Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa
File:                     37ffd7d2-2c93-4d95-addd-cab33737a37e.roa (raw, json)
Hash identifier:          SVZl77UF2s9YbUjaLZxLgA4MpUfjOfnkjhz5PICze+0=
Subject key identifier:   0C:36:D9:63:FF:1F:9F:92:F3:22:77:CD:FA:43:80:0C:36:11:30:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       764D59373F78AF2F8E48C4FC8A75E8EA7E9A9F0A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa
Signing time:             Mon 22 Jun 2026 01:20:46 +0000
ROA not before:           Mon 22 Jun 2026 01:20:46 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:118f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4d:59:37:3f:78:af:2f:8e:48:c4:fc:8a:75:e8:ea:7e:9a:9f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 01:20:46 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=a2e41abc9d6719f3023807602fb862376c3884a98c91479cde9e4bca4e159aa6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:49:2f:8a:39:6e:a5:30:a7:8b:6c:d0:7c:
                    95:db:a6:bf:69:23:24:d3:3c:8c:a3:d8:c7:5a:82:
                    3e:0f:01:f2:30:49:03:9f:45:2c:b8:6e:68:fe:47:
                    8c:e3:b7:8c:de:6d:44:63:ac:7b:5c:f8:13:91:06:
                    13:bb:88:dd:62:cd:3e:35:14:f0:0d:7e:6f:e8:6b:
                    54:c8:64:60:28:23:5c:f2:c5:e7:c5:38:b4:9a:df:
                    06:e7:97:f8:98:2c:3d:b6:c3:85:db:3a:23:71:6b:
                    94:1a:c0:00:f3:71:1c:41:47:e9:30:07:e7:ba:c2:
                    48:41:cf:02:71:96:57:4c:aa:a6:e4:1e:8d:f2:06:
                    62:ef:64:a9:6a:90:cc:d5:da:24:62:5e:4a:c4:73:
                    c9:34:88:31:30:bb:c2:43:6a:85:e4:1b:33:ee:f7:
                    a2:19:94:fc:a2:a6:a6:e8:1d:03:93:2d:f7:66:70:
                    e5:4d:8b:c7:53:eb:7f:ab:32:43:bc:df:06:04:3e:
                    41:9d:67:89:e1:1c:79:7b:8d:ff:7d:d3:01:a2:a6:
                    f5:9a:a3:e3:a1:b7:a8:ae:00:7b:e4:aa:41:cb:f8:
                    0d:b6:15:c7:32:a8:fe:a5:af:76:8f:9f:60:5d:e4:
                    d8:a4:6e:79:e7:a0:72:05:16:f1:26:f9:12:33:73:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:36:D9:63:FF:1F:9F:92:F3:22:77:CD:FA:43:80:0C:36:11:30:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:118f::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:8e:4c:13:67:31:67:b0:a4:9b:b7:b0:59:5b:cb:a6:7d:
         66:64:2f:64:54:6c:51:bb:98:3f:a8:f0:d0:f9:22:40:40:97:
         8b:e3:46:71:f7:00:d6:ca:1b:c5:d7:4f:85:7c:a0:87:95:f5:
         ae:0e:94:98:2e:aa:ab:da:b6:a5:b0:67:be:d4:a2:5c:2a:75:
         f9:74:0f:c6:62:1a:82:6e:c2:87:0d:4a:d8:19:3a:7a:30:b3:
         f5:29:53:0c:79:47:f3:2d:4a:8b:94:72:7f:9d:57:dd:3a:7e:
         b9:40:fd:e0:16:f0:67:13:c5:ee:3a:62:9b:71:50:56:20:41:
         a5:14:18:09:63:77:8b:38:27:e2:80:a9:44:ce:eb:60:2a:35:
         13:4c:41:a4:35:c4:a2:73:3f:a8:a7:01:3e:ad:e4:f8:29:94:
         0d:0d:52:f2:67:1d:43:f5:1c:43:fc:85:cf:c2:03:51:8d:db:
         54:8b:91:df:45:50:cb:39:ff:c7:50:c6:94:2b:56:0d:98:f5:
         e0:a4:c9:ba:75:b1:5f:25:5e:20:3b:95:21:1a:7e:a5:2d:41:
         a0:a0:fb:01:1c:68:e9:34:90:d3:07:9d:c8:17:b5:8e:90:80:
         c5:9c:29:e3:39:c8:40:90:dc:61:3f:c0:6c:b4:68:18:ad:80:
         1c:cc:10:30
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdk1ZNz94ry+OSMT8inXo6n6anwowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDEyMDQ2WhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmU0MWFiYzlkNjcxOWYzMDIzODA3NjAyZmI4NjIzNzZj
Mzg4NGE5OGM5MTQ3OWNkZTllNGJjYTRlMTU5YWE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtlUkvijlupTCni2zQfJXbpr9pIyTTPIyj2Mdagj4PAfIw
SQOfRSy4bmj+R4zjt4zebURjrHtc+BORBhO7iN1izT41FPANfm/oa1TIZGAoI1zy
xefFOLSa3wbnl/iYLD22w4XbOiNxa5QawADzcRxBR+kwB+e6wkhBzwJxlldMqqbk
Ho3yBmLvZKlqkMzV2iRiXkrEc8k0iDEwu8JDaoXkGzPu96IZlPyipqboHQOTLfdm
cOVNi8dT63+rMkO83wYEPkGdZ4nhHHl7jf990wGipvWao+Oht6iuAHvkqkHL+A22
FccyqP6lr3aPn2Bd5NikbnnnoHIFFvEm+RIzc91pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDDbZY/8fn5LzInfN+kOADDYRMIAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM3ZmZkN2QyLTJjOTMtNGQ5NS1hZGRkLWNhYjMzNzM3YTM3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEY8wDQYJKoZIhvcNAQELBQADggEBABOljkwTZzFnsKSbt7BZW8um
fWZkL2RUbFG7mD+o8ND5IkBAl4vjRnH3ANbKG8XXT4V8oIeV9a4OlJguqqvatqWw
Z77Uolwqdfl0D8ZiGoJuwocNStgZOnows/UpUwx5R/MtSouUcn+dV906frlA/eAW
8GcTxe46YptxUFYgQaUUGAljd4s4J+KAqUTO62AqNRNMQaQ1xKJzP6inAT6t5Pgp
lA0NUvJnHUP1HEP8hc/CA1GN21SLkd9FUMs5/8dQxpQrVg2Y9eCkybp1sV8lXiA7
lSEafqUtQaCg+wEcaOk0kNMHncgXtY6QgMWcKeM5yECQ3GE/wGy0aBitgBzMEDA=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:00:10 2026 by rpki-client