Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/933fe9e0-1f44-4285-a336-442b6c2c7cd6.roa
File:                     933fe9e0-1f44-4285-a336-442b6c2c7cd6.roa (raw, json)
Hash identifier:          VaPX+2ZMnynydmoyFUAO9wv2eRUuiZo1S8PbBD5PGdo=
Subject key identifier:   9B:58:B3:21:D1:DF:8C:18:D7:44:B0:A9:32:18:66:94:94:93:E8:1D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F0844C83F5FAA6406417D3345D8CC7BA5740755
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/933fe9e0-1f44-4285-a336-442b6c2c7cd6.roa
Signing time:             Mon 04 May 2026 11:21:25 +0000
ROA not before:           Mon 04 May 2026 11:21:25 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e7a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:08:44:c8:3f:5f:aa:64:06:41:7d:33:45:d8:cc:7b:a5:74:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 11:21:25 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3ea0b1ce6ef6b5115f0e3cbcd213f13f920cf17ce9c56b01599a2538c628dde2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:55:a0:78:58:ad:71:1f:51:56:1a:c8:c9:
                    26:7e:fb:48:50:5a:7e:0a:97:ee:1f:e3:ef:f6:ba:
                    6a:47:94:49:5a:c4:f9:eb:b3:59:e6:c4:d9:e0:ed:
                    83:89:30:bd:54:1b:d3:62:4e:f9:19:f1:bd:93:61:
                    cd:04:67:87:05:bd:ae:b1:03:a3:67:b6:5b:cc:f9:
                    95:ef:85:e0:c4:ba:82:c1:4a:87:10:ac:ce:ab:96:
                    ae:1d:18:d8:b8:35:69:89:c8:a8:3b:e3:90:3d:61:
                    92:6f:21:6e:a7:5e:f6:23:ad:d1:1b:3c:29:e7:67:
                    d4:68:07:dc:cc:7c:e3:f0:e7:4a:95:da:11:58:84:
                    46:e3:bd:91:87:35:95:5a:f5:90:f4:6c:50:e1:07:
                    13:bb:6a:e6:7c:85:11:c1:6c:24:13:45:28:cf:d9:
                    dd:e1:97:89:f0:ca:f6:c4:88:2d:19:0b:6c:9b:88:
                    5e:53:d1:11:90:90:12:03:a5:f9:1c:87:92:f9:bd:
                    bd:0d:37:34:c8:bb:c4:b2:9c:09:36:8d:87:56:f4:
                    69:d9:3c:98:23:66:f1:4b:41:ea:ce:c7:4c:6e:58:
                    a1:86:48:6b:dd:6b:33:9f:99:24:00:81:e8:8e:53:
                    18:af:23:6c:84:c8:b4:66:4d:84:c5:df:e0:f7:8c:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:B3:21:D1:DF:8C:18:D7:44:B0:A9:32:18:66:94:94:93:E8:1D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/933fe9e0-1f44-4285-a336-442b6c2c7cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e7a::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:0b:5e:8f:1a:69:d8:77:28:8e:8d:05:c4:cb:03:3c:d5:
         bb:19:d6:3f:2c:f8:46:bc:64:2d:ef:0e:c9:e1:99:3c:81:43:
         81:51:86:61:c2:2b:d3:7f:1b:0d:d3:3b:b8:9a:af:37:5c:9c:
         40:42:5b:f3:4f:5f:d1:41:3a:04:7f:3e:c2:de:e3:44:e7:3b:
         4a:98:7f:72:1b:dc:65:f5:d4:7a:f0:bd:7c:54:d5:aa:46:6d:
         47:bb:d6:1c:1f:98:1a:00:1b:8c:69:17:fe:0f:aa:fa:05:ee:
         51:e5:a7:a9:75:d9:b4:bb:d2:ce:fc:df:53:f8:e1:c4:7c:c6:
         ff:2c:4c:ce:cc:3e:b9:b2:59:e4:de:ff:dc:a0:cf:5b:c2:21:
         3e:2c:77:ec:11:61:39:a1:a7:23:bb:5f:b5:39:4b:4f:cf:86:
         6a:90:60:c1:80:06:79:fb:d6:90:93:e7:ad:b0:b7:51:df:0f:
         75:ac:5f:ab:e1:df:cb:31:3c:47:53:6a:b9:e9:a9:02:9c:06:
         a3:6d:3f:db:81:63:3f:f1:ce:bd:d2:d5:8b:7e:10:88:e2:07:
         00:82:9c:be:71:4c:f8:b0:30:ab:fa:27:0a:2e:4c:2e:27:1a:
         ae:8a:f2:80:46:0e:b7:67:fa:88:e2:e9:b9:a9:35:50:58:5b:
         3c:53:92:13
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfwhEyD9fqmQGQX0zRdjMe6V0B1UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTEyMTI1WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZWEwYjFjZTZlZjZiNTExNWYwZTNjYmNkMjEzZjEzZjky
MGNmMTdjZTljNTZiMDE1OTlhMjUzOGM2MjhkZGUyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSVlWgeFitcR9RVhrIySZ++0hQWn4Kl+4f4+/2umpHlEla
xPnrs1nmxNng7YOJML1UG9NiTvkZ8b2TYc0EZ4cFva6xA6NntlvM+ZXvheDEuoLB
SocQrM6rlq4dGNi4NWmJyKg745A9YZJvIW6nXvYjrdEbPCnnZ9RoB9zMfOPw50qV
2hFYhEbjvZGHNZVa9ZD0bFDhBxO7auZ8hRHBbCQTRSjP2d3hl4nwyvbEiC0ZC2yb
iF5T0RGQkBIDpfkch5L5vb0NNzTIu8SynAk2jYdW9GnZPJgjZvFLQerOx0xuWKGG
SGvdazOfmSQAgeiOUxivI2yEyLRmTYTF3+D3jNbpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUm1izIdHfjBjXRLCpMhhmlJST6B0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkzM2ZlOWUwLTFmNDQtNDI4NS1hMzM2LTQ0MmI2YzJjN2NkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPnowDQYJKoZIhvcNAQELBQADggEBACytC16PGmnYdyiOjQXEywM8
1bsZ1j8s+Ea8ZC3vDsnhmTyBQ4FRhmHCK9N/Gw3TO7iarzdcnEBCW/NPX9FBOgR/
PsLe40TnO0qYf3Ib3GX11HrwvXxU1apGbUe71hwfmBoAG4xpF/4PqvoF7lHlp6l1
2bS70s7831P44cR8xv8sTM7MPrmyWeTe/9ygz1vCIT4sd+wRYTmhpyO7X7U5S0/P
hmqQYMGABnn71pCT562wt1HfD3WsX6vh38sxPEdTarnpqQKcBqNtP9uBYz/xzr3S
1Yt+EIjiBwCCnL5xTPiwMKv6JwouTC4nGq6K8oBGDrdn+oji6bmpNVBYWzxTkhM=
-----END CERTIFICATE-----
Generated at Wed May 13 00:48:44 2026 by rpki-client