Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5766f26-1a21-4dd9-bc83-3e950a1855ca.roa
File:                     b5766f26-1a21-4dd9-bc83-3e950a1855ca.roa (raw, json)
Hash identifier:          cxPSIcl2PT18ci3b4CwpXHAf9zdXlZ2UQSoqxVmbne0=
Subject key identifier:   96:CB:0E:C3:21:AF:AA:73:2D:1A:40:86:A0:5D:DF:E2:80:8C:75:3E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5BFC47519921A76B17561E08E3F08F78208044DF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5766f26-1a21-4dd9-bc83-3e950a1855ca.roa
Signing time:             Wed 22 Jul 2026 02:21:29 +0000
ROA not before:           Wed 22 Jul 2026 02:21:29 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fca::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:47:51:99:21:a7:6b:17:56:1e:08:e3:f0:8f:78:20:80:44:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:21:29 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=3037a2e89d0b8938447f85bf30ad14919ff62e2c363cd1c14bd7204b8e205643, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:47:11:d3:29:29:7b:4b:89:4f:5b:fe:5c:
                    11:5a:c8:6a:91:7b:67:1a:c6:87:fa:b9:ed:ff:37:
                    42:00:06:02:bb:84:f1:4e:2c:42:51:25:a2:eb:e1:
                    ac:29:9c:3a:cc:25:a1:53:ed:7e:c3:79:f5:44:58:
                    4a:53:32:fc:1d:59:e5:4c:3f:e4:44:b9:79:08:66:
                    43:22:29:55:c6:cd:b7:de:4f:eb:46:ea:5d:99:ab:
                    b8:dd:92:5a:49:b8:46:97:92:57:f7:f6:6c:0c:99:
                    d6:c4:5f:47:11:5f:e2:b1:66:a3:1f:98:02:be:2a:
                    4f:45:a2:9f:8a:d4:23:9a:29:e5:c9:ae:7c:c5:27:
                    df:ae:65:08:66:7a:1d:b4:ab:ef:92:65:2f:9d:3d:
                    c0:c7:37:77:01:92:60:61:41:ed:b6:bb:60:a9:ff:
                    11:6d:d7:d8:f3:57:00:60:5b:9e:46:f6:53:e1:39:
                    b4:e1:7a:02:93:ce:b3:ed:d9:0e:b9:1c:77:32:47:
                    c9:44:a7:80:fc:1f:49:94:dc:05:db:1f:db:48:bc:
                    9a:80:77:ea:c8:94:0c:99:23:cf:0b:f0:f0:c2:0f:
                    45:4b:1d:90:00:ee:9d:92:82:26:76:46:69:87:e7:
                    aa:1a:1e:ea:7f:30:52:5e:01:ed:ee:7a:ab:02:61:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:0E:C3:21:AF:AA:73:2D:1A:40:86:A0:5D:DF:E2:80:8C:75:3E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b5766f26-1a21-4dd9-bc83-3e950a1855ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fca::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:b8:19:ac:25:01:a9:d9:60:0c:e6:b0:8b:af:8a:93:77:41:
         75:93:40:02:fd:71:92:d1:75:53:0b:ba:0e:c7:dd:8d:36:11:
         97:ca:43:30:85:9f:c3:cc:c0:dd:e9:e5:ed:fc:4d:7f:63:ed:
         0d:d2:18:18:35:09:20:d3:52:71:cd:2c:fa:75:2e:97:9d:15:
         f7:cf:fa:5c:ef:39:7a:5f:d7:5e:f2:a1:f4:74:c8:fe:9e:39:
         3a:3b:aa:7a:d8:04:fc:5d:5b:cb:27:80:c8:b5:e6:0a:1f:68:
         96:1e:a1:ad:e3:2d:28:78:a0:d1:b9:f5:43:83:fa:3f:e6:95:
         3a:f4:91:29:3c:0d:35:6f:3f:42:54:bf:30:09:e5:92:d0:98:
         91:b9:e5:70:a6:22:83:cb:2d:e8:00:66:22:17:9b:2d:87:40:
         bf:fa:f1:db:8f:b6:2d:38:22:c8:13:e4:d6:ee:0f:2d:75:74:
         6c:a9:8f:d4:db:f6:94:84:d4:4f:0f:17:ad:ee:d1:4f:62:f4:
         84:06:c8:22:84:97:c5:73:9b:f0:14:66:d8:6e:a2:d7:97:0b:
         88:40:19:c9:a2:63:80:67:6e:6b:30:83:46:3d:58:e9:68:e2:
         bf:d5:70:67:12:e6:a9:c7:8f:61:4d:18:f8:15:26:a1:65:95:
         10:8d:00:3f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUW/xHUZkhp2sXVh4I4/CPeCCARN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDIyMTI5WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDM3YTJlODlkMGI4OTM4NDQ3Zjg1YmYzMGFkMTQ5MTlm
ZjYyZTJjMzYzY2QxYzE0YmQ3MjA0YjhlMjA1NjQzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0TEcR0ykpe0uJT1v+XBFayGqRe2caxof6ue3/N0IABgK7
hPFOLEJRJaLr4awpnDrMJaFT7X7DefVEWEpTMvwdWeVMP+REuXkIZkMiKVXGzbfe
T+tG6l2Zq7jdklpJuEaXklf39mwMmdbEX0cRX+KxZqMfmAK+Kk9Fop+K1COaKeXJ
rnzFJ9+uZQhmeh20q++SZS+dPcDHN3cBkmBhQe22u2Cp/xFt19jzVwBgW55G9lPh
ObThegKTzrPt2Q65HHcyR8lEp4D8H0mU3AXbH9tIvJqAd+rIlAyZI88L8PDCD0VL
HZAA7p2SgiZ2RmmH56oaHup/MFJeAe3ueqsCYcn7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlssOwyGvqnMtGkCGoF3f4oCMdT4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I1NzY2ZjI2LTFhMjEtNGRkOS1iYzgzLTNlOTUwYTE4NTVjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL8owDQYJKoZIhvcNAQELBQADggEBALm4GawlAanZYAzmsIuvipN3
QXWTQAL9cZLRdVMLug7H3Y02EZfKQzCFn8PMwN3p5e38TX9j7Q3SGBg1CSDTUnHN
LPp1LpedFffP+lzvOXpf117yofR0yP6eOTo7qnrYBPxdW8sngMi15gofaJYeoa3j
LSh4oNG59UOD+j/mlTr0kSk8DTVvP0JUvzAJ5ZLQmJG55XCmIoPLLegAZiIXmy2H
QL/68duPti04IsgT5NbuDy11dGypj9Tb9pSE1E8PF63u0U9i9IQGyCKEl8Vzm/AU
ZthuoteXC4hAGcmiY4Bnbmswg0Y9WOlo4r/VcGcS5qnHj2FNGPgVJqFllRCNAD8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:43 2026 by rpki-client