Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a45279-b2e1-4c10-8754-320a0ae85dfc.roa
File:                     37a45279-b2e1-4c10-8754-320a0ae85dfc.roa (raw, json)
Hash identifier:          G9N0ed1MWXrOf+UT/67xn4C4yyV1166koLLKQS+qs2U=
Subject key identifier:   DC:B7:6D:84:E3:81:73:4D:9E:50:45:BB:23:92:22:DA:A3:A3:60:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26FC0C9968F622BA6F99008B7ABBF0088E04811B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a45279-b2e1-4c10-8754-320a0ae85dfc.roa
Signing time:             Mon 04 May 2026 06:41:39 +0000
ROA not before:           Mon 04 May 2026 06:41:39 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b08::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:0c:99:68:f6:22:ba:6f:99:00:8b:7a:bb:f0:08:8e:04:81:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:41:39 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3f0224d98ba32b533943d4036b22feb6cc4c975e4db4405326e691a55ba07921, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:62:c7:66:a3:14:e3:d9:a8:da:64:80:1d:
                    d5:3f:84:d4:f1:f4:37:b5:56:de:69:26:fa:0a:26:
                    82:84:56:8e:8e:58:f8:88:16:05:0b:4e:bc:33:47:
                    c4:15:c8:f3:b0:4f:f6:9f:0d:64:b6:e1:80:d4:80:
                    0e:00:62:11:89:d7:ae:2a:7c:13:9c:35:72:be:ea:
                    9d:db:dc:1f:c1:5d:ba:d0:0a:57:fc:fd:7e:c2:b6:
                    85:83:10:89:e6:97:bc:4d:cc:03:9c:c6:46:50:0a:
                    d1:71:12:0e:50:81:49:b3:27:c0:c0:db:ba:08:d4:
                    0b:d0:f4:9c:3b:62:97:33:af:3c:3e:2c:63:bd:23:
                    eb:1e:f0:7b:be:d9:f3:2c:20:03:24:58:1d:1f:16:
                    af:c1:d9:da:b3:bb:3e:f9:7c:ae:8c:ec:15:1e:2e:
                    36:67:7b:2c:6f:ae:8a:c3:27:ea:83:2b:0c:10:01:
                    43:8a:89:80:b3:29:37:0c:84:b6:76:8d:00:14:e1:
                    fc:d3:c6:b5:50:0b:6e:3d:c8:8d:d7:c1:37:18:30:
                    bf:5e:e2:28:37:e2:45:92:b0:0a:69:c0:1c:65:d0:
                    1d:ab:d6:60:0d:a3:e7:67:5c:ec:9e:b8:01:6b:cc:
                    5f:ee:e6:7a:72:f0:a8:22:18:f5:ae:6e:e5:be:06:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:6D:84:E3:81:73:4D:9E:50:45:BB:23:92:22:DA:A3:A3:60:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37a45279-b2e1-4c10-8754-320a0ae85dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b08::/46

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:c6:f7:46:91:a7:72:39:98:7f:0e:06:6d:db:4c:f6:58:
         77:9b:9d:21:cf:c8:a0:e5:a5:5f:09:58:ec:8c:f6:e7:26:ec:
         8b:cb:86:b0:8c:bd:31:49:64:2b:fc:df:9b:2b:67:7c:0b:46:
         8f:2d:3b:df:1c:0e:8e:5a:25:af:ae:6b:98:61:0f:48:49:ed:
         e1:58:f7:e4:cf:1f:03:d1:1f:b6:b3:9c:a8:ae:32:53:15:99:
         af:f0:9b:c8:a7:59:91:44:7b:c8:c6:15:91:c8:79:64:da:63:
         a8:ef:6b:7c:2e:20:4f:3b:f8:4b:88:78:f9:15:f0:e2:b0:84:
         d1:33:6a:c0:01:8c:d4:91:94:28:2f:ff:e9:e5:3e:f5:86:0b:
         e8:6d:9d:04:c3:74:b5:c4:ad:11:fb:ff:26:08:29:45:d2:76:
         01:4a:99:ef:ad:a4:0c:60:72:e9:1a:7c:ce:82:c2:e5:ca:e6:
         2a:5d:bf:d8:40:58:4f:59:96:36:00:9f:0b:1d:31:ac:e5:f7:
         86:22:18:02:90:ec:a3:c8:23:26:40:db:30:ba:2c:46:be:25:
         4d:ba:3d:86:28:e5:87:37:a2:9b:fd:1c:6a:d7:c1:0f:6d:a0:
         a1:78:34:e9:2e:62:9c:6b:fd:35:2b:15:58:3e:22:04:bb:d8:
         33:19:f6:f4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJvwMmWj2IrpvmQCLervwCI4EgRswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDY0MTM5WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjAyMjRkOThiYTMyYjUzMzk0M2Q0MDM2YjIyZmViNmNj
NGM5NzVlNGRiNDQwNTMyNmU2OTFhNTViYTA3OTIxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdUGLHZqMU49mo2mSAHdU/hNTx9De1Vt5pJvoKJoKEVo6O
WPiIFgULTrwzR8QVyPOwT/afDWS24YDUgA4AYhGJ164qfBOcNXK+6p3b3B/BXbrQ
Clf8/X7CtoWDEInml7xNzAOcxkZQCtFxEg5QgUmzJ8DA27oI1AvQ9Jw7Ypczrzw+
LGO9I+se8Hu+2fMsIAMkWB0fFq/B2dqzuz75fK6M7BUeLjZneyxvrorDJ+qDKwwQ
AUOKiYCzKTcMhLZ2jQAU4fzTxrVQC249yI3XwTcYML9e4ig34kWSsAppwBxl0B2r
1mANo+dnXOyeuAFrzF/u5npy8KgiGPWubuW+Bk6ZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU3LdthOOBc02eUEW7I5Ii2qOjYA4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM3YTQ1Mjc5LWIyZTEtNGMxMC04NzU0LTMyMGEwYWU4NWRmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOwgwDQYJKoZIhvcNAQELBQADggEBACi7xvdGkadyOZh/DgZt20z2
WHebnSHPyKDlpV8JWOyM9ucm7IvLhrCMvTFJZCv835srZ3wLRo8tO98cDo5aJa+u
a5hhD0hJ7eFY9+TPHwPRH7aznKiuMlMVma/wm8inWZFEe8jGFZHIeWTaY6jva3wu
IE87+EuIePkV8OKwhNEzasABjNSRlCgv/+nlPvWGC+htnQTDdLXErRH7/yYIKUXS
dgFKme+tpAxgcukafM6CwuXK5ipdv9hAWE9ZljYAnwsdMazl94YiGAKQ7KPIIyZA
2zC6LEa+JU26PYYo5Yc3opv9HGrXwQ9toKF4NOkuYpxr/TUrFVg+IgS72DMZ9vQ=
-----END CERTIFICATE-----
Generated at Wed May 13 00:42:05 2026 by rpki-client