Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09052582-9b73-4ef6-8c38-ffc493ee8b70.roa
File:                     09052582-9b73-4ef6-8c38-ffc493ee8b70.roa (raw, json)
Hash identifier:          U9/S1v7FcKKiSkzH4OCC8xbDbYQ6sn7Pf6qGnv01RKY=
Subject key identifier:   52:28:2B:60:10:36:AE:3E:8A:D3:49:61:0B:A2:9D:12:3C:29:BB:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F7D5740FB0C91BF88DF28C96713E69F1746A467
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09052582-9b73-4ef6-8c38-ffc493ee8b70.roa
Signing time:             Mon 04 May 2026 07:30:08 +0000
ROA not before:           Mon 04 May 2026 07:30:08 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3818::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7d:57:40:fb:0c:91:bf:88:df:28:c9:67:13:e6:9f:17:46:a4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:30:08 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=afdae51ca66ab610ec0d14dcdfe25e2289ef619301dfa6e3aee36b5fb9110a4a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:60:aa:86:bf:58:44:76:42:bd:5e:ad:5a:
                    50:12:d4:1a:06:54:02:f8:b9:1a:88:f7:52:e7:e4:
                    2a:ba:69:e6:33:d3:ef:46:fa:ea:fc:ac:61:c3:ab:
                    3b:6b:b5:c8:a5:32:4b:22:c8:b2:1d:8e:29:7f:b8:
                    0e:4e:8a:3d:33:a6:d5:4f:d9:6a:f9:ba:86:62:1e:
                    4a:06:54:d4:9c:4a:b8:14:87:4c:d2:16:a0:3d:17:
                    60:e7:67:56:55:91:1b:55:dd:6a:a9:6b:86:d2:40:
                    7f:59:be:d8:db:2b:ff:cb:ca:0d:b7:86:7f:5f:15:
                    3d:f8:85:7e:16:35:4b:bf:c1:ed:76:0d:2e:f8:79:
                    a4:f3:dd:03:42:d7:07:23:e9:f1:e9:7b:a0:29:f5:
                    dc:be:89:9d:02:9f:84:c0:65:d5:f2:30:bb:0b:13:
                    d4:94:0c:78:32:c1:43:86:62:af:23:19:b8:37:a6:
                    06:61:47:54:6b:07:21:06:02:5a:64:fa:6c:53:be:
                    d8:44:cb:83:0c:36:8b:64:0b:f5:10:fe:96:0d:13:
                    cb:5f:1f:ff:f1:5f:36:a4:62:01:5f:1b:db:b3:88:
                    40:59:63:74:54:02:8d:2b:d2:5a:00:88:63:60:0d:
                    06:5b:e3:7e:7d:8c:e3:a5:fe:35:58:86:6c:bc:fe:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:2B:60:10:36:AE:3E:8A:D3:49:61:0B:A2:9D:12:3C:29:BB:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09052582-9b73-4ef6-8c38-ffc493ee8b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3818::/46

    Signature Algorithm: sha256WithRSAEncryption
         54:1d:60:9b:98:41:5d:ce:85:53:2a:12:7e:86:62:6f:6b:57:
         36:4a:0b:ec:1c:83:88:51:e6:61:44:34:6c:1c:3b:0c:57:06:
         b0:89:3b:df:c6:b4:ae:b6:80:ad:02:b8:b7:2c:d7:82:2f:10:
         20:7f:ff:1c:13:10:f7:e5:d1:86:ad:ce:e6:1e:a0:e2:02:00:
         0b:0c:32:7a:ef:a9:75:88:67:3d:fa:67:2d:81:8a:59:18:98:
         ee:36:01:3c:37:93:89:c5:2f:07:2d:17:e6:7a:a6:fa:7d:ef:
         e9:41:28:f0:2b:e7:6c:dd:5c:3a:71:0e:8e:30:b9:28:b0:6a:
         d2:14:84:b2:a8:1e:5c:27:be:8c:a4:4c:62:6c:af:4d:06:e3:
         14:c9:7c:55:2f:fa:6b:ac:b6:c0:04:9c:7d:4b:ed:a9:7e:5e:
         31:70:75:ab:a0:68:60:7c:e4:e5:77:27:29:01:4c:78:9b:cc:
         9c:ad:46:45:8b:c2:43:f3:6c:89:52:8f:20:6a:94:d8:6d:01:
         d5:0b:e8:87:af:2b:15:cb:d8:8c:93:c8:5f:7c:88:f6:06:a1:
         6b:e6:3a:c4:ca:b1:b2:eb:62:49:0f:0f:fe:dc:93:a4:dd:65:
         00:dd:f3:b6:85:d1:9e:79:8f:91:3c:02:81:14:52:f0:0e:aa:
         76:fd:98:a7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD31XQPsMkb+I3yjJZxPmnxdGpGcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDczMDA4WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZmRhZTUxY2E2NmFiNjEwZWMwZDE0ZGNkZmUyNWUyMjg5
ZWY2MTkzMDFkZmE2ZTNhZWUzNmI1ZmI5MTEwYTRhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCx5mCqhr9YRHZCvV6tWlAS1BoGVAL4uRqI91Ln5Cq6aeYz
0+9G+ur8rGHDqztrtcilMksiyLIdjil/uA5Oij0zptVP2Wr5uoZiHkoGVNScSrgU
h0zSFqA9F2DnZ1ZVkRtV3Wqpa4bSQH9ZvtjbK//Lyg23hn9fFT34hX4WNUu/we12
DS74eaTz3QNC1wcj6fHpe6Ap9dy+iZ0Cn4TAZdXyMLsLE9SUDHgywUOGYq8jGbg3
pgZhR1RrByEGAlpk+mxTvthEy4MMNotkC/UQ/pYNE8tfH//xXzakYgFfG9uziEBZ
Y3RUAo0r0loAiGNgDQZb4359jOOl/jVYhmy8/thDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUigrYBA2rj6K00lhC6KdEjwpuxwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA5MDUyNTgyLTliNzMtNGVmNi04YzM4LWZmYzQ5M2VlOGI3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOBgwDQYJKoZIhvcNAQELBQADggEBAFQdYJuYQV3OhVMqEn6GYm9r
VzZKC+wcg4hR5mFENGwcOwxXBrCJO9/GtK62gK0CuLcs14IvECB//xwTEPfl0Yat
zuYeoOICAAsMMnrvqXWIZz36Zy2BilkYmO42ATw3k4nFLwctF+Z6pvp97+lBKPAr
52zdXDpxDo4wuSiwatIUhLKoHlwnvoykTGJsr00G4xTJfFUv+mustsAEnH1L7al+
XjFwdaugaGB85OV3JykBTHibzJytRkWLwkPzbIlSjyBqlNhtAdUL6IevKxXL2IyT
yF98iPYGoWvmOsTKsbLrYkkPD/7ck6TdZQDd87aF0Z55j5E8AoEUUvAOqnb9mKc=
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:59 2026 by rpki-client