Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257a5acb-fc18-460a-a85f-88b99d9c8332.roa
File:                     257a5acb-fc18-460a-a85f-88b99d9c8332.roa (raw, json)
Hash identifier:          qdf+pONhi9mm5BxASJesJOjiFhybb69M+EQrm7TvoY0=
Subject key identifier:   91:33:1C:13:C0:54:38:D3:3D:9C:C1:0F:FA:0B:4F:C6:CC:BC:F7:AE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3381250B49426D5E26E31104C20A963A81D2B9A8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257a5acb-fc18-460a-a85f-88b99d9c8332.roa
Signing time:             Mon 04 May 2026 05:20:54 +0000
ROA not before:           Mon 04 May 2026 05:20:54 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:374e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:81:25:0b:49:42:6d:5e:26:e3:11:04:c2:0a:96:3a:81:d2:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 05:20:54 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=5cc7ae501be39235b83c6f84463ef98571a1b457b11ca8cfedd09fbc8b7688e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:23:8b:96:bd:28:bd:e4:45:18:fa:87:9c:85:
                    b5:a3:21:7e:6c:35:99:76:e3:5d:7f:ec:9a:73:12:
                    a5:51:24:18:c6:a6:be:96:c3:4e:18:56:3f:68:30:
                    6a:05:ab:16:87:39:44:f0:c3:1e:bc:5e:31:b1:5e:
                    60:83:25:c9:6d:f3:25:6d:a7:02:72:6d:b4:67:31:
                    d7:93:dd:43:67:68:7b:60:80:5d:78:4f:57:f8:6b:
                    21:51:92:87:2c:23:83:56:da:1f:2e:cc:01:e9:b7:
                    11:fc:76:07:59:a8:e9:b3:06:fd:d7:36:85:7d:41:
                    5c:07:0f:fc:5b:14:d9:27:c5:4f:df:77:c3:69:07:
                    5c:bd:d1:40:b4:2b:50:46:44:93:c8:50:b0:fa:08:
                    ee:c8:f4:a0:b6:b9:ab:f7:ad:95:88:c2:ce:01:7d:
                    8c:32:b5:3f:b6:0c:55:f0:cc:e5:b8:45:0c:3b:a1:
                    03:01:97:f1:21:c0:71:d6:f9:b9:c2:3a:11:3b:c5:
                    3f:24:3d:e9:26:83:16:06:ef:d8:b1:9b:a4:c5:d9:
                    32:0a:26:3f:ac:01:07:db:30:1d:6b:a1:c4:6a:5e:
                    8d:e6:8a:a1:e3:a9:e4:97:04:0b:d3:5c:cb:ff:98:
                    3a:70:7d:df:f4:98:97:30:40:88:3c:d8:6a:e9:02:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:1C:13:C0:54:38:D3:3D:9C:C1:0F:FA:0B:4F:C6:CC:BC:F7:AE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257a5acb-fc18-460a-a85f-88b99d9c8332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:374e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:ec:6d:19:82:37:bc:1f:e8:e8:58:cb:6d:30:5c:05:3f:
         a1:0e:1f:52:80:14:24:00:fa:02:3d:82:27:55:93:91:30:29:
         f8:9a:5e:08:cc:3e:fb:ec:1f:e6:32:dc:e2:22:90:53:46:3d:
         94:65:ad:62:f8:af:d0:e3:81:73:21:2a:17:7c:a5:51:05:80:
         2a:03:6f:f1:e0:51:93:3d:31:8e:70:92:e8:d1:93:cb:70:7f:
         cc:45:b6:57:70:fa:5c:d8:c7:22:68:03:54:1d:c8:12:49:1d:
         52:b8:cf:00:1c:64:99:8f:c6:a0:b3:a8:88:e2:4a:e4:af:ec:
         fc:4c:6f:68:c3:c5:57:f9:96:bf:be:52:8c:80:67:00:e9:55:
         78:f5:c4:a0:bc:2f:05:6f:64:2b:b5:86:d3:43:40:01:67:29:
         89:7b:a2:3d:7d:c6:bb:31:45:cd:19:fb:d0:4e:32:21:a5:61:
         31:9d:70:42:16:85:aa:ae:e1:95:02:f7:70:5c:eb:18:8d:87:
         b3:71:83:df:90:04:ce:82:0d:de:2f:48:3c:b6:88:dd:91:ac:
         d1:01:1d:aa:49:3b:cb:b4:71:c4:ba:bb:83:47:bc:48:42:e6:
         60:34:7d:5d:c1:4c:f3:c3:dd:33:36:4a:2e:c4:d8:a7:18:52:
         91:86:86:eb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM4ElC0lCbV4m4xEEwgqWOoHSuagwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUyMDU0WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1Y2M3YWU1MDFiZTM5MjM1YjgzYzZmODQ0NjNlZjk4NTcx
YTFiNDU3YjExY2E4Y2ZlZGQwOWZiYzhiNzY4OGU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwI4uWvSi95EUY+oechbWjIX5sNZl2411/7JpzEqVRJBjG
pr6Ww04YVj9oMGoFqxaHOUTwwx68XjGxXmCDJclt8yVtpwJybbRnMdeT3UNnaHtg
gF14T1f4ayFRkocsI4NW2h8uzAHptxH8dgdZqOmzBv3XNoV9QVwHD/xbFNknxU/f
d8NpB1y90UC0K1BGRJPIULD6CO7I9KC2uav3rZWIws4BfYwytT+2DFXwzOW4RQw7
oQMBl/EhwHHW+bnCOhE7xT8kPekmgxYG79ixm6TF2TIKJj+sAQfbMB1rocRqXo3m
iqHjqeSXBAvTXMv/mDpwfd/0mJcwQIg82GrpAh1fAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUkTMcE8BUONM9nMEP+gtPxsy8964wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI1N2E1YWNiLWZjMTgtNDYwYS1hODVmLTg4Yjk5ZDljODMzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN04wDQYJKoZIhvcNAQELBQADggEBALNc7G0Zgje8H+joWMttMFwF
P6EOH1KAFCQA+gI9gidVk5EwKfiaXgjMPvvsH+Yy3OIikFNGPZRlrWL4r9DjgXMh
Khd8pVEFgCoDb/HgUZM9MY5wkujRk8twf8xFtldw+lzYxyJoA1QdyBJJHVK4zwAc
ZJmPxqCzqIjiSuSv7PxMb2jDxVf5lr++UoyAZwDpVXj1xKC8LwVvZCu1htNDQAFn
KYl7oj19xrsxRc0Z+9BOMiGlYTGdcEIWhaqu4ZUC93Bc6xiNh7Nxg9+QBM6CDd4v
SDy2iN2RrNEBHapJO8u0ccS6u4NHvEhC5mA0fV3BTPPD3TM2Si7E2KcYUpGGhus=
-----END CERTIFICATE-----
Generated at Wed May 13 03:24:56 2026 by rpki-client