Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bf6b764-3b1e-4f48-9dc5-d961e34ed1d3.roa
File:                     2bf6b764-3b1e-4f48-9dc5-d961e34ed1d3.roa (raw, json)
Hash identifier:          726TLr2bDLR4uqyJyfgAmuUe0a5Ds0rY72fNZO2lzrM=
Subject key identifier:   53:55:70:61:1A:27:06:4F:80:B1:F9:83:C2:90:78:63:8C:78:CA:24
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       30FB5CF9D6A2FFACC30DFF2CDE30B1C1ECA233A2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bf6b764-3b1e-4f48-9dc5-d961e34ed1d3.roa
Signing time:             Sun 03 May 2026 03:21:18 +0000
ROA not before:           Sun 03 May 2026 03:21:18 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b08::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fb:5c:f9:d6:a2:ff:ac:c3:0d:ff:2c:de:30:b1:c1:ec:a2:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:21:18 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=2be9d273942293c2ae7fae7b060b202e272866a262652283e00c5416037e20f7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:0e:68:5e:ec:7e:23:d0:b3:9b:98:65:64:
                    4f:99:49:91:db:37:ff:0e:8f:ff:e6:ce:47:d6:49:
                    38:5c:52:bb:bf:6d:be:ef:b6:f7:82:92:a2:30:10:
                    6d:3b:2d:c1:ba:a1:2d:38:03:12:84:22:21:3f:a2:
                    a0:a0:a4:ce:0d:72:27:82:ea:c0:f9:77:ac:35:26:
                    27:f7:1e:88:8a:a5:25:f5:68:7a:f5:17:e5:86:12:
                    9a:3a:2a:a5:86:d0:8a:4c:17:8d:d9:7f:fb:77:8c:
                    49:df:57:6c:53:36:95:7e:05:bd:03:b6:08:b8:66:
                    39:78:e3:e1:ea:6d:59:2e:77:98:d8:f0:a6:11:c5:
                    0c:1d:3a:5b:e3:fc:10:33:64:80:a6:7a:be:22:6a:
                    a2:9a:00:f5:51:81:bf:41:fd:c4:bf:b4:d7:9d:c5:
                    56:90:88:b7:94:31:6b:46:04:80:78:16:8c:bc:27:
                    ec:c6:d9:8c:bd:fb:7f:b9:df:6d:82:84:c2:0a:7d:
                    25:2f:9b:5b:cf:d1:a5:8e:70:2c:66:88:17:c2:65:
                    4d:25:58:a1:d0:22:90:a2:75:a8:ed:81:99:63:af:
                    23:3a:7b:6d:ab:56:53:ac:be:04:58:1b:c9:7b:2a:
                    57:92:2b:ac:ee:99:d3:75:4a:6c:cd:e4:e7:d2:59:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:55:70:61:1A:27:06:4F:80:B1:F9:83:C2:90:78:63:8C:78:CA:24
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2bf6b764-3b1e-4f48-9dc5-d961e34ed1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b08::/47

    Signature Algorithm: sha256WithRSAEncryption
         ba:23:32:3f:26:cd:07:e3:7f:fc:84:9c:1c:3c:b3:b7:27:af:
         6c:2e:1e:a9:a8:97:ef:d9:d4:77:82:94:02:fa:75:36:a5:71:
         50:7b:31:b8:99:e5:d4:09:39:b7:c3:bc:9c:ad:8e:fc:f9:da:
         39:98:21:45:b7:1c:fc:40:2f:34:2c:a2:40:65:38:4e:12:bc:
         d7:e1:9b:b9:38:9e:9f:44:c8:1b:e6:e7:7f:6d:60:ab:d2:d0:
         05:95:a5:99:73:97:ab:79:95:73:3e:6e:df:b0:06:3e:92:a6:
         2c:61:63:89:5c:2f:e0:03:3a:8e:f4:64:9c:13:cb:c5:0f:3d:
         ae:18:dd:18:7b:49:a2:e1:27:aa:70:6f:2f:39:fd:81:4d:7e:
         54:51:2e:34:bf:b2:ec:cf:f2:78:8a:39:a2:09:60:9a:a3:45:
         fe:39:20:f1:9e:25:5d:7d:55:c3:35:97:b2:2f:5f:43:25:c0:
         f3:bf:f7:62:cf:57:bc:f4:e7:db:18:40:2c:c8:a5:89:d8:5f:
         a5:ff:47:9f:d1:7c:97:32:54:fb:6d:2c:07:c8:08:91:5b:8b:
         be:3b:6b:19:22:15:43:ed:5a:cc:ce:67:03:91:52:fd:80:d7:
         35:97:82:c8:21:ee:fd:01:65:5f:9d:09:9a:4a:a3:02:88:5d:
         fe:d3:40:1f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMPtc+dai/6zDDf8s3jCxweyiM6IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDMyMTE4WhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYmU5ZDI3Mzk0MjI5M2MyYWU3ZmFlN2IwNjBiMjAyZTI3
Mjg2NmEyNjI2NTIyODNlMDBjNTQxNjAzN2UyMGY3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDo1A5oXux+I9Czm5hlZE+ZSZHbN/8Oj//mzkfWSThcUru/
bb7vtveCkqIwEG07LcG6oS04AxKEIiE/oqCgpM4NcieC6sD5d6w1Jif3HoiKpSX1
aHr1F+WGEpo6KqWG0IpMF43Zf/t3jEnfV2xTNpV+Bb0Dtgi4Zjl44+HqbVkud5jY
8KYRxQwdOlvj/BAzZICmer4iaqKaAPVRgb9B/cS/tNedxVaQiLeUMWtGBIB4Foy8
J+zG2Yy9+3+5322ChMIKfSUvm1vP0aWOcCxmiBfCZU0lWKHQIpCidajtgZljryM6
e22rVlOsvgRYG8l7KleSK6zumdN1SmzN5OfSWf5HAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUU1VwYRonBk+AsfmDwpB4Y4x4yiQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzJiZjZiNzY0LTNiMWUtNGY0OC05ZGM1LWQ5NjFlMzRlZDFkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKwgwDQYJKoZIhvcNAQELBQADggEBALojMj8mzQfjf/yEnBw8s7cn
r2wuHqmol+/Z1HeClAL6dTalcVB7MbiZ5dQJObfDvJytjvz52jmYIUW3HPxALzQs
okBlOE4SvNfhm7k4np9EyBvm539tYKvS0AWVpZlzl6t5lXM+bt+wBj6SpixhY4lc
L+ADOo70ZJwTy8UPPa4Y3Rh7SaLhJ6pwby85/YFNflRRLjS/suzP8niKOaIJYJqj
Rf45IPGeJV19VcM1l7IvX0MlwPO/92LPV7z059sYQCzIpYnYX6X/R5/RfJcyVPtt
LAfICJFbi747axkiFUPtWszOZwORUv2A1zWXgsgh7v0BZV+dCZpKowKIXf7TQB8=
-----END CERTIFICATE-----
Generated at Sun May 3 14:48:58 2026 by rpki-client