Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30140864-763f-4641-8434-5fd69883db9e.roa
File:                     30140864-763f-4641-8434-5fd69883db9e.roa (raw, json)
Hash identifier:          YYu2jJ66qQ1J6fNxclDvMdH02qGYsvlVZjowqiu8cj0=
Subject key identifier:   7E:DD:15:CD:B0:20:76:4C:55:BC:D7:76:DF:E6:E0:DD:17:09:FA:9C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1759044CD27C73C588EB71755CB4DC93B3A6ECD0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30140864-763f-4641-8434-5fd69883db9e.roa
Signing time:             Mon 04 May 2026 12:20:04 +0000
ROA not before:           Mon 04 May 2026 12:20:04 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:373e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:59:04:4c:d2:7c:73:c5:88:eb:71:75:5c:b4:dc:93:b3:a6:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 12:20:04 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=5ecdcf843bca6e224c4173bb08ee12d3317c2f5340a02dd951c63fefdad1f8e8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:f0:85:5f:64:8e:89:80:5b:b0:5f:44:ef:
                    91:c2:a7:cf:9f:e4:5a:16:19:9a:1a:36:05:8c:dc:
                    01:73:04:6d:b8:b3:88:dc:2a:ef:1c:1d:df:d6:de:
                    bc:5c:49:2b:ee:d7:4e:1c:59:02:87:ef:56:6c:55:
                    cd:ee:6c:b1:c2:cb:31:7c:56:bb:3c:9b:9e:83:7d:
                    cd:df:ff:f9:ef:a2:37:aa:e1:e1:15:c7:90:62:56:
                    b7:6f:22:f1:e1:d2:29:3a:61:c6:04:6b:87:64:db:
                    f9:b0:33:90:80:49:82:84:81:4f:fe:db:ec:66:fc:
                    ab:b0:00:aa:4b:51:3c:d6:e1:b7:e6:4a:13:03:19:
                    5b:5e:6b:e5:28:70:d1:d7:e3:2c:19:3f:77:fa:c9:
                    23:cc:cd:11:61:32:40:37:23:2c:5b:75:b0:32:08:
                    28:16:28:8a:da:08:ab:4d:63:ea:bd:a4:8d:20:b1:
                    60:0c:05:3e:41:41:5a:b9:4d:4c:9e:d2:ad:5f:8f:
                    f8:1d:61:08:f2:e1:40:4b:9c:df:76:c7:45:4f:42:
                    63:ec:dc:e9:56:94:6f:d6:29:b7:02:73:39:29:a2:
                    3d:89:ae:9a:f2:60:c7:a0:92:57:d2:d5:b3:07:9b:
                    fe:e0:e5:cb:65:79:90:2d:87:17:32:05:59:b8:ae:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:15:CD:B0:20:76:4C:55:BC:D7:76:DF:E6:E0:DD:17:09:FA:9C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30140864-763f-4641-8434-5fd69883db9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:373e::/47

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:d7:34:6d:d6:d9:5b:06:b1:1b:5d:70:96:29:a3:d0:18:
         fc:f7:27:14:12:e6:97:8c:6e:f1:ea:06:eb:db:d8:41:94:d9:
         2c:fa:c5:b7:ea:6a:8c:fa:6f:7f:37:cd:50:69:cf:8c:d5:64:
         a8:1e:36:4d:45:ac:83:22:37:ba:6c:44:2c:49:02:e5:55:f0:
         87:39:71:70:fb:e3:bd:f2:f4:d0:f5:5c:ca:d7:d2:84:d5:01:
         53:ab:06:c3:a7:7c:38:9e:b0:7f:66:de:80:ff:c0:82:ac:a3:
         b7:4a:72:44:84:36:13:c0:a5:fe:1c:0f:e9:4f:7d:a1:67:b5:
         82:54:c5:8a:02:bf:48:77:b9:ba:ec:6e:88:7d:9e:ef:91:4c:
         db:54:51:f5:9b:d5:10:c5:f3:0a:24:34:82:11:12:fa:7f:9f:
         6c:9c:20:8e:52:db:1b:3d:85:f4:bc:20:1e:92:a3:8e:d3:85:
         2b:43:c3:af:66:6f:74:88:40:a0:fc:d5:d3:8f:4c:c0:7f:0b:
         e1:a9:e5:2b:c1:ba:98:61:3f:e0:ce:e0:b9:d2:db:2a:f2:3e:
         84:1b:de:c6:1a:04:ef:12:a9:1b:20:20:77:74:41:14:c3:43:
         9a:91:d6:25:71:41:62:99:6b:be:42:f5:32:98:69:30:e0:db:
         54:ad:98:69
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF1kETNJ8c8WI63F1XLTck7Om7NAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTIyMDA0WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZWNkY2Y4NDNiY2E2ZTIyNGM0MTczYmIwOGVlMTJkMzMx
N2MyZjUzNDBhMDJkZDk1MWM2M2ZlZmRhZDFmOGU4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWiPCFX2SOiYBbsF9E75HCp8+f5FoWGZoaNgWM3AFzBG24
s4jcKu8cHd/W3rxcSSvu104cWQKH71ZsVc3ubLHCyzF8Vrs8m56Dfc3f//nvojeq
4eEVx5BiVrdvIvHh0ik6YcYEa4dk2/mwM5CASYKEgU/+2+xm/KuwAKpLUTzW4bfm
ShMDGVtea+UocNHX4ywZP3f6ySPMzRFhMkA3IyxbdbAyCCgWKIraCKtNY+q9pI0g
sWAMBT5BQVq5TUye0q1fj/gdYQjy4UBLnN92x0VPQmPs3OlWlG/WKbcCczkpoj2J
rpryYMegklfS1bMHm/7g5ctleZAthxcyBVm4rol9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUft0VzbAgdkxVvNd23+bg3RcJ+pwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzMwMTQwODY0LTc2M2YtNDY0MS04NDM0LTVmZDY5ODgzZGI5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANz4wDQYJKoZIhvcNAQELBQADggEBAD9B1zRt1tlbBrEbXXCWKaPQ
GPz3JxQS5peMbvHqBuvb2EGU2Sz6xbfqaoz6b383zVBpz4zVZKgeNk1FrIMiN7ps
RCxJAuVV8Ic5cXD7473y9ND1XMrX0oTVAVOrBsOnfDiesH9m3oD/wIKso7dKckSE
NhPApf4cD+lPfaFntYJUxYoCv0h3ubrsboh9nu+RTNtUUfWb1RDF8wokNIIREvp/
n2ycII5S2xs9hfS8IB6So47ThStDw69mb3SIQKD81dOPTMB/C+Gp5SvBuphhP+DO
4LnS2yryPoQb3sYaBO8SqRsgIHd0QRTDQ5qR1iVxQWKZa75C9TKYaTDg21StmGk=
-----END CERTIFICATE-----
Generated at Wed May 13 00:53:49 2026 by rpki-client