Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1840c3a7-092b-4059-885e-f6071256ec2a.roa
File:                     1840c3a7-092b-4059-885e-f6071256ec2a.roa (raw, json)
Hash identifier:          kyhn9BEJqlAIeROZjtJLWeh/C3nrx9jrfeeIf71p+yY=
Subject key identifier:   79:63:39:82:F9:AB:23:5D:0E:61:DF:F7:8C:AF:58:C8:83:CA:1D:20
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0F8268CC5244E8F1196431864CD8FC6B71C73F3B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1840c3a7-092b-4059-885e-f6071256ec2a.roa
Signing time:             Mon 04 May 2026 07:10:05 +0000
ROA not before:           Mon 04 May 2026 07:10:05 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3aa8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:82:68:cc:52:44:e8:f1:19:64:31:86:4c:d8:fc:6b:71:c7:3f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:10:05 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=ca329e727b23f3e7dbfe0bd67a3dd3cf3aecb533dfe737bce8193565642a7c03, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:e9:47:f3:d9:13:05:57:59:a9:bf:45:89:
                    01:39:5a:f3:50:7e:19:5b:21:9f:19:88:4b:2e:17:
                    aa:eb:eb:08:1d:7a:b8:17:7a:23:fc:41:e7:45:f3:
                    18:33:75:79:e9:93:72:07:cd:2b:6e:47:2e:e1:b0:
                    a4:ec:44:80:7b:ff:0e:22:46:9f:6c:09:5b:db:49:
                    7c:d0:0d:c1:99:30:03:28:38:c5:26:cd:8e:73:2e:
                    ac:70:eb:e9:69:8d:93:06:f4:fe:f5:fc:1e:70:1f:
                    43:d6:e9:55:83:6e:f8:f5:88:15:32:b6:46:fe:f4:
                    7a:18:92:21:10:ec:76:c4:8c:31:5d:b2:51:d5:c6:
                    6e:a3:36:6b:b6:45:79:8d:a5:72:4b:d2:7a:a2:ed:
                    c6:69:87:91:5e:09:ce:4e:d3:c0:d8:a7:de:25:2e:
                    a3:60:a6:9f:2d:26:10:b8:d2:3b:50:da:2a:c9:00:
                    6e:d8:86:84:11:2c:fe:d3:cc:d2:4e:90:a1:04:d1:
                    bd:f0:7a:69:b2:fc:6e:81:9f:37:50:5f:61:1e:b6:
                    6d:8c:eb:d0:e4:ee:ef:05:b1:91:23:69:e4:f7:86:
                    2b:e8:f8:99:93:95:5a:9d:3f:33:ca:0c:cc:40:a8:
                    2f:79:08:3c:a6:04:54:94:58:7a:4f:78:87:2e:12:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:39:82:F9:AB:23:5D:0E:61:DF:F7:8C:AF:58:C8:83:CA:1D:20
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1840c3a7-092b-4059-885e-f6071256ec2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3aa8::/46

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:9d:31:17:ad:98:aa:a3:16:47:9f:47:f2:2b:b2:f9:c8:
         b7:28:8d:d3:35:98:81:86:85:55:14:7b:ba:36:1a:3e:8f:50:
         9e:7e:c5:c5:14:98:6e:90:e2:a0:fc:84:66:30:bd:a3:c7:9f:
         c2:87:6b:2b:52:6a:3a:38:e2:b6:23:c1:cf:b9:28:bb:d8:2a:
         fe:8e:03:46:5e:4b:2e:4e:c4:87:31:55:3f:ba:14:d7:40:ef:
         85:e8:f6:7e:40:f1:05:b5:16:2b:90:91:45:15:5b:ce:dd:b3:
         cd:d1:30:0e:d6:b1:b3:cb:90:2d:c7:e2:f1:ff:54:98:98:d6:
         74:49:35:cb:aa:ec:f0:66:81:fa:8e:da:b1:43:56:2b:47:b2:
         9e:d1:ab:f3:d6:43:b5:68:a3:1a:4c:e9:bc:ee:1c:15:d9:ca:
         95:46:8d:2e:ff:2e:7e:08:d1:8a:83:75:62:fb:7e:97:f5:bb:
         30:85:dc:db:d6:6c:f6:22:c4:5e:25:81:91:f8:65:44:46:c8:
         35:6d:0c:63:81:2d:d2:b7:eb:61:ee:8e:a8:5c:7d:74:d5:c4:
         97:1a:8b:3e:2b:be:96:91:7e:f3:d9:08:69:5c:3e:c4:3d:fc:
         0d:cd:69:4a:a7:2b:c5:e6:1d:0c:66:38:59:fa:f1:9a:1e:10:
         b3:0e:f4:e8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD4JozFJE6PEZZDGGTNj8a3HHPzswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDcxMDA1WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTMyOWU3MjdiMjNmM2U3ZGJmZTBiZDY3YTNkZDNjZjNh
ZWNiNTMzZGZlNzM3YmNlODE5MzU2NTY0MmE3YzAzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJA+lH89kTBVdZqb9FiQE5WvNQfhlbIZ8ZiEsuF6rr6wgd
ergXeiP8QedF8xgzdXnpk3IHzStuRy7hsKTsRIB7/w4iRp9sCVvbSXzQDcGZMAMo
OMUmzY5zLqxw6+lpjZMG9P71/B5wH0PW6VWDbvj1iBUytkb+9HoYkiEQ7HbEjDFd
slHVxm6jNmu2RXmNpXJL0nqi7cZph5FeCc5O08DYp94lLqNgpp8tJhC40jtQ2irJ
AG7YhoQRLP7TzNJOkKEE0b3wemmy/G6BnzdQX2Eetm2M69Dk7u8FsZEjaeT3hivo
+JmTlVqdPzPKDMxAqC95CDymBFSUWHpPeIcuEpJ1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUeWM5gvmrI10OYd/3jK9YyIPKHSAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE4NDBjM2E3LTA5MmItNDA1OS04ODVlLWY2MDcxMjU2ZWMyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOqgwDQYJKoZIhvcNAQELBQADggEBAKs9nTEXrZiqoxZHn0fyK7L5
yLcojdM1mIGGhVUUe7o2Gj6PUJ5+xcUUmG6Q4qD8hGYwvaPHn8KHaytSajo44rYj
wc+5KLvYKv6OA0ZeSy5OxIcxVT+6FNdA74Xo9n5A8QW1FiuQkUUVW87ds83RMA7W
sbPLkC3H4vH/VJiY1nRJNcuq7PBmgfqO2rFDVitHsp7Rq/PWQ7VooxpM6bzuHBXZ
ypVGjS7/Ln4I0YqDdWL7fpf1uzCF3NvWbPYixF4lgZH4ZURGyDVtDGOBLdK362Hu
jqhcfXTVxJcaiz4rvpaRfvPZCGlcPsQ9/A3NaUqnK8XmHQxmOFn68ZoeELMO9Og=
-----END CERTIFICATE-----
Generated at Wed May 13 03:09:28 2026 by rpki-client