Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de65197e-d3ba-4773-9e2e-dce7cde565db.roa
File:                     de65197e-d3ba-4773-9e2e-dce7cde565db.roa (raw, json)
Hash identifier:          68cXMfnbKm43sIu3edXBlsWOxno4E9iH1f/9zmhz/HQ=
Subject key identifier:   11:B8:61:B7:84:75:3C:06:DE:85:6D:28:83:B7:AC:9C:7D:7A:50:F6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       40B4DFA84C0339E302593FFE5544CE36E05D7595
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de65197e-d3ba-4773-9e2e-dce7cde565db.roa
Signing time:             Sun 03 May 2026 00:31:06 +0000
ROA not before:           Sun 03 May 2026 00:31:06 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f54::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b4:df:a8:4c:03:39:e3:02:59:3f:fe:55:44:ce:36:e0:5d:75:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:31:06 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=f711dc525bb9dbd0c5e7d05a53e53a265300c4bcb4201c598989879f66e2a7a3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:cc:ed:66:4a:27:e6:1f:ac:d5:1d:cd:d6:
                    e3:66:19:14:eb:64:7f:e8:1c:c2:e2:fd:2c:f7:cc:
                    6c:58:f4:54:57:56:72:a4:e6:1b:10:c3:85:de:85:
                    6a:53:78:60:ff:83:b5:2f:d8:1f:f6:7c:01:dc:1b:
                    92:64:ea:48:ed:1e:76:00:8c:7f:e0:0f:d4:fb:97:
                    00:13:64:94:d7:10:5d:22:99:83:5a:6e:d6:35:a5:
                    95:99:06:af:71:1b:a7:c8:d2:01:43:3e:ff:5d:1e:
                    d9:71:99:4d:80:0e:fa:a7:0f:05:a1:29:f3:2c:61:
                    89:0a:24:4b:aa:f8:74:19:c4:45:24:11:e7:c1:e7:
                    8c:21:43:e8:29:68:24:61:42:e1:4c:07:8c:1b:21:
                    26:3f:be:5e:96:21:48:94:a4:08:20:8f:19:af:15:
                    3a:43:20:2c:06:39:d5:84:41:74:53:4a:70:8d:48:
                    73:15:13:67:42:1f:1a:11:ec:9e:be:4f:3a:15:28:
                    8c:96:97:be:50:27:7b:93:bf:c6:0c:dd:6b:89:aa:
                    e6:a1:be:d1:0f:99:1c:d3:54:49:ba:6c:d7:63:8d:
                    c7:86:07:41:8d:84:b7:ba:00:54:ad:38:f8:57:c9:
                    0c:38:4d:d9:2e:6e:91:ec:d3:e4:0f:85:e6:d9:cd:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:61:B7:84:75:3C:06:DE:85:6D:28:83:B7:AC:9C:7D:7A:50:F6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de65197e-d3ba-4773-9e2e-dce7cde565db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f54::/47

    Signature Algorithm: sha256WithRSAEncryption
         02:74:98:0f:49:e6:2d:3b:24:78:46:45:71:41:8a:36:3b:d3:
         a0:70:79:3c:1f:cd:48:b2:71:33:5b:16:f3:fa:4d:67:b5:fe:
         27:6d:1c:ff:69:95:49:99:79:fa:13:e9:86:c8:e6:68:1f:9d:
         e7:d2:05:58:53:af:57:b1:a2:8f:c5:bb:2f:05:9a:52:fb:fa:
         56:a0:67:ef:53:62:2a:de:60:18:b2:03:a0:6d:c3:7e:16:91:
         1f:10:5d:9b:1f:bd:ca:80:fc:d3:7f:23:3c:d0:59:4e:0f:d0:
         7b:22:5b:c4:60:8c:f2:16:2c:0a:f1:cb:07:e9:c9:95:73:64:
         68:02:f5:fe:fe:04:1b:26:a8:df:a9:6a:c2:13:eb:d5:bd:a0:
         cf:45:c8:71:31:fe:b3:ef:ce:1e:d5:d8:c0:de:00:64:85:55:
         32:2b:7f:37:7b:a0:2c:fc:4e:0a:9c:03:d9:c0:29:33:82:59:
         51:e2:ef:a5:1c:c7:4f:29:a7:1b:36:a6:f0:cd:03:bd:d0:60:
         2b:b5:26:16:ff:18:59:59:2b:54:f4:c2:c7:66:6b:41:07:a2:
         8e:b6:6a:7c:d1:f9:3e:a0:5e:94:4b:be:af:a2:8a:23:e6:50:
         7d:04:4a:04:a5:11:e0:ed:cb:99:d5:dd:6d:f2:b1:f3:84:54:
         a4:3e:c3:0a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQLTfqEwDOeMCWT/+VUTONuBddZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDAzMTA2WhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzExZGM1MjViYjlkYmQwYzVlN2QwNWE1M2U1M2EyNjUz
MDBjNGJjYjQyMDFjNTk4OTg5ODc5ZjY2ZTJhN2EzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgu8ztZkon5h+s1R3N1uNmGRTrZH/oHMLi/Sz3zGxY9FRX
VnKk5hsQw4XehWpTeGD/g7Uv2B/2fAHcG5Jk6kjtHnYAjH/gD9T7lwATZJTXEF0i
mYNabtY1pZWZBq9xG6fI0gFDPv9dHtlxmU2ADvqnDwWhKfMsYYkKJEuq+HQZxEUk
EefB54whQ+gpaCRhQuFMB4wbISY/vl6WIUiUpAggjxmvFTpDICwGOdWEQXRTSnCN
SHMVE2dCHxoR7J6+TzoVKIyWl75QJ3uTv8YM3WuJquahvtEPmRzTVEm6bNdjjceG
B0GNhLe6AFStOPhXyQw4TdkubpHs0+QPhebZzWYXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEbhht4R1PAbehW0og7esnH16UPYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2RlNjUxOTdlLWQzYmEtNDc3My05ZTJlLWRjZTdjZGU1NjVkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL1QwDQYJKoZIhvcNAQELBQADggEBAAJ0mA9J5i07JHhGRXFBijY7
06BweTwfzUiycTNbFvP6TWe1/idtHP9plUmZefoT6YbI5mgfnefSBVhTr1exoo/F
uy8FmlL7+lagZ+9TYireYBiyA6Btw34WkR8QXZsfvcqA/NN/IzzQWU4P0HsiW8Rg
jPIWLArxywfpyZVzZGgC9f7+BBsmqN+pasIT69W9oM9FyHEx/rPvzh7V2MDeAGSF
VTIrfzd7oCz8TgqcA9nAKTOCWVHi76Ucx08ppxs2pvDNA73QYCu1Jhb/GFlZK1T0
wsdma0EHoo62anzR+T6gXpRLvq+iiiPmUH0ESgSlEeDty5nV3W3ysfOEVKQ+wwo=
-----END CERTIFICATE-----
Generated at Sun May 3 15:24:06 2026 by rpki-client