Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7510613c-15f7-402c-9fa1-08446bb49287.roa
File:                     7510613c-15f7-402c-9fa1-08446bb49287.roa (raw, json)
Hash identifier:          ieZa3RrFFX7t9FjbgLX8hGYo4Umfo8OCtuEkFWNS+lc=
Subject key identifier:   4E:E3:D1:B5:15:1F:83:B2:09:5D:1F:2C:A9:17:45:98:23:8E:DB:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6A896BE9083D27DF362B2FDDF514151DD61DA431
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7510613c-15f7-402c-9fa1-08446bb49287.roa
Signing time:             Sun 03 May 2026 03:11:55 +0000
ROA not before:           Sun 03 May 2026 03:11:55 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2200::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:89:6b:e9:08:3d:27:df:36:2b:2f:dd:f5:14:15:1d:d6:1d:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 03:11:55 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=45ffee848670aa0d1e9a5da703a2eecbbb5cdb5ce3d0896948aae4a98b9fdb46, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:96:7f:47:d9:94:aa:22:c2:bb:f5:9b:e8:dd:
                    b6:47:aa:8d:e5:af:22:57:b3:09:a0:11:41:df:eb:
                    39:2a:74:5f:52:b9:d5:39:58:1f:07:e5:48:08:c7:
                    4d:78:fc:35:94:2f:8a:c9:2e:f1:83:ea:51:4f:b8:
                    06:ab:f7:05:e2:4a:d2:a7:0d:e8:e7:88:c1:17:78:
                    f8:98:1d:5e:56:49:9c:2d:2b:82:ec:e9:e2:2c:8b:
                    31:a2:b4:86:56:88:96:d1:4f:8b:cf:21:b9:f2:ae:
                    28:89:c4:66:eb:45:2f:ce:31:49:7b:f8:c9:68:93:
                    a2:c2:f5:48:af:11:5b:0d:a2:6e:48:73:f6:59:8f:
                    f2:72:33:2f:b3:c4:0f:f7:6c:97:e8:1a:bb:ca:72:
                    11:57:7d:56:f5:33:22:f0:2d:cf:2f:9f:fe:ed:15:
                    ce:58:6b:a9:3a:8c:88:5c:6b:6c:ff:d5:0a:c0:a2:
                    32:b4:e5:94:c6:4f:18:6a:40:2e:78:33:2e:5e:e1:
                    ea:97:04:06:d7:38:64:e0:ad:49:10:f6:80:2e:05:
                    cb:8e:4a:6c:d1:32:90:c9:6d:c7:cc:ed:14:cd:bc:
                    ca:a7:a0:22:51:53:04:39:ab:f3:7c:0a:6e:00:7c:
                    0f:26:b8:c8:fb:b0:58:f5:b2:7e:10:4c:40:d0:76:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E3:D1:B5:15:1F:83:B2:09:5D:1F:2C:A9:17:45:98:23:8E:DB:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7510613c-15f7-402c-9fa1-08446bb49287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2200::/45

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:b5:ef:ce:d9:ee:fb:47:84:22:fb:f3:8a:d1:4a:46:66:
         2a:2b:8d:d5:82:b7:d1:6c:66:2c:de:31:ad:b3:78:99:4a:d5:
         af:d9:95:b4:c5:7f:0c:54:67:a4:f8:1c:ef:f1:b7:4c:12:c8:
         9a:1d:46:c5:5c:88:e4:d0:f2:54:6a:5c:83:b7:61:14:4e:da:
         3a:d8:cd:31:f6:57:0b:8e:62:ae:04:87:ce:51:f3:d1:30:16:
         9d:89:f0:85:8e:ef:69:a7:aa:9a:ed:d8:4d:2f:5b:23:8c:f9:
         48:88:17:c8:96:1d:7f:50:de:62:a9:f4:98:f2:aa:9f:69:f8:
         05:cd:cf:2e:dc:57:e1:74:61:dc:06:42:01:40:49:10:bf:f9:
         17:fe:17:31:66:eb:07:e8:98:a0:b4:14:02:b9:05:0a:45:a9:
         70:0c:9d:20:7f:19:d9:f4:a6:36:f4:5b:80:3c:a2:39:ab:cb:
         be:96:20:03:4d:23:ec:95:e8:87:da:fd:c6:37:c1:e3:50:3a:
         ea:f7:7c:81:72:ba:96:1a:c3:96:4a:70:7d:e7:5f:50:9d:74:
         72:e5:2c:25:49:44:04:68:7c:62:8d:15:25:f3:5d:2f:99:5c:
         f3:37:4a:9d:53:8e:72:45:c5:6a:b5:6b:de:e7:6c:0a:75:bf:
         c2:81:73:76
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaolr6Qg9J982Ky/d9RQVHdYdpDEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDMxMTU1WhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NWZmZWU4NDg2NzBhYTBkMWU5YTVkYTcwM2EyZWVjYmJi
NWNkYjVjZTNkMDg5Njk0OGFhZTRhOThiOWZkYjQ2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDuln9H2ZSqIsK79Zvo3bZHqo3lryJXswmgEUHf6zkqdF9S
udU5WB8H5UgIx014/DWUL4rJLvGD6lFPuAar9wXiStKnDejniMEXePiYHV5WSZwt
K4Ls6eIsizGitIZWiJbRT4vPIbnyriiJxGbrRS/OMUl7+Mlok6LC9UivEVsNom5I
c/ZZj/JyMy+zxA/3bJfoGrvKchFXfVb1MyLwLc8vn/7tFc5Ya6k6jIhca2z/1QrA
ojK05ZTGTxhqQC54My5e4eqXBAbXOGTgrUkQ9oAuBcuOSmzRMpDJbcfM7RTNvMqn
oCJRUwQ5q/N8Cm4AfA8muMj7sFj1sn4QTEDQduw/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTuPRtRUfg7IJXR8sqRdFmCOO21IwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc1MTA2MTNjLTE1ZjctNDAyYy05ZmExLTA4NDQ2YmI0OTI4Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAIgAwDQYJKoZIhvcNAQELBQADggEBAD7Ote/O2e77R4Qi+/OK0UpG
ZiorjdWCt9FsZizeMa2zeJlK1a/ZlbTFfwxUZ6T4HO/xt0wSyJodRsVciOTQ8lRq
XIO3YRRO2jrYzTH2VwuOYq4Eh85R89EwFp2J8IWO72mnqprt2E0vWyOM+UiIF8iW
HX9Q3mKp9Jjyqp9p+AXNzy7cV+F0YdwGQgFASRC/+Rf+FzFm6wfomKC0FAK5BQpF
qXAMnSB/Gdn0pjb0W4A8ojmry76WIANNI+yV6Ifa/cY3weNQOur3fIFyupYaw5ZK
cH3nX1CddHLlLCVJRARofGKNFSXzXS+ZXPM3Sp1TjnJFxWq1a97nbAp1v8KBc3Y=
-----END CERTIFICATE-----
Generated at Sun May 3 15:32:19 2026 by rpki-client