Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96aab10-bac2-4b4f-a648-806adaea882b.roa
File:                     f96aab10-bac2-4b4f-a648-806adaea882b.roa (raw, json)
Hash identifier:          TikGj88UqFFnwuC/uOhtQZtuwdhjv/1CQr3ic1pme+s=
Subject key identifier:   4E:45:06:A2:31:E3:B7:2F:AD:C0:C3:DE:47:30:01:D0:2F:8F:07:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3911CA2F8BB163B6AF6E3675BF4BCAD08638C972
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96aab10-bac2-4b4f-a648-806adaea882b.roa
Signing time:             Sun 03 May 2026 00:40:51 +0000
ROA not before:           Sun 03 May 2026 00:40:51 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3234::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:ca:2f:8b:b1:63:b6:af:6e:36:75:bf:4b:ca:d0:86:38:c9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:40:51 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=3f7fc05f7108d753d2967698232bd9fddd57531b8a1dbc702d527866cf942281, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:d7:a9:ab:8d:a9:af:05:9f:44:fe:68:b3:
                    fb:00:a9:fe:c8:d2:45:8b:de:97:13:96:aa:1e:55:
                    5e:cf:00:13:ff:fb:d2:4c:8c:de:2a:ce:8d:ad:c9:
                    f5:2c:86:8e:e5:0b:41:8f:11:c5:46:90:95:4a:47:
                    dc:fd:c8:7f:09:ff:20:36:8b:23:ed:31:c1:75:43:
                    ab:44:c8:ee:ee:16:a4:6b:2c:f2:03:bb:b3:9a:eb:
                    a9:9d:84:1d:6f:af:38:4c:9a:19:67:fb:74:6b:10:
                    97:89:b2:7f:93:c0:d5:05:1b:f7:af:1d:de:97:c3:
                    d8:ed:48:60:35:ab:28:37:04:5c:e6:52:ad:78:b1:
                    68:02:b1:c2:5f:db:49:c3:46:e5:00:49:47:08:5e:
                    e1:26:65:26:e5:d6:cb:8d:e7:c5:ca:a5:0e:c3:a5:
                    f4:a1:f8:ad:06:c5:33:50:81:54:76:b9:b9:90:71:
                    e4:0f:30:15:46:04:b1:bd:c6:6d:4a:1b:91:57:c0:
                    9c:68:27:20:1e:2d:87:a8:53:46:85:e1:65:fd:63:
                    fb:a2:a3:68:a3:92:e2:f1:7a:32:92:8f:d7:57:bc:
                    02:f5:82:d4:2c:05:e0:10:09:c6:e3:f3:18:e5:8f:
                    29:a3:44:08:b1:f2:a9:6b:61:98:d5:a6:75:62:93:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:45:06:A2:31:E3:B7:2F:AD:C0:C3:DE:47:30:01:D0:2F:8F:07:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f96aab10-bac2-4b4f-a648-806adaea882b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3234::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:e3:2e:64:20:5f:4b:f3:5b:c1:2f:ec:01:40:69:6e:f1:
         4b:45:6f:ee:35:87:ae:b6:38:ba:30:ef:ab:ef:7f:81:80:51:
         7d:3e:f2:fa:5d:34:ba:5a:ea:e7:10:d7:9d:60:1f:6f:1d:ec:
         5d:d2:ab:17:bb:55:ec:8f:91:31:94:f4:58:d1:dd:23:f6:0e:
         d5:91:1b:c6:32:07:a7:f4:86:3f:12:c0:e9:00:c3:df:4f:13:
         7d:d5:2a:97:eb:03:59:78:81:75:61:e2:a2:ca:bb:8a:2c:a1:
         3f:97:80:8d:c6:43:ad:41:e0:e0:ca:24:e3:ec:bc:40:14:85:
         45:18:50:ca:45:05:ab:85:7a:18:30:e3:26:05:24:d8:8d:84:
         40:df:ce:13:e6:16:27:ae:7c:a1:bf:ae:37:e2:25:16:79:91:
         a1:92:50:39:49:92:71:e6:41:bf:05:e8:8b:f6:bf:c1:22:47:
         71:f3:b4:97:fe:76:15:9c:25:81:51:71:c8:6b:35:25:8b:a2:
         b6:a8:0c:e6:dc:95:d2:3c:0f:d6:66:60:9c:82:37:cc:9e:aa:
         3c:1c:f8:f2:9c:25:d5:bf:95:0d:3d:f2:47:40:e2:60:bb:af:
         71:10:2d:cd:36:16:ac:c9:0f:81:c1:be:c1:13:8c:db:d8:c7:
         06:5f:14:92
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUORHKL4uxY7avbjZ1v0vK0IY4yXIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDA0MDUxWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjdmYzA1ZjcxMDhkNzUzZDI5Njc2OTgyMzJiZDlmZGRk
NTc1MzFiOGExZGJjNzAyZDUyNzg2NmNmOTQyMjgxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClvtepq42prwWfRP5os/sAqf7I0kWL3pcTlqoeVV7PABP/
+9JMjN4qzo2tyfUsho7lC0GPEcVGkJVKR9z9yH8J/yA2iyPtMcF1Q6tEyO7uFqRr
LPIDu7Oa66mdhB1vrzhMmhln+3RrEJeJsn+TwNUFG/evHd6Xw9jtSGA1qyg3BFzm
Uq14sWgCscJf20nDRuUASUcIXuEmZSbl1suN58XKpQ7DpfSh+K0GxTNQgVR2ubmQ
ceQPMBVGBLG9xm1KG5FXwJxoJyAeLYeoU0aF4WX9Y/uio2ijkuLxejKSj9dXvAL1
gtQsBeAQCcbj8xjljymjRAix8qlrYZjVpnVik5c1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTkUGojHjty+twMPeRzAB0C+PB8QwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y5NmFhYjEwLWJhYzItNGI0Zi1hNjQ4LTgwNmFkYWVhODgyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMjQwDQYJKoZIhvcNAQELBQADggEBAETB4y5kIF9L81vBL+wBQGlu
8UtFb+41h662OLow76vvf4GAUX0+8vpdNLpa6ucQ151gH28d7F3Sqxe7VeyPkTGU
9FjR3SP2DtWRG8YyB6f0hj8SwOkAw99PE33VKpfrA1l4gXVh4qLKu4osoT+XgI3G
Q61B4ODKJOPsvEAUhUUYUMpFBauFehgw4yYFJNiNhEDfzhPmFieufKG/rjfiJRZ5
kaGSUDlJknHmQb8F6Iv2v8EiR3HztJf+dhWcJYFRcchrNSWLoraoDObcldI8D9Zm
YJyCN8yeqjwc+PKcJdW/lQ098kdA4mC7r3EQLc02FqzJD4HBvsETjNvYxwZfFJI=
-----END CERTIFICATE-----
Generated at Sun May 3 15:26:57 2026 by rpki-client