Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b00a39-588b-45c4-bf2b-a1735c8acd32.roa
File:                     28b00a39-588b-45c4-bf2b-a1735c8acd32.roa (raw, json)
Hash identifier:          T56x16q9tem2th45FsZrGshUB2nlEBiLddYeBTCMHRA=
Subject key identifier:   4F:6C:CB:22:D8:91:EC:69:C7:93:61:C7:64:A5:98:F9:4D:E9:6D:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73AEB8ED741F717F410DCB3AC5F587624D3C66DB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b00a39-588b-45c4-bf2b-a1735c8acd32.roa
Signing time:             Sun 03 May 2026 00:41:27 +0000
ROA not before:           Sun 03 May 2026 00:41:27 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ae:b8:ed:74:1f:71:7f:41:0d:cb:3a:c5:f5:87:62:4d:3c:66:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:41:27 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=527b3cfdba6f9e35a65dfa5cdf19a4c1c2d424cd1826d3c0b488fffcf0855d55, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:66:8e:0c:84:49:5d:02:3d:a3:7c:28:7c:
                    0c:00:b2:87:80:08:b2:63:55:02:ac:c1:74:f7:1d:
                    cb:99:1b:e1:16:ae:97:d0:bb:ce:04:f6:1c:d4:08:
                    38:cc:db:fa:0e:bc:6e:5b:d1:6b:3a:ca:97:ad:7a:
                    ce:9f:cc:06:e2:00:35:a6:63:ad:e1:05:a1:4d:dc:
                    89:00:72:20:d5:ef:61:6c:54:3f:69:e9:02:a8:e5:
                    ea:82:be:9f:18:c0:e4:a9:de:ef:91:ce:a0:48:6b:
                    b7:d5:ce:e9:a9:1d:88:cc:87:a2:42:3a:b8:af:68:
                    2c:4b:ab:6b:b0:2d:c1:6a:1c:c0:84:72:f1:12:32:
                    d2:5e:af:b9:47:44:61:f9:e6:07:4c:d4:68:a8:2c:
                    9d:4f:76:43:e7:f4:f9:30:69:5a:2e:97:57:f3:3a:
                    ca:c0:cd:f7:42:0d:2d:b5:18:18:37:34:c9:fa:18:
                    06:5f:51:53:01:6e:5c:ba:d9:16:9a:13:43:40:48:
                    79:38:5c:40:32:16:cf:fc:6a:38:39:4b:65:e4:3d:
                    fd:87:b0:be:15:dc:49:87:69:e0:e9:96:6a:a7:82:
                    a7:d7:e3:2d:9a:1f:24:f5:dd:ac:5a:89:9d:80:66:
                    22:a9:69:62:6c:72:7c:b6:00:5c:1e:9f:b9:90:b3:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:CB:22:D8:91:EC:69:C7:93:61:C7:64:A5:98:F9:4D:E9:6D:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b00a39-588b-45c4-bf2b-a1735c8acd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:68:97:7c:d3:8f:55:20:05:b7:da:8e:1d:00:05:aa:0d:
         d6:97:3d:6c:c7:34:d5:13:3d:6e:36:1c:1b:72:38:c9:71:43:
         c0:16:ff:7f:de:d6:20:e6:09:61:1b:29:dd:11:2a:12:a8:4d:
         3c:17:45:b3:33:f9:c8:15:ec:b6:65:e4:7d:7b:a1:c3:89:a2:
         d2:ad:3c:01:a8:50:cf:2e:ae:5a:b8:41:c6:93:53:cd:f8:3b:
         52:00:b5:d2:2d:03:f1:1c:94:f6:bf:e4:fb:79:c0:48:97:23:
         90:55:81:f4:7c:5a:23:1d:1a:69:bc:69:82:cf:41:e5:52:a6:
         4c:9c:83:91:ef:1f:d3:d7:e0:98:74:cf:2c:89:60:b2:c5:05:
         aa:c3:13:41:f2:6a:10:23:11:b7:bb:90:c0:fc:17:b1:e0:ba:
         29:25:1b:b8:cf:69:39:0d:e2:af:f7:ec:52:52:97:50:4f:99:
         79:4a:b5:45:df:b8:f5:34:76:3c:e1:42:dc:54:41:ac:c1:41:
         2b:71:64:6f:5d:7d:8f:0b:3f:8b:d2:98:d5:f2:54:f5:ad:55:
         fc:8f:f7:28:9c:91:5a:f2:4a:51:e6:ae:97:87:38:e6:2d:b7:
         18:e4:00:71:b6:8d:43:c4:7c:8c:a9:5c:63:8d:1c:54:21:70:
         f7:7c:d2:a8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUc6647XQfcX9BDcs6xfWHYk08ZtswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDA0MTI3WhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjdiM2NmZGJhNmY5ZTM1YTY1ZGZhNWNkZjE5YTRjMWMy
ZDQyNGNkMTgyNmQzYzBiNDg4ZmZmY2YwODU1ZDU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfIGaODIRJXQI9o3wofAwAsoeACLJjVQKswXT3HcuZG+EW
rpfQu84E9hzUCDjM2/oOvG5b0Ws6ypetes6fzAbiADWmY63hBaFN3IkAciDV72Fs
VD9p6QKo5eqCvp8YwOSp3u+RzqBIa7fVzumpHYjMh6JCOrivaCxLq2uwLcFqHMCE
cvESMtJer7lHRGH55gdM1GioLJ1PdkPn9PkwaVoul1fzOsrAzfdCDS21GBg3NMn6
GAZfUVMBbly62RaaE0NASHk4XEAyFs/8ajg5S2XkPf2HsL4V3EmHaeDplmqngqfX
4y2aHyT13axaiZ2AZiKpaWJscny2AFwen7mQswzTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUT2zLItiR7GnHk2HHZKWY+U3pbSEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI4YjAwYTM5LTU4OGItNDVjNC1iZjJiLWExNzM1YzhhY2QzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAMaAwDQYJKoZIhvcNAQELBQADggEBADnMaJd8049VIAW32o4dAAWq
DdaXPWzHNNUTPW42HBtyOMlxQ8AW/3/e1iDmCWEbKd0RKhKoTTwXRbMz+cgV7LZl
5H17ocOJotKtPAGoUM8urlq4QcaTU834O1IAtdItA/EclPa/5Pt5wEiXI5BVgfR8
WiMdGmm8aYLPQeVSpkycg5HvH9PX4Jh0zyyJYLLFBarDE0HyahAjEbe7kMD8F7Hg
uiklG7jPaTkN4q/37FJSl1BPmXlKtUXfuPU0djzhQtxUQazBQStxZG9dfY8LP4vS
mNXyVPWtVfyP9yickVrySlHmrpeHOOYttxjkAHG2jUPEfIypXGONHFQhcPd80qg=
-----END CERTIFICATE-----
Generated at Sun May 3 16:52:20 2026 by rpki-client