Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6510217-64a9-423f-9fe1-04a15cf650fb.roa
File:                     b6510217-64a9-423f-9fe1-04a15cf650fb.roa (raw, json)
Hash identifier:          yHulYJr7MMOTzZ4VGOk03i2Fx57sD8bPkQZlHwt5P1U=
Subject key identifier:   09:7E:D1:F3:92:68:F6:1B:8E:BB:83:BF:CD:FA:E8:BC:12:35:85:DE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       396C2D7C76E8FD5A6B94E678369903DD8767AD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6510217-64a9-423f-9fe1-04a15cf650fb.roa
Signing time:             Sun 03 May 2026 00:00:48 +0000
ROA not before:           Sun 03 May 2026 00:00:48 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a94::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6c:2d:7c:76:e8:fd:5a:6b:94:e6:78:36:99:03:dd:87:67:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:00:48 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=4b1d523c9c058ea18411115563313212a7683001801b3cbff110b04cc722d9c5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:43:29:01:c2:96:7d:68:be:84:b7:b9:81:
                    52:1e:7b:7c:54:f0:3a:3d:44:86:be:2a:ab:e4:74:
                    b7:fc:0e:3a:5a:76:79:a5:50:a2:06:74:10:62:5a:
                    0c:18:49:cd:1c:31:50:46:66:c2:3e:de:e6:79:00:
                    2d:14:f1:72:2e:28:47:f3:20:18:79:04:9d:c8:1b:
                    58:16:ab:6a:f3:65:56:51:a5:16:eb:a5:c4:49:eb:
                    e6:7f:11:86:e6:6e:68:a0:25:6d:63:a5:41:d0:cd:
                    2b:de:86:7f:fe:5a:46:bb:0d:fb:81:09:24:61:d5:
                    6a:58:ff:67:4d:2a:d3:63:8b:5c:8d:c0:ee:59:6d:
                    a6:68:28:0e:06:64:e2:ca:b1:df:bb:81:2a:06:cf:
                    68:e9:ec:7a:7f:56:fe:9f:49:bf:47:62:9b:7c:da:
                    bc:0b:01:60:c0:c3:81:c0:7a:1f:ae:d9:7c:1a:f0:
                    a6:4a:79:98:ab:5c:51:49:aa:af:a3:51:32:dc:23:
                    df:a0:29:59:d7:a0:b5:16:cc:de:07:d9:99:1f:82:
                    99:07:7a:32:5b:3b:2e:a5:ae:99:be:28:45:c9:0c:
                    8a:66:f1:30:6d:7d:9f:d7:68:77:0f:d3:85:0c:39:
                    4d:1e:e9:c8:55:e7:51:2d:94:56:d8:20:28:0a:26:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:D1:F3:92:68:F6:1B:8E:BB:83:BF:CD:FA:E8:BC:12:35:85:DE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b6510217-64a9-423f-9fe1-04a15cf650fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a94::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:9f:6e:13:5a:fe:5e:5a:01:37:a0:b0:15:e2:62:96:52:
         0a:76:76:71:10:22:79:24:43:25:2f:b7:6b:3b:f2:b8:94:8f:
         19:70:4d:28:2e:7c:19:c1:32:58:c1:a2:77:9d:f7:ff:a3:32:
         93:fa:e9:9a:1b:4d:9b:55:cc:2f:bc:c5:6c:45:c2:4a:da:fe:
         91:01:4b:1b:77:ac:aa:e0:88:44:71:eb:17:86:b7:3c:73:c2:
         05:f1:b0:a4:02:66:3e:0a:1a:fb:e4:bd:da:f4:20:9b:a6:80:
         15:ea:08:30:96:f3:d1:8f:c2:a8:0a:ba:e6:7c:57:79:b4:0d:
         5b:41:58:35:95:e0:97:3f:e2:05:c0:b6:b4:04:58:38:64:5b:
         89:07:84:95:e2:48:5b:c5:45:69:00:2f:e9:fd:e1:5f:5b:ef:
         43:46:6f:9e:c9:9c:91:d7:d8:cb:07:9a:2a:22:06:33:b2:d3:
         68:c5:c1:e7:e3:7f:ce:ff:c7:86:7b:28:81:53:43:f5:b7:d8:
         fe:ad:93:0d:54:17:ea:8f:fe:e2:88:42:78:d7:ca:0b:76:d4:
         80:5d:4a:78:d7:85:19:7f:fe:32:70:13:5f:f9:5c:cf:59:a7:
         70:52:49:b3:48:a4:bd:37:cd:b2:18:f0:c7:83:a5:49:fb:dc:
         58:83:bb:6a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITOWwtfHbo/VprlOZ4NpkD3YdnrTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA1MDMwMDAwNDhaFw0yNjA4MDEyMzU5NTla
MHoxSTBHBgNVBAUTQDRiMWQ1MjNjOWMwNThlYTE4NDExMTE1NTYzMzEzMjEyYTc2
ODMwMDE4MDFiM2NiZmYxMTBiMDRjYzcyMmQ5YzUxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJMQykBwpZ9aL6Et7mBUh57fFTwOj1Ehr4qq+R0t/wOOlp2
eaVQogZ0EGJaDBhJzRwxUEZmwj7e5nkALRTxci4oR/MgGHkEncgbWBaravNlVlGl
FuulxEnr5n8RhuZuaKAlbWOlQdDNK96Gf/5aRrsN+4EJJGHValj/Z00q02OLXI3A
7lltpmgoDgZk4sqx37uBKgbPaOnsen9W/p9Jv0dim3zavAsBYMDDgcB6H67ZfBrw
pkp5mKtcUUmqr6NRMtwj36ApWdegtRbM3gfZmR+CmQd6Mls7LqWumb4oRckMimbx
MG19n9dodw/ThQw5TR7pyFXnUS2UVtggKAomobECAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBQJftHzkmj2G467g7/N+ui8EjWF3jAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvYjY1MTAyMTctNjRhOS00MjNmLTlmZTEtMDRhMTVjZjY1MGZiLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHASYAkAAqlDANBgkqhkiG9w0BAQsFAAOCAQEAGD2fbhNa/l5aATegsBXiYpZS
CnZ2cRAieSRDJS+3azvyuJSPGXBNKC58GcEyWMGid533/6Myk/rpmhtNm1XML7zF
bEXCStr+kQFLG3esquCIRHHrF4a3PHPCBfGwpAJmPgoa++S92vQgm6aAFeoIMJbz
0Y/CqAq65nxXebQNW0FYNZXglz/iBcC2tARYOGRbiQeEleJIW8VFaQAv6f3hX1vv
Q0ZvnsmckdfYyweaKiIGM7LTaMXB5+N/zv/HhnsogVND9bfY/q2TDVQX6o/+4ohC
eNfKC3bUgF1KeNeFGX/+MnATX/lcz1mncFJJs0ikvTfNshjwx4OlSfvcWIO7ag==
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:44 2026 by rpki-client