Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e1783e5-7aed-4efc-8811-379a35b58b81.roa
File:                     7e1783e5-7aed-4efc-8811-379a35b58b81.roa (raw, json)
Hash identifier:          qilTa6bN0cj9tIoEGSqDPyD1KTuRG3UeYPu7n+8kntk=
Subject key identifier:   07:F0:AE:EF:A7:79:11:D2:92:95:EF:A4:9B:05:7F:0D:BB:5E:F8:3D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0417415A0A27B7BB9CCB12849FBE16D20C1A4A00
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e1783e5-7aed-4efc-8811-379a35b58b81.roa
Signing time:             Mon 04 May 2026 08:31:26 +0000
ROA not before:           Mon 04 May 2026 08:31:26 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b64::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:17:41:5a:0a:27:b7:bb:9c:cb:12:84:9f:be:16:d2:0c:1a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:31:26 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=39d422e40cbe126576626cff75831482fcb23418680a9a99f6bef90a3e6a1453, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:f3:64:ff:01:a1:5d:92:dc:3f:03:38:8e:
                    7c:56:50:27:0d:5b:b2:f1:fa:f3:87:16:07:1c:34:
                    68:15:e3:56:45:e3:ad:70:42:63:84:af:17:9e:5c:
                    25:b6:6a:ad:02:e2:9c:fb:a6:51:8a:09:3a:ac:ba:
                    a2:67:7b:58:bd:df:80:bf:7b:7e:0e:02:30:29:f7:
                    5d:b4:d7:af:3b:e0:65:31:c4:bb:47:65:74:02:cd:
                    55:15:38:b4:b6:65:74:b6:ec:0c:ed:50:21:8f:65:
                    9a:b4:d3:27:9e:05:25:29:1a:ad:42:0f:23:74:99:
                    85:a7:bd:1a:46:03:19:48:18:2c:da:47:93:cb:cf:
                    dc:a7:b3:d1:11:0e:fc:75:2b:4a:e2:df:07:9b:72:
                    4c:72:33:f8:72:63:c5:a2:0c:92:e5:1f:64:c8:5f:
                    db:b8:f1:ec:5a:19:1b:85:1b:0b:79:4c:66:f7:39:
                    aa:cb:ba:b7:fe:d2:f8:79:c5:d2:5d:bb:09:c6:73:
                    fc:79:23:65:8d:5c:be:b1:50:02:2a:42:a1:84:4c:
                    48:74:6d:83:73:ca:d2:bc:d3:cd:81:47:da:b4:8b:
                    b3:d3:10:59:fd:42:3f:62:dd:22:be:0e:a1:43:c4:
                    1a:62:83:7b:f6:6b:fd:16:96:cd:23:8d:79:a8:14:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:AE:EF:A7:79:11:D2:92:95:EF:A4:9B:05:7F:0D:BB:5E:F8:3D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e1783e5-7aed-4efc-8811-379a35b58b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b64::/46

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:b1:e5:e7:71:aa:4f:4c:1e:82:cb:43:17:89:48:c4:a2:
         38:a1:d1:bf:c5:23:f1:f3:4f:41:bf:36:35:8e:71:88:cc:37:
         52:93:c2:c4:98:17:ab:32:09:14:38:dc:19:d8:98:bc:80:72:
         9c:4f:be:69:68:73:df:92:8c:d7:e0:b3:c4:c6:74:1f:a0:f9:
         2e:1b:46:41:0b:ea:b5:31:6d:0b:ba:68:7a:19:30:01:a9:b1:
         8a:28:8d:9e:c0:f7:9d:40:44:0f:81:21:1a:ea:33:81:28:92:
         88:c9:70:72:90:6e:9b:45:13:a5:c2:d5:9e:00:92:3c:a3:12:
         2a:86:11:35:22:e1:bb:72:86:5b:f7:ec:72:7c:27:00:8a:49:
         9d:59:cc:5f:bc:ea:a6:7f:9d:93:f5:a3:b0:a1:cb:0a:7e:a7:
         b2:69:91:14:e3:08:a6:32:e3:39:ea:83:ae:23:3b:28:bc:82:
         17:1f:a2:dc:93:5e:ad:10:61:38:d9:e9:66:03:1b:c2:33:b9:
         82:3b:b1:16:3e:e9:67:02:9b:17:86:62:51:e2:df:70:e3:1c:
         7a:4a:71:cd:4e:7e:8a:08:07:cd:eb:05:b3:4c:1c:0e:c2:dc:
         52:59:1e:db:d8:39:6b:6a:2e:a1:0b:ab:08:c3:5d:c1:17:d1:
         74:f6:3d:60
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBBdBWgont7ucyxKEn74W0gwaSgAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDgzMTI2WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOWQ0MjJlNDBjYmUxMjY1NzY2MjZjZmY3NTgzMTQ4MmZj
YjIzNDE4NjgwYTlhOTlmNmJlZjkwYTNlNmExNDUzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXpfNk/wGhXZLcPwM4jnxWUCcNW7Lx+vOHFgccNGgV41ZF
461wQmOErxeeXCW2aq0C4pz7plGKCTqsuqJne1i934C/e34OAjAp912016874GUx
xLtHZXQCzVUVOLS2ZXS27AztUCGPZZq00yeeBSUpGq1CDyN0mYWnvRpGAxlIGCza
R5PLz9yns9ERDvx1K0ri3webckxyM/hyY8WiDJLlH2TIX9u48exaGRuFGwt5TGb3
OarLurf+0vh5xdJduwnGc/x5I2WNXL6xUAIqQqGETEh0bYNzytK8082BR9q0i7PT
EFn9Qj9i3SK+DqFDxBpig3v2a/0Wls0jjXmoFEbfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUB/Cu76d5EdKSle+kmwV/Dbte+D0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdlMTc4M2U1LTdhZWQtNGVmYy04ODExLTM3OWEzNWI1OGI4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAO2QwDQYJKoZIhvcNAQELBQADggEBACLhseXncapPTB6Cy0MXiUjE
ojih0b/FI/HzT0G/NjWOcYjMN1KTwsSYF6syCRQ43BnYmLyAcpxPvmloc9+SjNfg
s8TGdB+g+S4bRkEL6rUxbQu6aHoZMAGpsYoojZ7A951ARA+BIRrqM4EokojJcHKQ
bptFE6XC1Z4AkjyjEiqGETUi4btyhlv37HJ8JwCKSZ1ZzF+86qZ/nZP1o7Chywp+
p7JpkRTjCKYy4znqg64jOyi8ghcfotyTXq0QYTjZ6WYDG8IzuYI7sRY+6WcCmxeG
YlHi33DjHHpKcc1OfooIB83rBbNMHA7C3FJZHtvYOWtqLqELqwjDXcEX0XT2PWA=
-----END CERTIFICATE-----
Generated at Wed May 13 02:44:13 2026 by rpki-client