Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19732d6b-85fe-448b-8052-39ac77144052.roa
File:                     19732d6b-85fe-448b-8052-39ac77144052.roa (raw, json)
Hash identifier:          p5yS2Em8FFuWuTNSheTeYomJFaPf7FDflLEZFZvHfRo=
Subject key identifier:   1C:51:48:A7:60:5D:E5:BE:CB:8B:52:D0:B3:E9:F2:D4:6E:08:0D:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       085A9F6A7668A2D63AF3CFFDB6E29742B2F85933
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19732d6b-85fe-448b-8052-39ac77144052.roa
Signing time:             Sun 03 May 2026 03:21:53 +0000
ROA not before:           Sun 03 May 2026 03:21:53 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c96::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:9f:6a:76:68:a2:d6:3a:f3:cf:fd:b6:e2:97:42:b2:f8:59:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:21:53 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=9c53aa5051be00a62cc05820867203ef9b67c3244006ad8e82a2dca090d13fb2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:ac:99:ec:91:79:7a:35:e1:21:2c:28:bf:
                    90:94:ef:55:91:ea:f9:21:36:5e:85:fe:db:c0:38:
                    7e:33:20:65:00:eb:69:cb:66:2a:ff:07:c1:87:24:
                    34:9f:49:4b:ed:ca:34:39:db:9d:91:bc:5e:80:fe:
                    4a:f4:88:a5:19:7e:3a:9d:12:6c:f2:23:a9:5b:44:
                    95:6d:28:e4:08:3d:e4:f1:79:77:e1:08:ca:20:68:
                    c4:ff:ab:5f:9d:80:f6:16:94:a3:71:d4:cb:da:1f:
                    53:29:1a:7c:4c:08:80:c3:b2:ab:8b:ba:82:36:f6:
                    6d:62:95:f3:77:e9:cd:46:65:76:10:6c:89:fe:df:
                    44:9b:14:80:3e:e5:12:e4:79:5a:89:70:97:2c:be:
                    4c:e7:db:47:57:7a:f7:5a:0e:68:06:82:65:03:02:
                    74:00:53:0d:ed:be:48:c9:58:09:0f:93:e0:05:d6:
                    fd:d1:4a:5e:a2:99:9d:b6:9d:d8:c4:09:c0:56:80:
                    5d:c3:0c:d5:0a:82:a0:87:69:ff:e9:18:06:a7:3c:
                    e6:02:63:72:1f:7d:df:fe:88:17:4b:4f:16:e3:e3:
                    73:a5:d3:c0:ae:3b:c5:a5:0f:4a:9b:83:26:3f:e4:
                    fa:9a:6a:36:9a:67:aa:7e:2c:87:90:cf:d7:30:83:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:51:48:A7:60:5D:E5:BE:CB:8B:52:D0:B3:E9:F2:D4:6E:08:0D:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/19732d6b-85fe-448b-8052-39ac77144052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c96::/47

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:5d:51:71:4c:21:4e:fd:33:9b:f4:06:f7:63:a4:43:99:
         3e:53:b0:48:91:8b:63:f2:7f:c2:2d:e9:09:d5:e4:de:e4:22:
         57:f7:3f:1b:df:4a:a8:d4:4b:f5:b4:e5:0a:ae:85:e6:df:a4:
         4a:8c:98:b5:28:63:55:3e:fd:83:a6:a7:b5:f8:c9:bf:1e:41:
         a5:bf:79:1e:1c:a4:67:df:e3:02:53:56:9a:bf:bf:ad:b5:04:
         5a:e2:41:c9:13:70:08:47:db:fa:54:e6:53:2e:b7:b8:d5:ec:
         c0:5d:15:98:e0:a3:c6:71:37:f7:9e:ae:82:57:47:a1:61:ff:
         b6:bb:14:23:79:8f:4d:4b:85:77:8f:33:f9:96:53:81:b0:fa:
         eb:c7:ee:ee:b3:7c:3b:d5:e6:41:c7:fa:91:a5:5d:51:cd:24:
         56:52:d4:fc:64:71:88:4a:f7:1a:86:9f:7b:dc:61:fd:27:36:
         2d:57:f2:5c:4c:5a:b4:f3:32:60:8e:a4:b7:dd:af:1c:15:74:
         f0:98:9d:6c:e4:4e:ed:12:0d:df:dd:e1:6b:99:0b:b9:c3:f7:
         94:fc:d7:d5:15:97:1b:7e:12:78:8b:d2:e6:7f:ad:d2:26:fa:
         b0:82:6a:fe:ff:07:db:d7:a4:f4:62:12:5d:94:56:00:ff:b1:
         65:d5:d2:8c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCFqfanZootY688/9tuKXQrL4WTMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDMyMTUzWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YzUzYWE1MDUxYmUwMGE2MmNjMDU4MjA4NjcyMDNlZjli
NjdjMzI0NDAwNmFkOGU4MmEyZGNhMDkwZDEzZmIyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSgayZ7JF5ejXhISwov5CU71WR6vkhNl6F/tvAOH4zIGUA
62nLZir/B8GHJDSfSUvtyjQ5252RvF6A/kr0iKUZfjqdEmzyI6lbRJVtKOQIPeTx
eXfhCMogaMT/q1+dgPYWlKNx1MvaH1MpGnxMCIDDsquLuoI29m1ilfN36c1GZXYQ
bIn+30SbFIA+5RLkeVqJcJcsvkzn20dXevdaDmgGgmUDAnQAUw3tvkjJWAkPk+AF
1v3RSl6imZ22ndjECcBWgF3DDNUKgqCHaf/pGAanPOYCY3Iffd/+iBdLTxbj43Ol
08CuO8WlD0qbgyY/5PqaajaaZ6p+LIeQz9cwg1aVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUHFFIp2Bd5b7Li1LQs+ny1G4IDQcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE5NzMyZDZiLTg1ZmUtNDQ4Yi04MDUyLTM5YWM3NzE0NDA1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALJYwDQYJKoZIhvcNAQELBQADggEBAIoBXVFxTCFO/TOb9Ab3Y6RD
mT5TsEiRi2Pyf8It6QnV5N7kIlf3PxvfSqjUS/W05QquhebfpEqMmLUoY1U+/YOm
p7X4yb8eQaW/eR4cpGff4wJTVpq/v621BFriQckTcAhH2/pU5lMut7jV7MBdFZjg
o8ZxN/eeroJXR6Fh/7a7FCN5j01LhXePM/mWU4Gw+uvH7u6zfDvV5kHH+pGlXVHN
JFZS1PxkcYhK9xqGn3vcYf0nNi1X8lxMWrTzMmCOpLfdrxwVdPCYnWzkTu0SDd/d
4WuZC7nD95T819UVlxt+EniL0uZ/rdIm+rCCav7/B9vXpPRiEl2UVgD/sWXV0ow=
-----END CERTIFICATE-----
Generated at Sun May 3 15:31:37 2026 by rpki-client