Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a186a447-0a0a-4785-b348-3b57a8fc0c74.roa
File:                     a186a447-0a0a-4785-b348-3b57a8fc0c74.roa (raw, json)
Hash identifier:          gNbJAeTX0HR6CKTBjqmXA3qX2JRhj32UxRwG2NRNjuw=
Subject key identifier:   27:19:78:FC:22:4D:F9:13:CC:F0:B2:92:6A:6F:8D:0C:83:19:00:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17F3377C2B3FBBCC72B671C75396F626CFBE75B9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a186a447-0a0a-4785-b348-3b57a8fc0c74.roa
Signing time:             Mon 04 May 2026 08:50:51 +0000
ROA not before:           Mon 04 May 2026 08:50:51 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3de8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f3:37:7c:2b:3f:bb:cc:72:b6:71:c7:53:96:f6:26:cf:be:75:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 08:50:51 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=63a4de3b04d9d6ae1613c5a6750280906cbd123f79c0e7b6f9e999a9181c85c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:8c:c4:38:d5:c4:28:ba:7c:8e:b6:17:51:
                    ae:c3:e2:47:52:5e:8f:7f:0c:c3:15:f8:d2:18:17:
                    2e:de:f7:4f:33:e0:d4:81:6a:3f:11:cc:5f:22:f9:
                    c1:7b:1b:44:4f:d9:9c:f6:07:a2:76:a0:f8:69:b7:
                    6f:00:3c:32:fd:04:bc:58:95:69:5d:be:5a:05:00:
                    20:c1:55:7a:1a:e8:7e:38:d0:8d:2e:0c:7a:f6:5e:
                    3b:a6:19:af:ca:4d:f8:eb:3b:54:a9:9e:a1:ab:88:
                    4d:a0:cc:33:ab:25:98:9d:bf:10:62:c1:fc:f7:8b:
                    54:60:ee:79:9e:98:92:f2:bd:9d:a4:f9:56:5e:66:
                    9e:84:a0:fe:10:01:f5:3f:7e:38:33:90:c0:bb:bd:
                    ad:4f:78:60:6b:11:4f:cd:51:dd:d5:02:47:61:e9:
                    8c:69:bc:9c:20:34:b5:2f:7d:e2:6a:8d:10:01:0b:
                    d8:b2:30:e5:a0:bb:8b:05:65:5d:5f:6e:cd:12:1b:
                    52:55:85:0f:77:cb:b5:34:b0:5d:50:39:13:45:f0:
                    52:b7:e1:34:e0:33:be:9d:e5:85:6d:f7:37:08:05:
                    a2:4c:fb:1c:19:b7:64:80:de:44:fe:18:99:2e:bb:
                    80:70:b1:1c:af:42:56:ad:fa:21:a0:6a:ca:2f:4b:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:19:78:FC:22:4D:F9:13:CC:F0:B2:92:6A:6F:8D:0C:83:19:00:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a186a447-0a0a-4785-b348-3b57a8fc0c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3de8::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:be:35:f3:af:66:8f:ae:ba:02:0d:2a:9e:6e:7e:c8:2c:
         6e:49:65:cb:bc:86:e1:c6:d1:a6:01:2b:56:8c:21:b8:51:d8:
         06:f5:9a:e0:40:48:f1:a2:f8:a1:6d:39:7b:57:da:4e:1c:7b:
         3d:a5:58:b4:82:83:6c:d1:4c:5a:b0:ce:3f:79:3f:2b:db:72:
         e5:34:3b:19:42:3f:ae:43:4b:69:e3:63:b6:ef:fd:93:ac:ae:
         79:8f:36:d9:4d:be:ac:0c:96:66:aa:22:ab:f3:ce:63:56:2c:
         0f:02:3c:f8:8a:22:87:24:89:91:f5:87:82:b6:57:c4:16:4c:
         07:11:48:f1:f6:53:f1:65:4d:17:da:d6:22:c5:0d:33:5f:3b:
         90:05:3b:d8:4b:3f:91:07:fe:87:81:7b:17:6f:84:bc:9f:56:
         c6:c7:99:98:eb:91:43:7f:41:14:f8:c8:e1:e3:c9:21:62:5d:
         84:43:26:39:4d:cc:e4:69:69:97:ed:ca:b5:2f:26:f4:30:33:
         db:ec:6e:f3:06:84:cd:96:08:b3:7e:15:4f:0c:1b:9a:d4:f5:
         77:02:e2:d3:d3:e0:16:f7:e8:ff:ea:01:f5:1a:67:15:be:22:
         df:f4:5c:4f:40:45:4b:3d:df:fc:eb:b3:f4:32:60:8a:a5:e4:
         d4:8d:25:60
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF/M3fCs/u8xytnHHU5b2Js++dbkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDg1MDUxWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2M2E0ZGUzYjA0ZDlkNmFlMTYxM2M1YTY3NTAyODA5MDZj
YmQxMjNmNzljMGU3YjZmOWU5OTlhOTE4MWM4NWMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr14zEONXEKLp8jrYXUa7D4kdSXo9/DMMV+NIYFy7e908z
4NSBaj8RzF8i+cF7G0RP2Zz2B6J2oPhpt28APDL9BLxYlWldvloFACDBVXoa6H44
0I0uDHr2XjumGa/KTfjrO1SpnqGriE2gzDOrJZidvxBiwfz3i1Rg7nmemJLyvZ2k
+VZeZp6EoP4QAfU/fjgzkMC7va1PeGBrEU/NUd3VAkdh6YxpvJwgNLUvfeJqjRAB
C9iyMOWgu4sFZV1fbs0SG1JVhQ93y7U0sF1QORNF8FK34TTgM76d5YVt9zcIBaJM
+xwZt2SA3kT+GJkuu4BwsRyvQlat+iGgasovS5iLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJxl4/CJN+RPM8LKSam+NDIMZAFswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ExODZhNDQ3LTBhMGEtNDc4NS1iMzQ4LTNiNTdhOGZjMGM3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPegwDQYJKoZIhvcNAQELBQADggEBADa2vjXzr2aPrroCDSqebn7I
LG5JZcu8huHG0aYBK1aMIbhR2Ab1muBASPGi+KFtOXtX2k4cez2lWLSCg2zRTFqw
zj95PyvbcuU0OxlCP65DS2njY7bv/ZOsrnmPNtlNvqwMlmaqIqvzzmNWLA8CPPiK
IockiZH1h4K2V8QWTAcRSPH2U/FlTRfa1iLFDTNfO5AFO9hLP5EH/oeBexdvhLyf
VsbHmZjrkUN/QRT4yOHjySFiXYRDJjlNzORpaZftyrUvJvQwM9vsbvMGhM2WCLN+
FU8MG5rU9XcC4tPT4Bb36P/qAfUaZxW+It/0XE9ARUs93/zrs/QyYIql5NSNJWA=
-----END CERTIFICATE-----
Generated at Wed May 13 01:02:32 2026 by rpki-client