Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b7bfc7-48ed-4a37-b1c5-b638d134a608.roa
File:                     c5b7bfc7-48ed-4a37-b1c5-b638d134a608.roa (raw, json)
Hash identifier:          36FBoY7EOGN1F7IUyIDjrkr5wpxkd5wKvcooMw4Lq6w=
Subject key identifier:   54:58:2E:FB:F6:C7:4D:53:09:C8:D2:96:B3:D2:F7:2E:AC:21:CA:89
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A88C52927F2E15CB5ADEDBB9BB3E92252F6331F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b7bfc7-48ed-4a37-b1c5-b638d134a608.roa
Signing time:             Thu 23 Jul 2026 01:51:31 +0000
ROA not before:           Thu 23 Jul 2026 01:51:31 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:349e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:88:c5:29:27:f2:e1:5c:b5:ad:ed:bb:9b:b3:e9:22:52:f6:33:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 01:51:31 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=05ac6ef9b1448ee4cb1ba2921cc92569c49c1adbd9b64055bc04ad46463b8961, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:54:1a:63:5d:02:eb:3c:d5:e8:30:f2:3a:
                    ce:0e:e8:73:9b:de:83:b2:0c:f9:d5:f0:2a:b7:d1:
                    73:96:fe:57:60:ab:f9:e5:74:7c:af:19:8b:be:0f:
                    fd:f3:be:72:1b:b1:a0:87:06:26:85:ab:52:b7:39:
                    91:55:c4:7c:cb:98:b0:53:63:77:30:c3:9c:8d:10:
                    14:bc:05:c1:68:41:d7:d3:9c:77:74:87:6b:4f:ce:
                    62:1d:23:78:6f:02:0a:f7:3c:38:c8:42:d3:04:a2:
                    7d:2f:8d:59:9b:67:dd:b4:80:b6:29:15:91:a0:75:
                    24:18:36:28:59:44:9d:e6:c6:4b:77:1b:be:a9:ea:
                    08:29:94:b0:13:fc:76:d8:7e:62:dc:c9:d7:a4:4e:
                    6a:c4:43:76:ad:82:92:4c:f7:91:29:c4:45:3a:09:
                    11:81:39:32:d3:f5:cb:c0:7f:86:b4:05:be:d0:5d:
                    80:b6:ab:19:a9:25:00:bf:ba:95:e8:24:3a:2e:25:
                    39:ff:d9:82:b8:ea:c0:7c:bd:b3:0d:23:a6:5c:42:
                    d2:b5:6c:1f:37:b1:a2:0c:d2:5f:ef:ae:c3:0f:92:
                    c0:62:d1:78:70:e8:37:05:f8:66:03:6a:dc:32:e5:
                    14:7f:1f:ce:ee:16:ef:4d:39:84:bc:60:a1:27:e2:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:2E:FB:F6:C7:4D:53:09:C8:D2:96:B3:D2:F7:2E:AC:21:CA:89
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b7bfc7-48ed-4a37-b1c5-b638d134a608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:349e::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:eb:67:8c:57:6b:cc:93:3b:55:e5:dc:cd:b0:fd:6a:6d:
         3b:6d:bb:24:d6:3d:97:58:d8:2f:af:75:4d:84:eb:99:d1:60:
         c2:87:a5:61:b7:c9:40:be:5e:37:a6:07:bc:11:d1:4e:83:75:
         b5:fa:01:7b:81:a6:f3:f1:90:ca:bf:42:10:b9:75:55:3a:b2:
         db:ff:d9:b9:d7:cf:57:b2:6f:9c:88:62:6d:26:0c:31:8b:57:
         68:dd:00:bf:93:02:ce:52:ec:e6:25:0a:be:3b:ce:d9:8d:7a:
         7f:e3:b2:62:ef:c7:61:4b:15:86:4c:91:23:a1:c3:a6:19:ef:
         b2:bb:57:60:0d:9a:00:d9:63:46:86:b2:81:27:08:f8:72:52:
         32:fe:8a:68:e6:f1:d4:81:bb:8d:1b:36:8d:24:52:ca:9f:0d:
         7d:50:9e:78:17:1c:cc:fc:4a:b7:8d:95:97:18:0d:ca:ff:01:
         bf:f0:da:3a:f6:68:71:93:f2:b5:a9:e3:49:90:68:d3:0a:25:
         6b:10:89:18:bc:91:83:0e:33:14:2c:08:17:c4:36:de:c1:94:
         02:39:46:a3:46:5c:7f:ed:4e:ff:92:9a:18:55:36:ec:be:99:
         4d:7d:78:ab:00:68:e0:35:ea:27:46:97:ca:df:31:0e:cb:fa:
         e3:0d:6e:dd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWojFKSfy4Vy1re27m7PpIlL2Mx8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDE1MTMxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNWFjNmVmOWIxNDQ4ZWU0Y2IxYmEyOTIxY2M5MjU2OWM0
OWMxYWRiZDliNjQwNTViYzA0YWQ0NjQ2M2I4OTYxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZK1QaY10C6zzV6DDyOs4O6HOb3oOyDPnV8Cq30XOW/ldg
q/nldHyvGYu+D/3zvnIbsaCHBiaFq1K3OZFVxHzLmLBTY3cww5yNEBS8BcFoQdfT
nHd0h2tPzmIdI3hvAgr3PDjIQtMEon0vjVmbZ920gLYpFZGgdSQYNihZRJ3mxkt3
G76p6ggplLAT/HbYfmLcydekTmrEQ3atgpJM95EpxEU6CRGBOTLT9cvAf4a0Bb7Q
XYC2qxmpJQC/upXoJDouJTn/2YK46sB8vbMNI6ZcQtK1bB83saIM0l/vrsMPksBi
0Xhw6DcF+GYDatwy5RR/H87uFu9NOYS8YKEn4ibjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUVFgu+/bHTVMJyNKWs9L3LqwhyokwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M1YjdiZmM3LTQ4ZWQtNGEzNy1iMWM1LWI2MzhkMTM0YTYwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANJ4wDQYJKoZIhvcNAQELBQADggEBAJdv62eMV2vMkztV5dzNsP1q
bTttuyTWPZdY2C+vdU2E65nRYMKHpWG3yUC+XjemB7wR0U6DdbX6AXuBpvPxkMq/
QhC5dVU6stv/2bnXz1eyb5yIYm0mDDGLV2jdAL+TAs5S7OYlCr47ztmNen/jsmLv
x2FLFYZMkSOhw6YZ77K7V2ANmgDZY0aGsoEnCPhyUjL+imjm8dSBu40bNo0kUsqf
DX1QnngXHMz8SreNlZcYDcr/Ab/w2jr2aHGT8rWp40mQaNMKJWsQiRi8kYMOMxQs
CBfENt7BlAI5RqNGXH/tTv+SmhhVNuy+mU19eKsAaOA16idGl8rfMQ7L+uMNbt0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:43 2026 by rpki-client