Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
File:                     3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa (raw, json)
Hash identifier:          7UA2fREjN3zNrbdTH70/Iq6+GyGKQNieJGJzoU1g/tc=
Subject key identifier:   8C:E1:38:ED:0E:21:2E:63:56:A4:3F:95:D6:6A:A7:1A:69:A5:92:81
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       456BE3641B369B21A6DD93ABECC7274DB5B3095C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
Signing time:             Mon 22 Jun 2026 02:20:10 +0000
ROA not before:           Mon 22 Jun 2026 02:20:10 +0000
ROA not after:            Sun 20 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6b:e3:64:1b:36:9b:21:a6:dd:93:ab:ec:c7:27:4d:b5:b3:09:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 22 02:20:10 2026 GMT
            Not After : Sep 20 23:59:59 2026 GMT
        Subject: serialNumber=ec265f47a2c3ec79e59332f7757e43d7333c5f628e1fe86bc47d1a77aae15fb5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ab:c8:2a:16:17:f2:09:d9:4d:b8:f1:52:36:
                    81:2c:e6:d4:2a:c4:b1:a0:2e:6c:87:e0:90:7e:26:
                    d7:aa:49:17:b9:c2:ae:3f:a7:ae:c2:91:24:72:de:
                    19:8b:e6:bd:ff:48:fd:b0:42:35:13:80:44:c8:e6:
                    ef:d1:05:a8:55:2a:21:3f:2f:dc:7f:15:1a:09:4b:
                    d1:04:e7:9a:0d:65:8d:38:ef:a4:bc:de:1b:e5:de:
                    0e:ba:5d:89:83:44:da:a7:d5:3d:d6:96:42:21:6e:
                    79:9c:33:31:78:c2:41:7d:c0:d1:d7:38:c3:d4:32:
                    67:63:f4:cb:dd:c3:8b:69:ba:7c:e6:2d:0b:1c:7e:
                    0c:25:05:98:d8:c8:97:ce:2f:36:da:2f:dd:9c:18:
                    e0:f9:90:17:e9:b0:db:8c:c4:d2:79:b2:9a:20:f7:
                    4a:5d:1e:40:80:bf:8b:08:98:15:d7:41:ef:e1:f6:
                    81:ca:c7:10:f9:4b:11:d8:29:2d:da:8e:cf:aa:69:
                    4d:c5:78:d9:25:f1:bc:33:5c:47:87:f2:c6:c4:e7:
                    0b:29:56:3d:49:45:61:c0:99:5e:23:e3:ff:a0:4e:
                    65:b0:70:8b:3b:f8:e0:f5:8f:8f:17:8a:ad:98:5d:
                    35:eb:cd:e7:51:8c:10:ab:6e:ff:55:0a:2b:99:14:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E1:38:ED:0E:21:2E:63:56:A4:3F:95:D6:6A:A7:1A:69:A5:92:81
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:dd:c9:d2:55:0c:4f:4c:76:c9:1f:d1:c0:a6:2d:cc:10:
         35:3a:b2:18:a0:7a:ab:ae:7d:ef:56:d4:ab:31:65:e8:49:df:
         01:88:2b:30:70:6e:13:03:08:11:bc:3b:3c:63:c6:8b:8e:8f:
         17:9b:cf:a3:f7:2a:62:6e:54:b0:81:90:63:33:bb:57:6c:54:
         78:50:e4:40:67:8f:38:e1:27:7d:a4:f5:6b:15:ed:3c:7b:1e:
         4c:45:9c:2e:86:c4:e3:fb:62:39:88:e5:d1:b1:5d:bb:96:33:
         90:ac:6e:99:97:28:f1:b6:19:f0:af:ac:b6:9c:89:4b:85:2f:
         e7:8c:4a:83:37:d7:62:53:c1:f6:7a:1d:e7:ac:2a:05:d1:fd:
         f2:15:08:d7:94:de:c5:e9:21:cc:1e:be:64:96:2e:ed:fe:0b:
         fe:de:00:5b:10:74:2a:31:81:fe:17:92:a7:f9:3b:e9:98:96:
         3e:8f:4c:3e:d0:0c:e7:39:3b:7d:1e:bf:0d:dd:c3:5e:e6:66:
         bb:d9:50:0f:54:25:98:f7:4d:60:4f:14:be:74:aa:68:99:dc:
         5b:77:30:ec:64:25:70:c5:50:f2:a2:23:b7:73:c4:6e:2a:ad:
         3d:4b:52:e5:f4:7f:4e:ad:17:f7:49:27:27:31:56:3a:43:b0:
         0a:16:14:a3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURWvjZBs2myGm3ZOr7McnTbWzCVwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDIyMDEwWhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzI2NWY0N2EyYzNlYzc5ZTU5MzMyZjc3NTdlNDNkNzMz
M2M1ZjYyOGUxZmU4NmJjNDdkMWE3N2FhZTE1ZmI1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgq8gqFhfyCdlNuPFSNoEs5tQqxLGgLmyH4JB+JteqSRe5
wq4/p67CkSRy3hmL5r3/SP2wQjUTgETI5u/RBahVKiE/L9x/FRoJS9EE55oNZY04
76S83hvl3g66XYmDRNqn1T3WlkIhbnmcMzF4wkF9wNHXOMPUMmdj9Mvdw4tpunzm
LQscfgwlBZjYyJfOLzbaL92cGOD5kBfpsNuMxNJ5spog90pdHkCAv4sImBXXQe/h
9oHKxxD5SxHYKS3ajs+qaU3FeNkl8bwzXEeH8sbE5wspVj1JRWHAmV4j4/+gTmWw
cIs7+OD1j48Xiq2YXTXrzedRjBCrbv9VCiuZFDV5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUjOE47Q4hLmNWpD+V1mqnGmmlkoEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNjNmYxMGYzLWViNmUtNDE4MS05YzkwLTNjZmMzODcxNGJkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEdwwDQYJKoZIhvcNAQELBQADggEBACKM3cnSVQxPTHbJH9HApi3M
EDU6shigequufe9W1KsxZehJ3wGIKzBwbhMDCBG8OzxjxouOjxebz6P3KmJuVLCB
kGMzu1dsVHhQ5EBnjzjhJ32k9WsV7Tx7HkxFnC6GxOP7YjmI5dGxXbuWM5CsbpmX
KPG2GfCvrLaciUuFL+eMSoM312JTwfZ6HeesKgXR/fIVCNeU3sXpIcwevmSWLu3+
C/7eAFsQdCoxgf4Xkqf5O+mYlj6PTD7QDOc5O30evw3dw17mZrvZUA9UJZj3TWBP
FL50qmiZ3Ft3MOxkJXDFUPKiI7dzxG4qrT1LUuX0f06tF/dJJycxVjpDsAoWFKM=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:02:51 2026 by rpki-client