Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bee09d7f-dd01-4e89-ae26-f506592c86dc.roa
File:                     bee09d7f-dd01-4e89-ae26-f506592c86dc.roa (raw, json)
Hash identifier:          EBiFm6KK5gwY8SPFsIsg3YrMFMnUihCPRk5pf8/g7vI=
Subject key identifier:   0A:F9:F5:D2:9A:48:0E:26:11:4E:DF:DA:48:53:9F:23:DD:24:F7:DB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1AAC97F426FEFB467C0C560E6A2DAE0B4E25FDC9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bee09d7f-dd01-4e89-ae26-f506592c86dc.roa
Signing time:             Mon 22 Jun 2026 00:41:39 +0000
ROA not before:           Mon 22 Jun 2026 00:41:39 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1237::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ac:97:f4:26:fe:fb:46:7c:0c:56:0e:6a:2d:ae:0b:4e:25:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 00:41:39 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=01a454018de5045afbbd866fe408f0f46656348f023141a4f28b1f3fad883272, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:c9:9e:96:79:3f:bd:3a:70:e7:95:2c:6f:
                    53:d3:22:d3:ca:aa:dc:b4:96:6f:98:af:b2:49:6a:
                    0a:63:d0:af:a0:28:11:3c:94:3c:5a:b0:b3:d3:89:
                    ca:d0:4b:ab:01:12:3d:79:3a:c7:76:60:58:9a:a1:
                    b3:99:88:12:27:e7:26:b2:1c:bf:3c:ee:c6:f7:36:
                    24:4b:d3:ac:e8:6a:9e:ac:94:d7:1b:4f:57:49:45:
                    59:9f:70:85:e1:6f:f3:6b:a2:9d:fd:e6:39:69:e0:
                    1b:7c:95:28:32:b0:c2:3a:bb:f6:4b:1c:d2:30:34:
                    97:a8:51:60:d0:98:cd:80:9a:a7:98:6e:84:27:e8:
                    78:69:2d:cd:9a:a9:e3:53:60:92:67:b5:e2:a0:9e:
                    d7:d2:ec:bb:3e:f6:7f:03:ef:14:2f:eb:73:1d:d5:
                    3b:d4:0f:fd:39:1d:2b:31:69:b7:2a:bf:35:0f:05:
                    a3:3e:42:77:21:fa:9a:ce:40:1e:0d:e8:84:fe:7f:
                    af:46:bf:1a:a5:aa:94:3f:a6:b0:4b:1e:90:8d:ca:
                    80:4b:03:2e:61:b3:83:cf:78:d8:1e:23:43:aa:eb:
                    8c:87:d5:64:1c:ce:7e:5e:3f:1d:16:06:7b:00:ec:
                    6d:dc:5d:e8:69:97:66:3a:3c:1e:4d:17:52:d8:ab:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F9:F5:D2:9A:48:0E:26:11:4E:DF:DA:48:53:9F:23:DD:24:F7:DB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bee09d7f-dd01-4e89-ae26-f506592c86dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1237::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:14:92:ff:fc:c6:ef:f6:a5:68:7f:e1:72:09:aa:d8:35:
         20:c6:99:2e:e2:9f:9e:9d:3b:a3:0b:fe:bf:ad:51:a2:43:bc:
         09:ec:da:16:f6:98:da:19:63:a1:66:1d:e2:2b:1f:47:f0:f5:
         2b:20:6c:95:8f:dc:eb:c1:6c:31:a7:28:d2:05:2e:74:ac:f9:
         13:91:71:e7:88:6e:69:c7:36:f3:b6:ab:24:7a:35:0f:f7:b6:
         db:f5:b5:0b:8c:68:18:3a:63:45:e9:88:c7:aa:45:82:0b:dc:
         17:84:45:50:e4:e9:d7:54:34:d0:d0:0a:4a:6f:eb:8b:00:41:
         b4:b3:0b:24:9d:53:6d:09:5f:75:1d:7c:e0:59:e9:51:17:8a:
         34:ec:5b:94:8d:6b:2b:0b:bc:e1:ee:4e:72:68:e7:18:d5:9c:
         27:2d:de:c3:a8:29:0d:14:c7:a8:d5:84:06:86:09:0d:62:39:
         16:22:10:07:95:61:d4:57:66:91:7a:30:63:d8:09:33:a8:6c:
         90:9a:b4:36:58:ab:0c:ff:23:d4:6b:92:79:17:35:68:64:eb:
         ec:35:f1:9e:7b:d4:5f:03:35:1d:ad:92:74:c0:02:bd:5a:a2:
         62:7e:2c:98:ca:71:14:a2:5f:ed:88:02:34:29:bd:8b:50:59:
         a2:8b:79:21
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGqyX9Cb++0Z8DFYOai2uC04l/ckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDA0MTM5WhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMWE0NTQwMThkZTUwNDVhZmJiZDg2NmZlNDA4ZjBmNDY2
NTYzNDhmMDIzMTQxYTRmMjhiMWYzZmFkODgzMjcyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ/8melnk/vTpw55Usb1PTItPKqty0lm+Yr7JJagpj0K+g
KBE8lDxasLPTicrQS6sBEj15Osd2YFiaobOZiBIn5yayHL887sb3NiRL06zoap6s
lNcbT1dJRVmfcIXhb/Nrop395jlp4Bt8lSgysMI6u/ZLHNIwNJeoUWDQmM2AmqeY
boQn6HhpLc2aqeNTYJJnteKgntfS7Ls+9n8D7xQv63Md1TvUD/05HSsxabcqvzUP
BaM+Qnch+prOQB4N6IT+f69GvxqlqpQ/prBLHpCNyoBLAy5hs4PPeNgeI0Oq64yH
1WQczn5ePx0WBnsA7G3cXehpl2Y6PB5NF1LYqxqfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCvn10ppIDiYRTt/aSFOfI90k99swHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JlZTA5ZDdmLWRkMDEtNGU4OS1hZTI2LWY1MDY1OTJjODZkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEjcwDQYJKoZIhvcNAQELBQADggEBAANrFJL//Mbv9qVof+FyCarY
NSDGmS7in56dO6ML/r+tUaJDvAns2hb2mNoZY6FmHeIrH0fw9SsgbJWP3OvBbDGn
KNIFLnSs+RORceeIbmnHNvO2qyR6NQ/3ttv1tQuMaBg6Y0XpiMeqRYIL3BeERVDk
6ddUNNDQCkpv64sAQbSzCySdU20JX3UdfOBZ6VEXijTsW5SNaysLvOHuTnJo5xjV
nCct3sOoKQ0Ux6jVhAaGCQ1iORYiEAeVYdRXZpF6MGPYCTOobJCatDZYqwz/I9Rr
knkXNWhk6+w18Z571F8DNR2tknTAAr1aomJ+LJjKcRSiX+2IAjQpvYtQWaKLeSE=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:01:28 2026 by rpki-client