Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/112aabc8-7aeb-4827-b5d5-da51ea35933a.roa
File:                     112aabc8-7aeb-4827-b5d5-da51ea35933a.roa (raw, json)
Hash identifier:          rQTXhZUVFLIQLA8fQqp3Le3o9nvm5QrvK0TrsU+J6pc=
Subject key identifier:   25:21:8A:78:DB:AE:E5:DD:29:8D:13:C4:22:1B:BE:AF:82:07:03:60
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3987D66518309178C05FD685A017746775D0ECF7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/112aabc8-7aeb-4827-b5d5-da51ea35933a.roa
Signing time:             Mon 04 May 2026 06:10:07 +0000
ROA not before:           Mon 04 May 2026 06:10:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f08::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:87:d6:65:18:30:91:78:c0:5f:d6:85:a0:17:74:67:75:d0:ec:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:10:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=52f5693402b2ecb4711d60282675a471f78cfd312fdd81d580316fb74874e8ed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:e5:fe:22:55:e0:85:6a:4b:a4:d1:84:8c:
                    23:3a:6b:12:5d:8c:ae:3d:ab:f9:93:69:e2:cd:d9:
                    3e:55:59:d0:e1:15:89:3a:6e:54:7b:d4:aa:03:d5:
                    46:7f:4f:e6:5d:eb:09:05:0e:c0:4e:cc:c7:c2:a3:
                    b1:4d:51:e6:eb:cf:50:ae:1c:8b:ef:52:d8:26:53:
                    b9:0f:58:ad:6b:e3:44:fe:66:44:7d:73:0b:9a:22:
                    f9:6f:b6:a2:a8:f1:df:98:a9:49:7b:30:f4:35:47:
                    73:41:b7:10:72:59:84:7a:99:f7:b2:80:9b:df:57:
                    c3:77:ee:e7:76:78:bb:ed:0f:19:17:b4:8d:35:72:
                    8f:73:e0:d7:27:6d:26:49:9f:03:6d:e2:48:c0:88:
                    72:8f:81:62:76:95:57:0b:91:bb:ea:07:08:3b:a5:
                    5c:b2:89:c7:a0:3b:5b:73:d2:cf:b4:ac:a3:89:6d:
                    33:6b:0a:27:60:f9:c7:07:cb:66:82:b6:53:dd:cb:
                    e5:d7:5d:ba:6c:8f:f9:5e:24:b2:e0:79:e5:49:dd:
                    2a:26:2e:e4:65:9c:8e:e9:e6:29:83:2d:e8:b1:3d:
                    2e:5b:22:d3:0d:14:14:b7:0d:28:77:2c:cc:a9:a0:
                    d1:7d:fd:c0:4d:be:07:38:45:7f:99:c2:75:e6:ba:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:21:8A:78:DB:AE:E5:DD:29:8D:13:C4:22:1B:BE:AF:82:07:03:60
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/112aabc8-7aeb-4827-b5d5-da51ea35933a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f08::/45

    Signature Algorithm: sha256WithRSAEncryption
         31:6b:8d:ef:f5:ad:c2:cf:c6:40:9d:99:1d:2e:32:af:f0:cf:
         de:2f:f4:7c:b1:18:f4:df:06:ae:7c:f2:f6:0d:c9:4d:9d:47:
         9b:74:bb:cf:35:07:24:61:55:7a:bb:75:be:b4:ac:02:26:83:
         10:70:c3:14:db:a1:1c:7a:d0:9e:c3:21:0e:9c:70:05:df:1a:
         78:bf:56:b2:c6:c1:be:0f:2f:4c:1b:03:c7:01:8c:59:21:40:
         32:46:cb:97:36:44:43:85:9f:c9:3e:6e:2c:2f:97:35:b5:3c:
         03:0f:a2:8b:5b:0b:1c:ac:67:59:b0:b8:75:2b:10:53:19:8e:
         59:71:f3:96:cd:f6:81:3d:41:3f:e8:07:79:55:6f:ab:55:c9:
         40:01:b1:5a:5a:46:d2:05:db:c8:fd:70:51:ef:b9:0b:f7:c0:
         f7:8d:32:8f:02:c4:64:1c:60:dc:2e:df:70:e1:ab:b0:f5:e9:
         d0:7d:8b:37:b7:17:36:14:02:20:af:b8:6f:fc:4b:52:80:27:
         f6:6f:e1:7d:c9:0a:f9:65:99:b5:21:d6:02:13:72:73:9e:db:
         ab:53:af:de:6c:66:d2:82:1d:21:75:f1:4f:72:7f:57:33:8c:
         51:34:7a:3f:85:af:9b:5e:ea:be:ed:e5:c1:ad:33:73:eb:c8:
         fb:d1:b2:c4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOYfWZRgwkXjAX9aFoBd0Z3XQ7PcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDYxMDA3WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MmY1NjkzNDAyYjJlY2I0NzExZDYwMjgyNjc1YTQ3MWY3
OGNmZDMxMmZkZDgxZDU4MDMxNmZiNzQ4NzRlOGVkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4u+X+IlXghWpLpNGEjCM6axJdjK49q/mTaeLN2T5VWdDh
FYk6blR71KoD1UZ/T+Zd6wkFDsBOzMfCo7FNUebrz1CuHIvvUtgmU7kPWK1r40T+
ZkR9cwuaIvlvtqKo8d+YqUl7MPQ1R3NBtxByWYR6mfeygJvfV8N37ud2eLvtDxkX
tI01co9z4NcnbSZJnwNt4kjAiHKPgWJ2lVcLkbvqBwg7pVyyicegO1tz0s+0rKOJ
bTNrCidg+ccHy2aCtlPdy+XXXbpsj/leJLLgeeVJ3SomLuRlnI7p5imDLeixPS5b
ItMNFBS3DSh3LMypoNF9/cBNvgc4RX+ZwnXmuujJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJSGKeNuu5d0pjRPEIhu+r4IHA2AwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzExMmFhYmM4LTdhZWItNDgyNy1iNWQ1LWRhNTFlYTM1OTMzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPwgwDQYJKoZIhvcNAQELBQADggEBADFrje/1rcLPxkCdmR0uMq/w
z94v9HyxGPTfBq588vYNyU2dR5t0u881ByRhVXq7db60rAImgxBwwxTboRx60J7D
IQ6ccAXfGni/VrLGwb4PL0wbA8cBjFkhQDJGy5c2REOFn8k+biwvlzW1PAMPootb
CxysZ1mwuHUrEFMZjllx85bN9oE9QT/oB3lVb6tVyUABsVpaRtIF28j9cFHvuQv3
wPeNMo8CxGQcYNwu33Dhq7D16dB9ize3FzYUAiCvuG/8S1KAJ/Zv4X3JCvllmbUh
1gITcnOe26tTr95sZtKCHSF18U9yf1czjFE0ej+Fr5te6r7t5cGtM3PryPvRssQ=
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:32 2026 by rpki-client