Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/062dd927-b187-47f7-aa58-383ed32ec98b.roa
File:                     062dd927-b187-47f7-aa58-383ed32ec98b.roa (raw, json)
Hash identifier:          M9NvT5nfsKZAJ20c0Rxp25AAQYuCnn13fTiqbPKbObQ=
Subject key identifier:   A9:F2:A7:0F:4F:9F:92:23:1A:A9:E1:31:27:77:84:F8:63:3E:BC:96
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       652090882B573EDEF2509E4E9382DBDA2E1E614A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/062dd927-b187-47f7-aa58-383ed32ec98b.roa
Signing time:             Mon 22 Jun 2026 01:50:37 +0000
ROA not before:           Mon 22 Jun 2026 01:50:37 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:20:90:88:2b:57:3e:de:f2:50:9e:4e:93:82:db:da:2e:1e:61:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:50:37 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=983536d2db75025d6d57665af9f3f98b159bb4d23e3dca8510b9a478bc03e063, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:c4:8e:ca:df:8e:12:55:09:1a:3d:b7:94:
                    91:cc:e8:f7:26:86:72:60:34:ec:2d:12:8c:7e:de:
                    49:9c:c3:04:02:32:d0:18:af:3e:f9:7c:4f:85:46:
                    81:b4:f1:3f:9f:7c:0a:38:86:46:90:16:86:26:8d:
                    f9:bd:26:3e:ea:83:98:0e:fc:36:3f:95:b3:0f:8d:
                    ee:19:09:fa:09:14:9a:88:2d:2b:40:dc:34:fc:0c:
                    6e:20:3c:32:7d:a6:e6:fe:57:d9:e2:31:f1:80:fc:
                    a4:37:46:57:6d:e5:f2:5c:3f:ff:51:fd:03:b1:e5:
                    63:e4:4b:c7:84:88:db:b8:3a:42:89:de:32:2f:af:
                    4f:67:cf:6c:b0:39:03:d4:eb:fd:36:a4:2b:6f:0f:
                    c2:b5:fa:9b:09:69:41:af:91:df:3d:74:b2:9e:1c:
                    ea:5f:b9:2f:e6:45:a4:fe:79:b2:73:42:3d:90:66:
                    6d:44:b6:b4:fe:ee:90:80:d2:46:1c:f8:2c:f0:bf:
                    af:54:97:9a:cc:d6:dd:be:d2:fa:e7:31:c0:10:c4:
                    e0:66:09:3e:c4:d4:8e:5e:8e:1a:64:3c:25:46:60:
                    be:42:be:59:0e:6b:0e:f4:16:a2:78:1e:ef:c8:ac:
                    db:3b:e9:78:e2:41:64:24:40:0b:09:01:c8:c3:4c:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:A7:0F:4F:9F:92:23:1A:A9:E1:31:27:77:84:F8:63:3E:BC:96
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/062dd927-b187-47f7-aa58-383ed32ec98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e24::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:fd:d7:c8:bb:cd:b5:87:95:53:46:8d:ba:b5:09:20:c6:
         7a:11:52:e6:85:b6:bd:04:01:b6:0d:c3:16:9f:9e:ee:07:cd:
         5f:27:f8:6a:24:3f:78:29:06:2a:4f:ce:d6:86:c4:c2:d5:9f:
         13:21:a0:d9:79:56:b2:fe:93:18:94:9a:db:5f:5d:fb:92:7b:
         84:95:cc:a4:3a:06:31:88:93:08:25:55:51:48:f1:8c:c5:2f:
         40:30:9a:1a:12:04:8c:c3:b6:3f:23:40:95:1d:c9:ce:ad:99:
         ec:8b:a0:1e:bd:03:db:d8:17:c0:d4:43:be:fb:06:56:ee:68:
         f5:c5:41:ad:1c:60:0d:8d:26:81:77:f9:79:ee:ab:8d:bd:64:
         23:9c:46:aa:17:45:f2:57:e7:5f:94:42:5d:eb:a8:25:43:67:
         82:1a:63:c7:a6:6e:de:f5:2e:fe:02:09:d0:9f:55:69:30:36:
         5c:23:63:d9:5e:01:10:36:13:fa:a4:f0:ca:bd:50:92:3e:6a:
         99:39:8d:53:df:f0:73:bf:ef:3b:b4:82:eb:74:65:48:a2:fa:
         b5:9a:e7:b6:b5:7f:07:24:37:c2:20:9b:7b:56:1d:ee:ca:0f:
         8b:a4:ef:98:9d:ac:2c:87:99:71:a4:41:2b:d3:93:36:d6:09:
         f6:36:5b:ae
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZSCQiCtXPt7yUJ5Ok4Lb2i4eYUowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDE1MDM3WhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODM1MzZkMmRiNzUwMjVkNmQ1NzY2NWFmOWYzZjk4YjE1
OWJiNGQyM2UzZGNhODUxMGI5YTQ3OGJjMDNlMDYzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy+sSOyt+OElUJGj23lJHM6PcmhnJgNOwtEox+3kmcwwQC
MtAYrz75fE+FRoG08T+ffAo4hkaQFoYmjfm9Jj7qg5gO/DY/lbMPje4ZCfoJFJqI
LStA3DT8DG4gPDJ9pub+V9niMfGA/KQ3Rldt5fJcP/9R/QOx5WPkS8eEiNu4OkKJ
3jIvr09nz2ywOQPU6/02pCtvD8K1+psJaUGvkd89dLKeHOpfuS/mRaT+ebJzQj2Q
Zm1EtrT+7pCA0kYc+Czwv69Ul5rM1t2+0vrnMcAQxOBmCT7E1I5ejhpkPCVGYL5C
vlkOaw70FqJ4Hu/IrNs76XjiQWQkQAsJAcjDTAOlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqfKnD0+fkiMaqeExJ3eE+GM+vJYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA2MmRkOTI3LWIxODctNDdmNy1hYTU4LTM4M2VkMzJlYzk4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHiQwDQYJKoZIhvcNAQELBQADggEBAJf9/dfIu821h5VTRo26tQkg
xnoRUuaFtr0EAbYNwxafnu4HzV8n+GokP3gpBipPztaGxMLVnxMhoNl5VrL+kxiU
mttfXfuSe4SVzKQ6BjGIkwglVVFI8YzFL0AwmhoSBIzDtj8jQJUdyc6tmeyLoB69
A9vYF8DUQ777BlbuaPXFQa0cYA2NJoF3+Xnuq429ZCOcRqoXRfJX51+UQl3rqCVD
Z4IaY8embt71Lv4CCdCfVWkwNlwjY9leARA2E/qk8Mq9UJI+apk5jVPf8HO/7zu0
gut0ZUii+rWa57a1fwckN8Igm3tWHe7KD4uk75idrCyHmXGkQSvTkzbWCfY2W64=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:03:19 2026 by rpki-client