Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362b0ccc-0a42-4299-8de7-8cca06b01e10.roa
File:                     362b0ccc-0a42-4299-8de7-8cca06b01e10.roa (raw, json)
Hash identifier:          KfUqbbeBAAsgBcMtkIYASafgg64JruNtYt2LyYvBRLc=
Subject key identifier:   A7:18:99:E1:3D:DF:73:80:4C:AB:69:04:CE:E1:34:1B:90:FC:69:D3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6526E1A66A21D0A03F8764FA7FE5775B849E9418
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362b0ccc-0a42-4299-8de7-8cca06b01e10.roa
Signing time:             Mon 04 May 2026 04:51:49 +0000
ROA not before:           Mon 04 May 2026 04:51:49 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:26:e1:a6:6a:21:d0:a0:3f:87:64:fa:7f:e5:77:5b:84:9e:94:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 04:51:49 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a1ef239774f20e37826f229e623748555e892b5be9593a65683c7ad563c68cb2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:11:c8:c1:c1:5a:f0:cc:f0:69:96:56:a5:e4:
                    93:c7:88:24:96:fc:fc:1b:71:ee:5f:09:1a:14:55:
                    7e:da:69:dd:1e:c6:0d:b0:18:f6:1f:2f:72:08:d5:
                    f7:9b:f7:7b:89:19:dd:8b:81:39:e4:65:7f:f4:aa:
                    3d:10:54:a1:e8:83:17:a4:7b:cd:33:9a:5c:79:f0:
                    9a:63:51:f8:1a:1c:6d:11:6c:81:87:2d:1c:2c:60:
                    8a:cd:ba:fd:36:5b:09:25:11:e4:ea:db:78:d1:1a:
                    77:01:f6:1f:fe:67:69:13:7b:66:da:ad:98:3f:37:
                    e9:58:a9:ad:30:9d:52:6a:80:3d:c0:7b:ef:c7:0e:
                    52:74:9c:9c:e1:d4:89:6c:ee:b4:cc:88:6c:e1:11:
                    66:a1:33:3b:1d:0f:19:e2:99:fd:f6:9d:20:03:3a:
                    4f:3f:ec:86:3f:34:2b:ba:51:3f:d6:c8:21:4e:72:
                    09:e2:f9:5b:c1:fa:ac:26:8e:a3:47:0a:d8:e7:4e:
                    50:57:8e:5b:c3:83:60:90:97:3a:2b:f6:b4:09:cb:
                    55:17:6e:71:9d:0f:e0:8c:12:f5:08:f8:8f:6e:b1:
                    cc:55:7d:02:75:66:bd:c7:ed:40:27:e6:17:db:aa:
                    d6:91:97:12:c3:31:85:8c:95:86:6c:27:dc:46:42:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:18:99:E1:3D:DF:73:80:4C:AB:69:04:CE:E1:34:1B:90:FC:69:D3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/362b0ccc-0a42-4299-8de7-8cca06b01e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d40::/42

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:76:c4:3c:70:18:02:44:88:f5:ef:8b:f1:39:f7:79:03:
         56:21:2d:67:90:5b:d8:97:0f:fb:a5:3b:bb:61:b8:29:f5:03:
         e7:0c:0f:fa:b2:2e:97:5c:1a:61:da:b1:b6:59:7e:e4:62:29:
         83:7a:91:d9:ad:74:cd:51:0d:57:07:fc:70:21:10:13:22:fb:
         42:d8:5d:8e:db:3b:6e:27:6c:77:78:94:d0:6b:34:81:3e:8d:
         43:28:3b:d4:6b:2d:74:3c:d5:32:45:db:33:89:06:d9:f5:96:
         54:df:3e:2f:72:2f:5f:81:c6:d3:f5:00:e2:ff:af:a2:78:17:
         33:e2:9c:78:f0:cb:67:7a:2b:7f:5a:dc:7d:ba:19:3c:fa:f2:
         50:69:20:37:1e:9d:4e:54:0b:1e:f4:96:ee:fa:64:0f:40:a1:
         03:e1:d7:95:f5:f1:4e:33:15:40:f7:50:24:7a:65:04:38:c2:
         59:8e:f1:10:27:75:ac:3d:ca:06:21:66:c5:63:0b:d8:ea:03:
         83:3b:67:64:eb:fa:13:9b:58:84:04:e9:f8:12:38:70:49:1a:
         41:79:de:7c:eb:dd:1d:bf:5c:ba:8b:d4:2d:d2:62:02:74:d2:
         0a:90:4c:41:61:55:39:8d:a0:35:96:e8:52:2b:00:76:9f:57:
         a9:9f:49:16
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZSbhpmoh0KA/h2T6f+V3W4SelBgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDQ1MTQ5WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMWVmMjM5Nzc0ZjIwZTM3ODI2ZjIyOWU2MjM3NDg1NTVl
ODkyYjViZTk1OTNhNjU2ODNjN2FkNTYzYzY4Y2IyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD7EcjBwVrwzPBpllal5JPHiCSW/Pwbce5fCRoUVX7aad0e
xg2wGPYfL3II1feb93uJGd2LgTnkZX/0qj0QVKHogxeke80zmlx58JpjUfgaHG0R
bIGHLRwsYIrNuv02WwklEeTq23jRGncB9h/+Z2kTe2barZg/N+lYqa0wnVJqgD3A
e+/HDlJ0nJzh1Ils7rTMiGzhEWahMzsdDxnimf32nSADOk8/7IY/NCu6UT/WyCFO
cgni+VvB+qwmjqNHCtjnTlBXjlvDg2CQlzor9rQJy1UXbnGdD+CMEvUI+I9uscxV
fQJ1Zr3H7UAn5hfbqtaRlxLDMYWMlYZsJ9xGQoUhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpxiZ4T3fc4BMq2kEzuE0G5D8adMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM2MmIwY2NjLTBhNDItNDI5OS04ZGU3LThjY2EwNmIwMWUxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAJAALUAwDQYJKoZIhvcNAQELBQADggEBAHDMdsQ8cBgCRIj174vxOfd5
A1YhLWeQW9iXD/ulO7thuCn1A+cMD/qyLpdcGmHasbZZfuRiKYN6kdmtdM1RDVcH
/HAhEBMi+0LYXY7bO24nbHd4lNBrNIE+jUMoO9RrLXQ81TJF2zOJBtn1llTfPi9y
L1+BxtP1AOL/r6J4FzPinHjwy2d6K39a3H26GTz68lBpIDcenU5UCx70lu76ZA9A
oQPh15X18U4zFUD3UCR6ZQQ4wlmO8RAndaw9ygYhZsVjC9jqA4M7Z2Tr+hObWIQE
6fgSOHBJGkF53nzr3R2/XLqL1C3SYgJ00gqQTEFhVTmNoDWW6FIrAHafV6mfSRY=
-----END CERTIFICATE-----
Generated at Wed May 13 00:50:11 2026 by rpki-client