Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa
File:                     716c22d1-5694-47ea-95bb-5432f48f87c4.roa (raw, json)
Hash identifier:          mYcmUZAv8GmTThRFEZ1Ij8/eUa+2S0x/o4UV/8sLffc=
Subject key identifier:   18:A1:F5:A4:72:74:E0:BE:F8:70:48:82:8B:70:00:F3:F7:9D:13:38
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1297E7FD80F030E2BAF6A9B60FC7E8E2C4D90E86
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa
Signing time:             Mon 04 May 2026 01:31:13 +0000
ROA not before:           Mon 04 May 2026 01:31:13 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3568::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:e7:fd:80:f0:30:e2:ba:f6:a9:b6:0f:c7:e8:e2:c4:d9:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 01:31:13 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=6a13061486aaa84f414ada5f8e28056557845bf1f9194f868f271c20adaa2282, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:fc:aa:b0:91:1a:0a:f9:1f:b1:01:04:85:
                    b3:4c:67:91:84:bd:09:80:70:b0:08:9d:0f:3b:b1:
                    37:27:17:73:c6:64:b7:b1:e1:71:91:6e:44:d2:46:
                    08:9e:62:1d:3a:29:1b:a0:8f:f9:10:ad:c9:c4:aa:
                    2f:e9:b8:83:e0:4b:44:f8:da:39:c6:ba:a5:5c:8d:
                    9d:a6:82:d1:39:1f:9c:95:be:05:63:f1:f9:a1:27:
                    e2:33:b9:23:3a:7d:a4:53:5c:07:5e:f6:13:42:13:
                    0b:1b:ad:01:8a:c1:fb:90:0f:36:89:95:44:af:fb:
                    55:5d:4c:ce:bf:27:fe:aa:51:1e:7f:51:dc:44:63:
                    5e:f0:e3:04:d6:5c:c2:c2:2d:b6:c2:9e:f4:ab:6f:
                    b2:d1:8a:8b:95:b7:8d:fd:5d:24:7f:18:f2:15:39:
                    77:43:3a:cd:d2:3c:0d:78:11:c4:be:28:ba:b9:6e:
                    d1:f1:9d:25:9b:4c:84:91:19:57:89:d0:e9:e4:9e:
                    aa:d0:0b:1a:ad:52:6a:65:7e:14:6e:7c:8e:7d:39:
                    ad:d9:28:a6:dd:7b:13:5e:bc:d3:8e:10:1c:01:0b:
                    1e:a3:d6:62:c6:5a:3b:4a:27:84:a6:c2:ee:eb:dc:
                    7b:6b:9e:3a:06:c9:d0:61:a0:5f:4e:c0:f0:e1:72:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:F5:A4:72:74:E0:BE:F8:70:48:82:8B:70:00:F3:F7:9D:13:38
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3568::/47

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:4f:40:e9:b4:88:dc:4b:74:f0:71:fd:65:c3:93:10:f0:
         cd:7f:8c:ff:4b:73:6f:d4:31:19:d1:d2:31:36:b3:22:47:ff:
         e5:78:72:02:39:89:f7:ce:67:6b:96:44:33:4d:b4:bc:ad:1c:
         d1:5c:fc:a1:60:aa:6b:42:f5:1c:ce:ce:99:6a:db:aa:6e:3d:
         c1:a8:0c:3e:5f:3a:23:0e:cc:31:85:1e:ce:98:8e:15:9e:89:
         b2:15:85:1c:a7:1d:e8:3a:03:71:be:49:39:52:d2:66:3a:d2:
         fd:7b:3c:45:c5:59:c5:06:f0:62:53:78:68:33:b6:c7:9b:1b:
         45:30:18:63:e6:0d:79:71:72:da:79:87:2e:f2:98:83:77:cb:
         4a:b9:b4:ba:87:37:ca:3c:e1:67:8f:a8:44:c3:87:49:9d:aa:
         65:b3:6c:75:61:02:19:90:b2:78:19:11:c2:97:f5:10:c3:86:
         11:5d:f0:8f:a5:fb:05:b8:9d:8e:34:a7:67:9f:1a:67:2d:2d:
         0f:e4:bd:74:ed:23:1d:74:d7:44:bd:e1:ab:e0:9a:2d:4d:d6:
         f0:6b:8d:6d:3a:af:af:6c:02:7f:1b:33:1b:21:04:da:4a:5d:
         d2:98:5b:a5:a0:f7:d9:d5:76:4d:f9:77:bd:fd:cd:f0:de:09:
         23:4e:fd:da
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEpfn/YDwMOK69qm2D8fo4sTZDoYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDEzMTEzWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YTEzMDYxNDg2YWFhODRmNDE0YWRhNWY4ZTI4MDU2NTU3
ODQ1YmYxZjkxOTRmODY4ZjI3MWMyMGFkYWEyMjgyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkW/yqsJEaCvkfsQEEhbNMZ5GEvQmAcLAInQ87sTcnF3PG
ZLex4XGRbkTSRgieYh06KRugj/kQrcnEqi/puIPgS0T42jnGuqVcjZ2mgtE5H5yV
vgVj8fmhJ+IzuSM6faRTXAde9hNCEwsbrQGKwfuQDzaJlUSv+1VdTM6/J/6qUR5/
UdxEY17w4wTWXMLCLbbCnvSrb7LRiouVt439XSR/GPIVOXdDOs3SPA14EcS+KLq5
btHxnSWbTISRGVeJ0OnknqrQCxqtUmplfhRufI59Oa3ZKKbdexNevNOOEBwBCx6j
1mLGWjtKJ4Smwu7r3HtrnjoGydBhoF9OwPDhcqqlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGKH1pHJ04L74cEiCi3AA8/edEzgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcxNmMyMmQxLTU2OTQtNDdlYS05NWJiLTU0MzJmNDhmODdjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANWgwDQYJKoZIhvcNAQELBQADggEBABDVT0DptIjcS3Twcf1lw5MQ
8M1/jP9Lc2/UMRnR0jE2syJH/+V4cgI5iffOZ2uWRDNNtLytHNFc/KFgqmtC9RzO
zplq26puPcGoDD5fOiMOzDGFHs6YjhWeibIVhRynHeg6A3G+STlS0mY60v17PEXF
WcUG8GJTeGgztsebG0UwGGPmDXlxctp5hy7ymIN3y0q5tLqHN8o84WePqETDh0md
qmWzbHVhAhmQsngZEcKX9RDDhhFd8I+l+wW4nY40p2efGmctLQ/kvXTtIx1010S9
4avgmi1N1vBrjW06r69sAn8bMxshBNpKXdKYW6Wg99nVdk35d739zfDeCSNO/do=
-----END CERTIFICATE-----
Generated at Wed May 13 02:21:06 2026 by rpki-client