Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd49d122-f6ac-41f7-862a-920732d5b423.roa
File:                     bd49d122-f6ac-41f7-862a-920732d5b423.roa (raw, json)
Hash identifier:          nj7G5N2/5UCgUo0tr9i7lmXGZvGDEVDsi2srW9nQauQ=
Subject key identifier:   A8:0C:6A:FD:98:26:9A:13:51:63:DB:AA:FF:B3:78:5C:19:57:2D:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       E4B0FBD8E640294405CC2A7F38338431B7947E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd49d122-f6ac-41f7-862a-920732d5b423.roa
Signing time:             Sun 03 May 2026 00:41:32 +0000
ROA not before:           Sun 03 May 2026 00:41:32 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e4:b0:fb:d8:e6:40:29:44:05:cc:2a:7f:38:33:84:31:b7:94:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:41:32 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=c416b25321b89d68ce3e319cefec693d550673e85c8fefcbfd6786166da85c2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:fe:ac:7f:39:1b:a5:78:73:d1:5f:a6:53:
                    aa:e6:28:c7:59:7a:73:9d:7a:e1:94:7c:a4:97:23:
                    27:8a:ae:4f:78:54:c6:87:37:dd:2f:c5:e7:de:3b:
                    15:4e:a5:e5:a3:97:b9:40:47:42:99:3e:52:be:d4:
                    8b:d3:c2:1f:3d:89:99:03:92:0b:de:37:49:17:cc:
                    b4:82:5a:66:d5:e6:95:55:a4:90:00:e4:d0:0f:2e:
                    b9:78:c1:fa:8f:1e:97:88:ee:fe:65:0b:4c:81:c6:
                    7b:6d:75:89:99:a8:cf:85:a7:ea:b1:0b:aa:25:6d:
                    be:c9:54:f0:60:a8:99:a2:f5:5f:16:88:c2:38:67:
                    20:24:e7:46:c3:5e:f3:01:1e:d9:89:5b:86:3a:ff:
                    b6:f5:e8:86:59:07:c2:fb:e7:d3:2b:8d:4f:4d:42:
                    67:3c:92:cf:02:ef:c6:d8:7c:48:e6:a9:72:a9:18:
                    f4:8b:9d:b1:2c:c3:f7:92:7f:3f:5e:37:6d:ac:41:
                    11:6b:07:14:8a:3f:18:91:e9:4b:a6:9b:83:fb:36:
                    62:1e:9d:50:a5:4c:db:36:f9:f3:ef:c5:0f:56:b5:
                    4a:1a:e1:df:20:73:98:7b:56:5a:a4:25:de:a4:f3:
                    3e:3d:e5:2c:72:2b:f9:2c:5f:25:6a:a1:8f:90:06:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:6A:FD:98:26:9A:13:51:63:DB:AA:FF:B3:78:5C:19:57:2D:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd49d122-f6ac-41f7-862a-920732d5b423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:b6:e2:6b:c4:a2:e8:fd:dc:88:b8:9a:1b:ff:81:c3:da:
         8f:aa:d0:af:63:ec:41:20:47:91:b1:0b:0c:2c:17:2a:47:a3:
         81:12:82:58:90:25:4d:fe:cd:9f:ad:94:2f:2e:b4:71:a8:bf:
         02:a8:22:8d:f5:30:3f:c2:4c:be:ad:f3:49:41:a1:9f:af:e8:
         19:f2:0b:58:fa:88:24:10:94:0b:27:ef:05:65:ad:4d:75:8d:
         d0:3f:f7:05:e3:06:15:7c:41:e2:90:dd:b5:6c:91:04:59:27:
         15:05:24:b3:58:ae:59:38:82:1c:78:e1:24:4b:12:07:c4:03:
         73:66:c3:a3:2f:2c:1c:e6:4b:a3:e9:b2:ad:7d:57:45:22:f7:
         4e:31:80:cd:96:d8:06:92:90:28:49:e2:b3:dd:3f:0d:53:9d:
         c9:0f:04:a2:37:d9:47:54:5f:1b:f1:4d:36:31:0e:c7:7b:54:
         73:71:96:2b:17:01:ea:fc:a6:7a:58:54:e4:5b:a5:b7:1e:99:
         c4:17:86:00:29:58:d3:dd:df:9a:5a:a2:a9:9f:8c:bf:f4:c5:
         de:91:15:75:26:50:94:42:fe:87:86:ed:f6:f1:e1:aa:92:0b:
         84:77:48:b5:1a:ec:77:a6:87:04:50:97:d3:ea:ea:e5:fb:bd:
         f9:28:cf:61
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAOSw+9jmQClEBcwqfzgzhDG3lH4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDA0MTMyWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDE2YjI1MzIxYjg5ZDY4Y2UzZTMxOWNlZmVjNjkzZDU1
MDY3M2U4NWM4ZmVmY2JmZDY3ODYxNjZkYTg1YzJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUpf6sfzkbpXhz0V+mU6rmKMdZenOdeuGUfKSXIyeKrk94
VMaHN90vxefeOxVOpeWjl7lAR0KZPlK+1IvTwh89iZkDkgveN0kXzLSCWmbV5pVV
pJAA5NAPLrl4wfqPHpeI7v5lC0yBxnttdYmZqM+Fp+qxC6olbb7JVPBgqJmi9V8W
iMI4ZyAk50bDXvMBHtmJW4Y6/7b16IZZB8L759MrjU9NQmc8ks8C78bYfEjmqXKp
GPSLnbEsw/eSfz9eN22sQRFrBxSKPxiR6Uumm4P7NmIenVClTNs2+fPvxQ9WtUoa
4d8gc5h7VlqkJd6k8z495SxyK/ksXyVqoY+QBoDjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqAxq/ZgmmhNRY9uq/7N4XBlXLXwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JkNDlkMTIyLWY2YWMtNDFmNy04NjJhLTkyMDczMmQ1YjQyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALMYwDQYJKoZIhvcNAQELBQADggEBAHoqtuJrxKLo/dyIuJob/4HD
2o+q0K9j7EEgR5GxCwwsFypHo4ESgliQJU3+zZ+tlC8utHGovwKoIo31MD/CTL6t
80lBoZ+v6BnyC1j6iCQQlAsn7wVlrU11jdA/9wXjBhV8QeKQ3bVskQRZJxUFJLNY
rlk4ghx44SRLEgfEA3Nmw6MvLBzmS6Ppsq19V0Ui904xgM2W2AaSkChJ4rPdPw1T
nckPBKI32UdUXxvxTTYxDsd7VHNxlisXAer8pnpYVORbpbcemcQXhgApWNPd35pa
oqmfjL/0xd6RFXUmUJRC/oeG7fbx4aqSC4R3SLUa7HemhwRQl9Pq6uX7vfkoz2E=
-----END CERTIFICATE-----
Generated at Sun May 3 16:15:20 2026 by rpki-client