FB:B6:99:EB:7A:6E:B8:C7:FC:84:52:B6:F5:5F:43:8F:87:1B:FE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       454A4C113DF8FE2D3E800D906DA96577BF12D0CA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbbb490-2463-45da-b776-b9aa23450fa3.roa
Signing time:             Thu 23 Jul 2026 02:40:50 +0000
ROA not before:           Thu 23 Jul 2026 02:40:50 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34de::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:4c:11:3d:f8:fe:2d:3e:80:0d:90:6d:a9:65:77:bf:12:d0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 02:40:50 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=0c9d7cf60eafae5f72384f5bbd4e454ed06bc016faa9f2a2a75eddaaba4320c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:29:66:c8:d7:67:06:5c:80:69:00:07:92:
                    98:06:08:88:79:eb:a8:10:bf:5d:53:80:73:f5:e0:
                    da:32:0a:56:49:21:a6:bb:f0:0a:9d:1b:91:7a:52:
                    3f:fd:bd:b4:c5:94:a5:05:32:8e:06:56:39:b2:36:
                    6f:ab:7a:b7:33:27:e6:69:d8:fc:6c:0f:8f:a1:f2:
                    82:bb:f1:89:ce:64:a8:ec:f2:26:f2:ec:0d:f3:65:
                    87:4c:72:4e:e3:0f:70:6a:10:f9:20:db:9a:65:9f:
                    59:a9:c1:73:dc:b9:b7:29:0a:84:c7:74:84:86:44:
                    c4:f2:3d:7a:03:ce:a3:b3:a6:5a:7f:b0:7b:f7:43:
                    28:45:a7:28:19:7d:b7:44:a6:10:a1:df:da:81:c6:
                    81:87:32:40:72:1f:37:ed:88:aa:9b:ca:7c:a4:29:
                    d5:12:a4:cd:92:a6:f8:15:c6:0c:5b:14:95:45:f3:
                    66:15:18:73:c5:07:a3:2a:e8:bc:71:29:78:ca:3c:
                    2b:15:12:82:d0:04:4c:29:41:cd:4a:c7:c4:2b:1e:
                    52:ef:10:6d:78:2c:58:ff:c1:a2:38:47:b7:5b:6b:
                    ef:d9:fd:a7:6b:e9:28:84:aa:14:b2:97:d0:85:8a:
                    71:4c:e8:30:89:e0:b1:42:13:a5:54:16:4b:a6:97:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:B6:99:EB:7A:6E:B8:C7:FC:84:52:B6:F5:5F:43:8F:87:1B:FE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afbbb490-2463-45da-b776-b9aa23450fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34de::/47

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:79:a4:45:04:f9:bb:3a:5b:8f:e5:5f:20:d3:ed:0b:14:
         c4:d9:1e:18:ac:48:7c:9c:6c:f7:95:61:08:9f:f1:5a:fe:6e:
         a2:04:81:11:f7:24:8f:76:8f:4d:4c:3d:b7:1d:63:96:d1:e4:
         7e:72:6f:eb:76:db:96:d7:be:ec:df:6a:4c:73:82:67:a3:0d:
         64:95:c1:91:e9:1d:4c:5c:e7:3b:d2:fd:e9:a0:cf:4c:17:09:
         98:8b:28:30:05:6b:b3:7d:31:cf:49:9b:6a:7f:d1:0b:6e:8e:
         c0:18:e5:fb:70:4b:c0:76:c9:f4:fc:29:c8:09:8d:5b:1b:1d:
         f5:ba:b4:ed:7d:e6:2f:84:dc:ac:54:ed:63:e9:4d:17:d0:2a:
         7c:11:3e:c0:3c:42:0b:2d:9f:a8:10:4d:5e:06:e4:63:f7:94:
         79:9f:ed:78:a9:68:b5:16:77:67:02:ef:ea:11:26:4f:69:24:
         bb:12:2f:c1:56:2a:28:30:c0:ba:e4:8e:78:14:bb:5c:05:06:
         ac:19:43:7f:cf:cf:70:e6:31:2c:83:37:8c:8a:99:ca:9e:8a:
         8c:00:e9:a2:0d:ad:61:0c:4c:96:8b:c5:9d:33:45:0e:d1:15:
         dc:02:07:cd:c9:82:32:62:0c:fa:c4:8b:2c:b7:91:12:69:82:
         18:d1:f2:43
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURUpMET34/i0+gA2Qballd78S0MowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDI0MDUwWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYzlkN2NmNjBlYWZhZTVmNzIzODRmNWJiZDRlNDU0ZWQw
NmJjMDE2ZmFhOWYyYTJhNzVlZGRhYWJhNDMyMGMwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmUSlmyNdnBlyAaQAHkpgGCIh566gQv11TgHP14NoyClZJ
Iaa78AqdG5F6Uj/9vbTFlKUFMo4GVjmyNm+rerczJ+Zp2PxsD4+h8oK78YnOZKjs
8iby7A3zZYdMck7jD3BqEPkg25pln1mpwXPcubcpCoTHdISGRMTyPXoDzqOzplp/
sHv3QyhFpygZfbdEphCh39qBxoGHMkByHzftiKqbynykKdUSpM2SpvgVxgxbFJVF
82YVGHPFB6Mq6LxxKXjKPCsVEoLQBEwpQc1Kx8QrHlLvEG14LFj/waI4R7dba+/Z
/adr6SiEqhSyl9CFinFM6DCJ4LFCE6VUFkuml7uPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4vu2met6brjH/IRStvVfQ4+HG/4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FmYmJiNDkwLTI0NjMtNDVkYS1iNzc2LWI5YWEyMzQ1MGZhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANN4wDQYJKoZIhvcNAQELBQADggEBAINOeaRFBPm7OluP5V8g0+0L
FMTZHhisSHycbPeVYQif8Vr+bqIEgRH3JI92j01MPbcdY5bR5H5yb+t225bXvuzf
akxzgmejDWSVwZHpHUxc5zvS/emgz0wXCZiLKDAFa7N9Mc9Jm2p/0QtujsAY5ftw
S8B2yfT8KcgJjVsbHfW6tO195i+E3KxU7WPpTRfQKnwRPsA8Qgstn6gQTV4G5GP3
lHmf7XipaLUWd2cC7+oRJk9pJLsSL8FWKigwwLrkjngUu1wFBqwZQ3/Pz3DmMSyD
N4yKmcqeiowA6aINrWEMTJaLxZ0zRQ7RFdwCB83JgjJiDPrEiyy3kRJpghjR8kM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:01 2026 by rpki-client