Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d3215-de47-4203-8dd4-b3ea55ba5f21.roa
File:                     8b4d3215-de47-4203-8dd4-b3ea55ba5f21.roa (raw, json)
Hash identifier:          LzUbj8yGoALGaI8oxXfP+TykLXNN0SzXYp2/+uFE21Y=
Subject key identifier:   EA:6F:66:99:1D:11:A6:C5:7B:A3:CE:BF:2F:65:0F:84:7E:AA:94:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       16DAEC3174610111788BB304CED3F0C1F5B7A09B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d3215-de47-4203-8dd4-b3ea55ba5f21.roa
Signing time:             Mon 04 May 2026 07:20:04 +0000
ROA not before:           Mon 04 May 2026 07:20:04 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31bc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:da:ec:31:74:61:01:11:78:8b:b3:04:ce:d3:f0:c1:f5:b7:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 07:20:04 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=0aec8b272a7cd7ff9a74f2fa03c191e52f28647354382a15dd04b9370f05466c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:98:e9:2e:53:1e:ff:e4:cc:06:55:f6:ea:7a:
                    86:2b:bc:bc:76:59:de:df:82:38:21:9e:d3:43:33:
                    56:3b:9a:9b:83:99:52:5e:b6:91:60:39:7d:a8:6e:
                    ee:45:58:cf:01:3d:58:51:24:b1:b6:a3:6a:11:de:
                    1d:61:1e:c2:63:52:21:0b:38:4e:51:69:72:a5:6c:
                    fe:d4:8f:d3:0f:d5:13:81:eb:b0:64:84:6f:95:81:
                    40:a1:ca:ee:69:cb:3e:d9:6d:7d:95:e2:4c:5c:b1:
                    bd:d6:7e:7d:28:56:22:d7:82:4f:5b:dd:b1:d3:c5:
                    ed:78:58:de:b3:c0:bb:1f:3a:40:36:5c:25:61:93:
                    78:4f:c4:38:5d:05:5f:a5:97:89:f5:2e:9b:1d:7f:
                    a3:10:d5:81:85:15:82:8b:f7:e9:c7:29:89:39:96:
                    2e:b6:69:20:79:c5:3d:3c:94:a9:26:e2:9b:65:65:
                    b5:41:bf:48:07:90:6d:74:ed:21:ad:88:c9:8e:f2:
                    f9:7e:54:62:d6:91:d8:e0:5a:b0:fb:98:c7:9d:e5:
                    b0:2c:64:4f:7e:07:57:96:4a:95:34:4b:92:38:5a:
                    c5:14:9f:eb:be:9d:b3:1b:da:fe:17:b5:03:9e:cb:
                    e8:b3:44:37:84:17:c4:fa:70:8d:70:02:e2:6b:bf:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6F:66:99:1D:11:A6:C5:7B:A3:CE:BF:2F:65:0F:84:7E:AA:94:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d3215-de47-4203-8dd4-b3ea55ba5f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31bc::/46

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:0d:74:dc:36:d6:af:2e:a1:0a:09:9f:90:61:ef:3c:07:
         dc:dc:f0:97:8b:f0:d7:bf:b4:6c:41:51:54:e4:29:bc:56:72:
         16:d4:69:27:08:ab:2b:ed:63:3f:94:18:b1:fa:f3:f6:3b:85:
         2f:9a:75:33:9b:2f:b3:24:2c:e3:f2:cd:54:64:24:12:eb:78:
         9d:25:d7:01:f8:90:bb:08:3d:15:63:0a:39:61:32:08:8a:f0:
         66:8c:a1:4d:e2:7d:5a:5f:12:2d:ef:c5:45:11:4d:50:9b:24:
         73:d3:93:a5:a4:e7:6c:eb:7d:37:67:ba:2b:18:aa:52:c6:5c:
         54:ae:e1:ce:26:0a:50:d8:8e:6f:52:e6:65:90:54:bc:83:35:
         44:36:26:de:7c:b8:2e:de:23:58:c2:fc:3a:55:a8:15:a1:22:
         b0:b3:a2:aa:41:d5:50:fa:13:84:a1:e6:d9:25:01:a1:21:cc:
         af:e3:a0:85:bb:60:cb:fd:b2:bc:a0:3d:4f:ed:10:2c:8b:58:
         82:19:e6:f1:d7:d2:38:1d:db:69:2a:51:b3:4e:19:49:38:6f:
         62:36:ca:73:50:32:41:3f:a2:0e:7b:8f:48:93:fa:0c:ed:11:
         13:1b:f3:a5:a5:e5:c7:e0:0b:8b:b0:25:c4:16:3a:76:c6:5a:
         73:05:43:d7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFtrsMXRhARF4i7MEztPwwfW3oJswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDcyMDA0WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYWVjOGIyNzJhN2NkN2ZmOWE3NGYyZmEwM2MxOTFlNTJm
Mjg2NDczNTQzODJhMTVkZDA0YjkzNzBmMDU0NjZjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD6mOkuUx7/5MwGVfbqeoYrvLx2Wd7fgjghntNDM1Y7mpuD
mVJetpFgOX2obu5FWM8BPVhRJLG2o2oR3h1hHsJjUiELOE5RaXKlbP7Uj9MP1ROB
67BkhG+VgUChyu5pyz7ZbX2V4kxcsb3Wfn0oViLXgk9b3bHTxe14WN6zwLsfOkA2
XCVhk3hPxDhdBV+ll4n1Lpsdf6MQ1YGFFYKL9+nHKYk5li62aSB5xT08lKkm4ptl
ZbVBv0gHkG107SGtiMmO8vl+VGLWkdjgWrD7mMed5bAsZE9+B1eWSpU0S5I4WsUU
n+u+nbMb2v4XtQOey+izRDeEF8T6cI1wAuJrv9LzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU6m9mmR0RpsV7o86/L2UPhH6qlBIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhiNGQzMjE1LWRlNDctNDIwMy04ZGQ0LWIzZWE1NWJhNWYyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAMbwwDQYJKoZIhvcNAQELBQADggEBAFz3DXTcNtavLqEKCZ+QYe88
B9zc8JeL8Ne/tGxBUVTkKbxWchbUaScIqyvtYz+UGLH68/Y7hS+adTObL7MkLOPy
zVRkJBLreJ0l1wH4kLsIPRVjCjlhMgiK8GaMoU3ifVpfEi3vxUURTVCbJHPTk6Wk
52zrfTdnuisYqlLGXFSu4c4mClDYjm9S5mWQVLyDNUQ2Jt58uC7eI1jC/DpVqBWh
IrCzoqpB1VD6E4Sh5tklAaEhzK/joIW7YMv9srygPU/tECyLWIIZ5vHX0jgd22kq
UbNOGUk4b2I2ynNQMkE/og57j0iT+gztERMb86Wl5cfgC4uwJcQWOnbGWnMFQ9c=
-----END CERTIFICATE-----
Generated at Wed May 13 02:31:44 2026 by rpki-client