Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/526d9b75-f4e9-47a6-82f4-5ce2d8c035e6.roa
File:                     526d9b75-f4e9-47a6-82f4-5ce2d8c035e6.roa (raw, json)
Hash identifier:          mTGJDcPf+MQxqIIrl1jM25yAMtOEJyV63Ky/WIiJi+g=
Subject key identifier:   60:EF:CB:C0:A5:61:8E:5E:5A:A8:86:A9:D1:A9:4C:D1:B0:F3:2C:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       345BF8A56DC6A371382454DB0B678DCDDC5B36D5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/526d9b75-f4e9-47a6-82f4-5ce2d8c035e6.roa
Signing time:             Sun 11 Oct 2026 01:30:18 +0000
ROA not before:           Sun 11 Oct 2026 01:30:18 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:f8:a5:6d:c6:a3:71:38:24:54:db:0b:67:8d:cd:dc:5b:36:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 11 01:30:18 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=435d737adbfccd6b370e6a14b6486f6297c20b10a199eb8ccbc1bbabe8bab496, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fd:af:07:41:0e:d0:af:06:ed:b7:b3:06:06:
                    59:2e:17:ca:1e:b9:7d:fa:1f:45:0e:a4:ce:1f:93:
                    88:d2:82:65:46:e3:3b:bc:a0:c4:5b:9d:fa:df:b3:
                    88:19:c6:6f:19:3c:67:56:22:22:42:fb:b1:1b:27:
                    46:d5:0c:8c:ca:c2:d9:9d:dc:7c:35:6e:94:00:ce:
                    d3:d1:b1:5f:24:74:76:8b:1a:45:56:2d:89:ae:bd:
                    d0:e7:32:7e:0e:14:dd:0c:41:33:ea:9c:38:04:6a:
                    c7:64:5f:9e:8b:bc:de:d2:6c:9b:f6:ec:e0:0d:ac:
                    6e:40:42:df:d5:65:75:a3:1f:09:05:79:39:52:98:
                    b1:8f:a1:58:23:3a:ab:d2:e4:33:ad:ed:c8:1a:e5:
                    20:72:36:74:c0:e4:6e:88:32:e6:ff:30:44:5f:d8:
                    a0:63:57:1f:c4:db:e5:eb:d4:e7:22:64:be:7f:98:
                    08:ba:d7:33:22:90:c7:16:98:cf:7e:b7:54:f0:ab:
                    94:82:07:86:ad:c5:27:66:96:7f:2d:f6:55:e6:ff:
                    b7:f4:5d:5b:77:9a:48:c2:94:7b:c0:53:60:af:25:
                    f2:f1:d9:75:24:3a:b3:28:f1:a3:65:bb:59:a2:b8:
                    b1:74:d2:36:c0:17:da:ac:e8:69:7c:bf:af:86:41:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:CB:C0:A5:61:8E:5E:5A:A8:86:A9:D1:A9:4C:D1:B0:F3:2C:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/526d9b75-f4e9-47a6-82f4-5ce2d8c035e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:2b:f2:40:ba:e6:e6:0e:3f:0b:d5:0e:8f:c9:92:0b:27:
         fd:28:cf:71:57:7a:27:63:10:d1:3a:4f:2b:d9:fa:8d:da:e7:
         af:5f:81:67:cf:74:b1:46:36:78:3c:92:6e:f7:2c:b2:6f:f4:
         cb:b5:2d:4c:ad:ad:c1:b3:5a:ff:26:d9:97:a8:5d:de:8f:42:
         cd:bf:bd:20:88:e7:d9:bc:02:c5:47:ee:bd:43:36:c8:91:3c:
         b9:99:00:2c:6b:93:d0:51:13:42:c4:a8:f9:83:53:32:e1:a5:
         ca:10:2f:36:8a:15:bb:5d:84:0a:e9:6e:9c:05:9b:0d:22:c5:
         71:b3:54:1c:41:7e:92:5a:72:76:5e:ee:49:56:d8:7b:24:32:
         76:52:ac:4d:93:94:63:dd:b0:34:b7:8b:38:6a:8f:3b:04:a1:
         03:dc:66:9a:4d:53:65:e1:5a:28:58:5e:bb:48:89:0e:9a:e4:
         cb:97:96:a8:a5:0d:9f:00:93:26:47:6b:be:1e:ab:23:12:05:
         07:c3:71:d0:7d:e7:fd:bc:f1:45:d7:5e:40:4f:b7:d3:43:dd:
         51:b7:f5:2c:20:75:f4:a8:51:c8:7b:a1:d7:ff:11:70:95:ea:
         3a:13:80:a8:03:dc:7a:9a:4d:a8:b5:e6:54:13:a7:72:b2:fb:
         d0:ed:34:3d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUNFv4pW3Go3E4JFTbC2eNzdxbNtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYxMDExMDEzMDE4WhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MzVkNzM3YWRiZmNjZDZiMzcwZTZhMTRiNjQ4NmY2Mjk3
YzIwYjEwYTE5OWViOGNjYmMxYmJhYmU4YmFiNDk2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDz/a8HQQ7Qrwbtt7MGBlkuF8oeuX36H0UOpM4fk4jSgmVG
4zu8oMRbnfrfs4gZxm8ZPGdWIiJC+7EbJ0bVDIzKwtmd3Hw1bpQAztPRsV8kdHaL
GkVWLYmuvdDnMn4OFN0MQTPqnDgEasdkX56LvN7SbJv27OANrG5AQt/VZXWjHwkF
eTlSmLGPoVgjOqvS5DOt7cga5SByNnTA5G6IMub/MERf2KBjVx/E2+Xr1OciZL5/
mAi61zMikMcWmM9+t1Twq5SCB4atxSdmln8t9lXm/7f0XVt3mkjClHvAU2CvJfLx
2XUkOrMo8aNlu1miuLF00jbAF9qs6Gl8v6+GQXj9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUYO/LwKVhjl5aqIap0alM0bDzLEMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzUyNmQ5Yjc1LWY0ZTktNDdhNi04MmY0LTVjZTJkOGMwMzVlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAJAAPDANBgkqhkiG9w0BAQsFAAOCAQEAQO0r8kC65uYOPwvVDo/Jkgsn
/SjPcVd6J2MQ0TpPK9n6jdrnr1+BZ890sUY2eDySbvcssm/0y7UtTK2twbNa/ybZ
l6hd3o9Czb+9IIjn2bwCxUfuvUM2yJE8uZkALGuT0FETQsSo+YNTMuGlyhAvNooV
u12ECulunAWbDSLFcbNUHEF+klpydl7uSVbYeyQydlKsTZOUY92wNLeLOGqPOwSh
A9xmmk1TZeFaKFheu0iJDprky5eWqKUNnwCTJkdrvh6rIxIFB8Nx0H3n/bzxRdde
QE+300PdUbf1LCB19KhRyHuh1/8RcJXqOhOAqAPceppNqLXmVBOncrL70O00PQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:39:52 2026 by rpki-client