Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
File:                     5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa (raw, json)
Hash identifier:          pUDx0qU1wQbSM90sdyjXrh2GWu2RmahYz5IrvI25f/Q=
Subject key identifier:   FF:77:B9:49:6D:C0:2F:C1:F6:7B:86:2B:88:05:D5:F2:40:38:FE:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       54595D9A2237DB64C9D895D290CBB8BF141E7912
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
Signing time:             Mon 04 May 2026 07:50:58 +0000
ROA not before:           Mon 04 May 2026 07:50:58 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3878::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:59:5d:9a:22:37:db:64:c9:d8:95:d2:90:cb:b8:bf:14:1e:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:50:58 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=582d012d1ea954339d563c2e3aed4f867d85e97ef217f48edf52dfc940faefaf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:cc:2f:6c:fa:02:40:5c:67:69:9f:35:a1:
                    fa:41:db:96:69:40:97:7e:1f:3b:40:63:1e:a3:8c:
                    67:ac:be:de:82:9f:69:e3:42:0c:7b:26:4d:24:8a:
                    c8:af:a0:44:1b:8e:f3:e6:07:50:31:c6:15:e1:6e:
                    c1:4e:15:11:93:48:e2:21:c7:88:25:48:33:87:a9:
                    36:2d:c9:a4:ab:37:ca:f7:20:d6:e3:82:ae:f6:9d:
                    6d:ec:3c:b9:22:f9:93:ec:bb:5f:a3:54:25:94:35:
                    ac:76:a9:da:ad:71:09:63:a8:d2:50:8f:ca:e5:8b:
                    81:72:c9:5a:4b:a6:73:2d:0f:fc:7d:24:2c:e2:33:
                    b1:d2:b8:b5:93:f3:c9:70:9b:7f:3d:0b:ab:61:f7:
                    79:86:43:8b:b0:1e:fd:36:68:10:0a:91:4b:49:58:
                    c4:5e:78:7a:2a:72:a1:94:14:fe:a8:0a:00:e7:b0:
                    06:8f:05:0c:96:47:63:af:d9:26:94:0b:cd:c8:d7:
                    b4:16:de:50:40:90:8a:77:07:f2:8c:f6:50:cf:9e:
                    1a:ec:85:dd:b7:57:28:0b:a9:fb:3d:62:a2:6d:3d:
                    30:cd:fb:21:43:d6:79:fb:09:50:ca:25:5e:11:7d:
                    94:40:6b:00:1d:03:2c:44:2c:f0:32:7a:f8:d0:00:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:B9:49:6D:C0:2F:C1:F6:7B:86:2B:88:05:D5:F2:40:38:FE:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3878::/45

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:ff:05:71:70:78:3b:c0:fd:24:6c:73:43:f7:1b:94:59:
         99:40:2f:af:8e:ea:dc:ad:e7:d5:62:72:5c:ef:a9:a0:7d:f3:
         92:98:16:eb:ed:c2:af:be:b1:66:ce:87:bf:39:cb:0a:f8:cf:
         ec:28:a5:17:52:65:08:02:d4:86:3f:3c:07:7a:e0:46:0f:b3:
         db:95:96:dd:bd:b9:f7:26:c1:6b:53:22:f8:64:2d:9a:46:0f:
         25:c2:a9:1a:79:cf:3a:33:c8:74:0a:50:b4:93:c7:e7:e1:49:
         1e:63:9c:f2:d6:48:f2:6a:61:c5:6e:c5:c2:a0:ee:90:a5:31:
         2c:84:04:0d:d6:79:d3:fc:5d:1d:62:26:f7:aa:dc:c1:40:4c:
         44:28:8a:f6:76:f5:b4:a0:5b:47:78:23:8c:57:05:31:f7:12:
         e5:f9:50:b0:ea:9e:30:86:fc:fd:84:8c:63:b5:71:e5:e2:ae:
         36:1e:3a:dd:4b:5f:82:e9:a1:0b:41:a2:ad:6f:4c:22:2a:82:
         5c:64:37:44:70:07:77:19:e5:c0:b4:5a:ef:68:c5:9d:05:3a:
         ff:80:07:55:30:83:2a:7a:86:d2:0c:5a:a3:b1:a3:f1:89:55:
         f7:e1:39:a1:a7:5d:2e:5b:58:1e:57:47:22:c4:a2:be:ff:c5:
         e5:5f:86:e5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVFldmiI322TJ2JXSkMu4vxQeeRIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDc1MDU4WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ODJkMDEyZDFlYTk1NDMzOWQ1NjNjMmUzYWVkNGY4Njdk
ODVlOTdlZjIxN2Y0OGVkZjUyZGZjOTQwZmFlZmFmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9WswvbPoCQFxnaZ81ofpB25ZpQJd+HztAYx6jjGesvt6C
n2njQgx7Jk0kisivoEQbjvPmB1AxxhXhbsFOFRGTSOIhx4glSDOHqTYtyaSrN8r3
INbjgq72nW3sPLki+ZPsu1+jVCWUNax2qdqtcQljqNJQj8rli4FyyVpLpnMtD/x9
JCziM7HSuLWT88lwm389C6th93mGQ4uwHv02aBAKkUtJWMReeHoqcqGUFP6oCgDn
sAaPBQyWR2Ov2SaUC83I17QW3lBAkIp3B/KM9lDPnhrshd23VygLqfs9YqJtPTDN
+yFD1nn7CVDKJV4RfZRAawAdAyxELPAyevjQAH/NAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU/3e5SW3AL8H2e4YriAXV8kA4/o8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVjOGQ1ZGI1LWRhYWYtNGM0Ni1hZjAxLWRmMGEyYmMxOTBjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAOHgwDQYJKoZIhvcNAQELBQADggEBAGao/wVxcHg7wP0kbHND9xuU
WZlAL6+O6tyt59ViclzvqaB985KYFuvtwq++sWbOh785ywr4z+wopRdSZQgC1IY/
PAd64EYPs9uVlt29ufcmwWtTIvhkLZpGDyXCqRp5zzozyHQKULSTx+fhSR5jnPLW
SPJqYcVuxcKg7pClMSyEBA3WedP8XR1iJveq3MFATEQoivZ29bSgW0d4I4xXBTH3
EuX5ULDqnjCG/P2EjGO1ceXirjYeOt1LX4LpoQtBoq1vTCIqglxkN0RwB3cZ5cC0
Wu9oxZ0FOv+AB1Uwgyp6htIMWqOxo/GJVffhOaGnXS5bWB5XRyLEor7/xeVfhuU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:21 2026 by rpki-client