Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c30d04d-db8f-40b5-a742-abea53a011b0.roa
File:                     4c30d04d-db8f-40b5-a742-abea53a011b0.roa (raw, json)
Hash identifier:          6YvEJ0z7tlp0m+XJxLu/4Wb/424t+clIe9yMg4La2Yw=
Subject key identifier:   AC:33:F0:2D:19:2E:E2:F6:FC:4E:BC:4C:17:D0:2E:B4:DD:0B:43:9F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       37BE42D271E0FDE4FEDA79990F577A4100377D39
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c30d04d-db8f-40b5-a742-abea53a011b0.roa
Signing time:             Mon 04 May 2026 10:20:08 +0000
ROA not before:           Mon 04 May 2026 10:20:08 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3250::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:42:d2:71:e0:fd:e4:fe:da:79:99:0f:57:7a:41:00:37:7d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 10:20:08 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3679956967cb2b9a78687e1d8f8d55a6251460a6ccae9c08501db0b244d1519a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:05:78:1b:02:06:29:ff:02:5f:06:ca:93:
                    cd:56:88:f7:14:80:15:7c:a8:e5:75:70:f2:27:4d:
                    de:b5:d0:3c:42:34:0b:58:a5:84:c4:c8:82:36:6c:
                    5c:96:86:8f:63:31:5d:fd:1d:a2:a7:6d:76:27:0d:
                    5a:f0:e8:d4:1b:cb:9a:d6:a0:c3:49:b0:36:8c:b0:
                    14:28:64:c1:33:41:cd:0a:f1:63:cb:3a:d1:8f:f3:
                    c0:4a:c3:74:ab:92:67:29:47:4e:2b:15:1f:ac:6c:
                    62:26:9f:86:4c:e1:51:df:82:36:93:af:22:6e:dc:
                    95:c9:6e:34:cd:c4:53:6f:a3:d4:d5:ca:94:89:00:
                    ee:15:54:5e:14:04:87:1b:31:56:78:e1:d2:cc:d0:
                    cb:56:19:fd:01:fe:c3:16:4e:d0:df:f3:cc:17:91:
                    5a:3e:0a:29:6d:f0:8f:b0:83:b3:92:17:03:b7:91:
                    d0:d6:98:22:54:36:48:69:da:2f:a9:f6:ef:c8:0e:
                    9b:4a:8a:1d:c6:77:af:ca:d3:6b:1e:de:63:dd:c0:
                    a3:01:f6:52:05:4a:51:f9:12:dd:38:fd:a5:b8:9c:
                    8e:10:ab:24:f0:d8:76:ef:0e:38:02:1b:1f:3b:0a:
                    df:be:51:11:3a:ba:b7:7d:64:4f:1f:79:76:1e:42:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:F0:2D:19:2E:E2:F6:FC:4E:BC:4C:17:D0:2E:B4:DD:0B:43:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c30d04d-db8f-40b5-a742-abea53a011b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3250::/45

    Signature Algorithm: sha256WithRSAEncryption
         03:ed:21:08:ae:e5:f8:fa:06:31:3d:10:58:8b:4a:26:c7:bc:
         71:e8:80:89:8c:f6:d2:be:72:e8:2f:df:8b:65:21:ee:e1:69:
         0e:95:40:9f:f6:2f:c4:2b:87:44:ce:a1:ef:37:c8:fc:a9:32:
         09:08:8e:b0:21:e4:f6:4c:cb:2d:d9:d6:4c:73:4e:6f:8a:21:
         7e:5d:a8:19:f9:19:cd:de:fa:e8:19:57:80:84:d5:1a:3e:9d:
         9c:b3:79:62:70:d7:12:5f:63:58:8e:ad:d5:a1:da:3f:dd:76:
         0e:e6:fc:d4:44:d4:cc:9f:74:5f:2f:cf:7e:8f:39:60:6a:05:
         3d:14:b6:2f:b5:68:07:6b:2f:cc:cb:f6:2e:96:7d:07:90:50:
         a0:06:57:b6:2d:3d:01:01:75:af:27:15:ba:3b:33:ed:69:85:
         94:c8:a2:42:4d:3e:01:90:b7:7f:82:7e:d1:c7:8f:14:2f:33:
         c4:6f:61:6b:cc:40:a2:db:57:28:dd:81:4f:55:05:cd:b8:ae:
         e1:72:41:9a:fd:00:81:8c:b0:a7:f0:c7:f8:56:23:ac:e9:23:
         ed:e0:ca:0c:0e:5a:f0:f7:6b:4c:cf:79:22:21:e8:6c:12:15:
         2e:51:0f:cf:c3:4b:06:47:69:a5:d8:84:0c:a6:49:01:77:8d:
         45:a4:a0:b0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUN75C0nHg/eT+2nmZD1d6QQA3fTkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTAyMDA4WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjc5OTU2OTY3Y2IyYjlhNzg2ODdlMWQ4ZjhkNTVhNjI1
MTQ2MGE2Y2NhZTljMDg1MDFkYjBiMjQ0ZDE1MTlhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJEwV4GwIGKf8CXwbKk81WiPcUgBV8qOV1cPInTd610DxC
NAtYpYTEyII2bFyWho9jMV39HaKnbXYnDVrw6NQby5rWoMNJsDaMsBQoZMEzQc0K
8WPLOtGP88BKw3SrkmcpR04rFR+sbGImn4ZM4VHfgjaTryJu3JXJbjTNxFNvo9TV
ypSJAO4VVF4UBIcbMVZ44dLM0MtWGf0B/sMWTtDf88wXkVo+Cilt8I+wg7OSFwO3
kdDWmCJUNkhp2i+p9u/IDptKih3Gd6/K02se3mPdwKMB9lIFSlH5Et04/aW4nI4Q
qyTw2HbvDjgCGx87Ct++URE6urd9ZE8feXYeQkcdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrDPwLRku4vb8TrxMF9AutN0LQ58wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRjMzBkMDRkLWRiOGYtNDBiNS1hNzQyLWFiZWE1M2EwMTFiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAMlAwDQYJKoZIhvcNAQELBQADggEBAAPtIQiu5fj6BjE9EFiLSibH
vHHogImM9tK+cugv34tlIe7haQ6VQJ/2L8Qrh0TOoe83yPypMgkIjrAh5PZMyy3Z
1kxzTm+KIX5dqBn5Gc3e+ugZV4CE1Ro+nZyzeWJw1xJfY1iOrdWh2j/ddg7m/NRE
1MyfdF8vz36POWBqBT0Uti+1aAdrL8zL9i6WfQeQUKAGV7YtPQEBda8nFbo7M+1p
hZTIokJNPgGQt3+CftHHjxQvM8RvYWvMQKLbVyjdgU9VBc24ruFyQZr9AIGMsKfw
x/hWI6zpI+3gygwOWvD3a0zPeSIh6GwSFS5RD8/DSwZHaaXYhAymSQF3jUWkoLA=
-----END CERTIFICATE-----
Generated at Wed May 13 02:30:27 2026 by rpki-client