Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9b5261b-1ce5-40d8-be25-cf3339b06ddc.roa
File:                     b9b5261b-1ce5-40d8-be25-cf3339b06ddc.roa (raw, json)
Hash identifier:          Fiyi4zGv4fR1lXQjYCv2YgrrZby5BUldOa39Exf2Kuw=
Subject key identifier:   C5:ED:2B:88:39:C6:6D:D4:B6:87:44:54:A4:C0:30:1E:78:CD:D4:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F2B03B5E98BD20B3E1C01B7FA8E70533BFC2960
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9b5261b-1ce5-40d8-be25-cf3339b06ddc.roa
Signing time:             Thu 23 Jul 2026 00:50:09 +0000
ROA not before:           Thu 23 Jul 2026 00:50:09 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ea0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:03:b5:e9:8b:d2:0b:3e:1c:01:b7:fa:8e:70:53:3b:fc:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 00:50:09 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=60b1b7b54cf7cc611392c5e8aa3e5b395e9bc0b2e2ba79de8b498681d02ad498, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:7b:44:e5:ce:93:bc:83:57:78:fd:cb:85:
                    3c:ce:43:38:03:66:d6:9e:5c:ab:ab:55:01:49:88:
                    c8:4a:4d:7f:e4:2a:5d:d2:00:68:9c:20:53:f9:0e:
                    a9:b6:99:0a:4a:db:75:5d:ae:63:76:29:3e:0c:d3:
                    d3:8d:b1:f3:3f:06:85:61:11:4f:f2:92:fc:1f:f9:
                    cb:9b:ee:ae:fb:80:a7:f8:58:af:d3:c2:61:96:a5:
                    f6:b2:47:1b:0a:08:03:23:25:7a:36:b8:87:56:99:
                    b6:02:e1:e9:1b:fe:bb:03:bc:59:47:77:d3:e0:00:
                    3b:df:32:38:b9:f0:dc:eb:e5:8b:7f:5e:3a:7a:9d:
                    da:ff:b9:2a:14:1e:05:a6:6c:8e:fe:cb:46:f2:8d:
                    a8:fd:28:1c:16:58:1a:e3:c0:c5:89:02:26:ff:3c:
                    04:8b:57:ab:b4:88:e3:cf:66:b9:2a:2e:38:5f:fa:
                    e3:1c:a0:1d:cd:10:75:50:a9:76:9a:d0:b0:62:f3:
                    02:3a:31:ec:3b:53:8e:b9:1d:f9:3f:09:03:3f:2e:
                    f0:3b:d5:c7:af:85:41:08:20:b5:90:c7:8b:ef:48:
                    b5:0a:21:9d:57:00:e0:f5:b2:bc:d0:cc:c1:36:8f:
                    66:6b:65:c4:40:7e:3f:af:dc:e7:c7:a4:cc:03:aa:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:ED:2B:88:39:C6:6D:D4:B6:87:44:54:A4:C0:30:1E:78:CD:D4:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9b5261b-1ce5-40d8-be25-cf3339b06ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ea0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b4:be:75:a6:c4:cc:ee:6a:40:6e:ce:e9:13:f3:ec:76:f5:f6:
         4a:6e:5e:de:2c:15:10:2f:a1:bc:9a:3c:c7:18:da:73:1b:ee:
         f8:3d:34:aa:f0:69:de:b1:cf:7f:f4:ed:d4:87:68:cc:7f:8e:
         8b:e8:dd:98:2c:3c:4a:b7:10:68:ea:a1:c3:b9:79:30:8d:44:
         dc:a2:90:33:d4:47:f5:03:31:8d:b2:4e:86:96:ad:0f:d2:8f:
         a0:ed:2c:16:f9:54:99:c0:a2:0c:f1:71:ee:48:1f:b0:76:36:
         0f:c6:a9:e3:c3:d2:3d:a5:67:1b:86:5f:ee:37:89:fe:6d:9c:
         23:72:06:ce:38:05:8e:2d:35:8d:db:f8:19:9b:72:53:c5:6b:
         70:e2:c1:e6:c4:20:fb:93:58:a5:48:0d:3a:f3:e9:cb:63:bf:
         33:07:ab:b0:96:07:df:c9:87:0e:71:02:b5:d2:24:c4:f9:89:
         8d:93:3c:39:9e:32:a2:41:91:db:45:3f:4b:2f:f4:ed:08:40:
         ec:ca:47:54:04:b3:6f:7b:41:62:cf:ae:54:ac:2b:ef:d7:db:
         9e:ae:c3:ea:2b:90:11:80:9d:56:8d:c4:10:97:03:c4:90:60:
         0a:4b:7d:10:5b:3e:d6:4c:83:fc:6e:8e:0d:f9:1d:14:e0:0f:
         d3:00:30:34
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHysDtemL0gs+HAG3+o5wUzv8KWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDA1MDA5WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MGIxYjdiNTRjZjdjYzYxMTM5MmM1ZThhYTNlNWIzOTVl
OWJjMGIyZTJiYTc5ZGU4YjQ5ODY4MWQwMmFkNDk4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDRntE5c6TvINXeP3LhTzOQzgDZtaeXKurVQFJiMhKTX/k
Kl3SAGicIFP5Dqm2mQpK23VdrmN2KT4M09ONsfM/BoVhEU/ykvwf+cub7q77gKf4
WK/TwmGWpfayRxsKCAMjJXo2uIdWmbYC4ekb/rsDvFlHd9PgADvfMji58Nzr5Yt/
Xjp6ndr/uSoUHgWmbI7+y0byjaj9KBwWWBrjwMWJAib/PASLV6u0iOPPZrkqLjhf
+uMcoB3NEHVQqXaa0LBi8wI6Mew7U465Hfk/CQM/LvA71cevhUEIILWQx4vvSLUK
IZ1XAOD1srzQzME2j2ZrZcRAfj+v3OfHpMwDqjr/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxe0riDnGbdS2h0RUpMAwHnjN1EQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I5YjUyNjFiLTFjZTUtNDBkOC1iZTI1LWNmMzMzOWIwNmRkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPqAwDQYJKoZIhvcNAQELBQADggEBALS+dabEzO5qQG7O6RPz7Hb1
9kpuXt4sFRAvobyaPMcY2nMb7vg9NKrwad6xz3/07dSHaMx/jovo3ZgsPEq3EGjq
ocO5eTCNRNyikDPUR/UDMY2yToaWrQ/Sj6DtLBb5VJnAogzxce5IH7B2Ng/GqePD
0j2lZxuGX+43if5tnCNyBs44BY4tNY3b+BmbclPFa3DiwebEIPuTWKVIDTrz6ctj
vzMHq7CWB9/Jhw5xArXSJMT5iY2TPDmeMqJBkdtFP0sv9O0IQOzKR1QEs297QWLP
rlSsK+/X256uw+orkBGAnVaNxBCXA8SQYApLfRBbPtZMg/xujg35HRTgD9MAMDQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:46 2026 by rpki-client