Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f65c5fd-a9b9-43ee-93ea-d00f0d63792d.roa
File:                     9f65c5fd-a9b9-43ee-93ea-d00f0d63792d.roa (raw, json)
Hash identifier:          ym0n++jfbs1dddq+7LBZh2n42qGbqdAcSxKFk62IcEk=
Subject key identifier:   64:03:7C:7A:E3:96:68:20:C1:F7:FF:ED:11:17:70:05:67:3B:76:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35A9AFEDA3042C6373E1BD632A812B0EA765AFBA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f65c5fd-a9b9-43ee-93ea-d00f0d63792d.roa
Signing time:             Mon 04 May 2026 06:20:50 +0000
ROA not before:           Mon 04 May 2026 06:20:50 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ef8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a9:af:ed:a3:04:2c:63:73:e1:bd:63:2a:81:2b:0e:a7:65:af:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 06:20:50 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=d47c44559f7f865169a1970c67288ae0bf183b2bfe10339a7775ca4dbd71eabf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:47:7d:a2:ab:0a:08:08:99:d9:c7:1c:d8:
                    3c:c2:bb:74:74:5a:cf:f5:3d:3b:43:84:81:cf:c4:
                    59:72:e2:99:50:cb:05:7f:7a:01:33:98:9d:20:43:
                    44:2a:dd:ec:80:ae:94:cb:84:cc:f5:4d:02:6f:de:
                    a0:a0:8e:ed:59:c3:47:40:5b:5b:f6:23:05:41:b1:
                    07:ff:71:8a:b3:60:46:2a:7d:18:90:ad:e9:13:3d:
                    61:8a:5f:75:0d:55:0f:70:08:bc:03:44:f9:3c:7b:
                    f8:1a:3d:8e:af:04:73:72:3c:e7:85:be:c6:4e:50:
                    e4:04:b3:b8:fe:c5:59:5e:fa:fe:68:c0:36:db:49:
                    01:d2:d7:2e:9f:1b:2d:88:56:08:67:01:6f:dc:18:
                    75:5b:cd:f9:57:f5:37:c7:49:f1:fa:af:90:00:e2:
                    4b:22:c1:47:cd:1f:71:43:25:d7:b8:75:a4:28:d7:
                    44:c0:22:ad:d1:77:2f:2c:10:59:c4:02:22:02:19:
                    5b:47:c3:63:00:1d:69:a7:ae:6e:eb:97:8a:bc:ab:
                    82:77:d1:6f:83:bb:7d:e6:9d:6a:1f:42:18:e7:89:
                    f6:cd:15:e3:e5:9e:7f:29:02:ef:74:5c:46:e0:8a:
                    a3:df:6e:e3:7f:9a:a5:dd:f3:02:e7:35:9e:04:c6:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:7C:7A:E3:96:68:20:C1:F7:FF:ED:11:17:70:05:67:3B:76:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f65c5fd-a9b9-43ee-93ea-d00f0d63792d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ef8::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:aa:be:6c:5d:bc:e4:df:c4:67:9b:aa:1b:20:ac:cb:df:
         60:71:08:94:24:76:01:28:a6:dd:c6:af:8f:d8:60:20:b0:22:
         cf:e1:ea:d1:be:c2:da:39:3f:66:a2:e6:5b:e0:36:74:4b:81:
         f5:b1:70:ba:7a:a0:cc:99:0a:62:3e:fa:3b:29:18:03:0c:d9:
         5d:75:29:cb:07:ce:69:56:89:d0:5c:d1:a5:09:3e:0f:ef:dc:
         25:e4:c0:39:f3:aa:ec:c9:bc:74:4e:de:d7:63:c6:be:62:ef:
         fc:4b:7c:09:43:f3:75:59:49:24:44:e4:a7:d7:21:50:ed:dd:
         ee:17:97:f1:38:93:41:0c:31:c5:4c:3d:54:d8:27:71:ff:b5:
         0f:bc:c5:bb:25:cb:71:99:91:59:b9:4c:96:82:d7:a5:f9:3a:
         19:58:7f:e5:f1:14:d5:2c:66:75:92:c2:4d:f0:5d:c2:e7:02:
         66:b4:55:64:cd:f5:91:4a:44:48:75:f8:a1:f1:1c:c1:a6:f3:
         c5:9e:aa:f6:84:87:c3:7d:0a:24:44:b8:3a:15:f0:2a:dc:95:
         46:9b:68:9a:06:5c:11:fc:4f:78:54:b7:33:3f:16:c5:91:e9:
         10:27:9d:f3:6e:4f:8d:03:ed:47:95:64:cc:88:41:fb:b3:0d:
         52:c2:94:eb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNamv7aMELGNz4b1jKoErDqdlr7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDYyMDUwWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNDdjNDQ1NTlmN2Y4NjUxNjlhMTk3MGM2NzI4OGFlMGJm
MTgzYjJiZmUxMDMzOWE3Nzc1Y2E0ZGJkNzFlYWJmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbY0d9oqsKCAiZ2ccc2DzCu3R0Ws/1PTtDhIHPxFly4plQ
ywV/egEzmJ0gQ0Qq3eyArpTLhMz1TQJv3qCgju1Zw0dAW1v2IwVBsQf/cYqzYEYq
fRiQrekTPWGKX3UNVQ9wCLwDRPk8e/gaPY6vBHNyPOeFvsZOUOQEs7j+xVle+v5o
wDbbSQHS1y6fGy2IVghnAW/cGHVbzflX9TfHSfH6r5AA4ksiwUfNH3FDJde4daQo
10TAIq3Rdy8sEFnEAiICGVtHw2MAHWmnrm7rl4q8q4J30W+Du33mnWofQhjnifbN
FePlnn8pAu90XEbgiqPfbuN/mqXd8wLnNZ4ExmM9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZAN8euOWaCDB9//tERdwBWc7diEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzlmNjVjNWZkLWE5YjktNDNlZS05M2VhLWQwMGYwZDYzNzkyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPvgwDQYJKoZIhvcNAQELBQADggEBAKK1qr5sXbzk38Rnm6obIKzL
32BxCJQkdgEopt3Gr4/YYCCwIs/h6tG+wto5P2ai5lvgNnRLgfWxcLp6oMyZCmI+
+jspGAMM2V11KcsHzmlWidBc0aUJPg/v3CXkwDnzquzJvHRO3tdjxr5i7/xLfAlD
83VZSSRE5KfXIVDt3e4Xl/E4k0EMMcVMPVTYJ3H/tQ+8xbsly3GZkVm5TJaC16X5
OhlYf+XxFNUsZnWSwk3wXcLnAma0VWTN9ZFKREh1+KHxHMGm88WeqvaEh8N9CiRE
uDoV8CrclUabaJoGXBH8T3hUtzM/FsWR6RAnnfNuT40D7UeVZMyIQfuzDVLClOs=
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:31 2026 by rpki-client