Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9c58bd9-c0ef-4319-b77b-44f74b0f8867.roa
File:                     f9c58bd9-c0ef-4319-b77b-44f74b0f8867.roa (raw, json)
Hash identifier:          4A/2pfLqnIyujWUmJCxjqsVmZW5Bu3H00HZtzHgqvIk=
Subject key identifier:   D4:F6:A0:F0:08:D5:0C:4A:69:FA:24:03:5E:7D:A6:90:42:95:CF:77
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7CCBF009692943187FF02475D3C54BCD413F8E5E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9c58bd9-c0ef-4319-b77b-44f74b0f8867.roa
Signing time:             Sun 03 May 2026 00:42:13 +0000
ROA not before:           Sun 03 May 2026 00:42:13 +0000
ROA not after:            Sat 01 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3282::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cb:f0:09:69:29:43:18:7f:f0:24:75:d3:c5:4b:cd:41:3f:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  3 00:42:13 2026 GMT
            Not After : Aug  1 23:59:59 2026 GMT
        Subject: serialNumber=a8ced73c76519cc7bd3389956e5295b3399f8b16234562adf8b2570b1503b373, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:15:21:06:4e:22:b9:ca:e1:74:74:8c:a8:
                    0f:f2:bd:30:a0:bd:46:fb:0a:b3:7e:93:68:29:c0:
                    5c:c3:bd:10:4c:ff:01:21:c0:20:2b:45:26:5a:c0:
                    0b:80:66:d9:0a:3f:46:03:97:e7:44:53:90:83:58:
                    09:d5:ac:1f:11:43:02:b4:d8:63:63:64:5a:61:43:
                    19:6a:04:b8:fb:e5:b7:d4:f5:73:47:98:ed:9c:b7:
                    18:86:a7:32:2a:5a:4b:a6:49:e4:46:bf:da:ba:3c:
                    00:e8:f6:3f:f2:c0:c5:bf:ba:eb:d6:2f:f5:ff:ff:
                    45:ec:a7:49:cd:52:04:38:20:dc:52:63:82:1c:bc:
                    8a:4e:46:ee:ff:74:68:b8:e3:a8:b6:04:eb:a2:1e:
                    40:1e:8c:7e:d3:6e:d2:55:e5:a5:9f:11:33:88:71:
                    dd:54:00:45:6d:db:d0:67:40:21:ac:34:b0:f9:24:
                    72:45:ed:d1:76:38:4c:65:3c:6c:53:c1:37:a5:db:
                    0c:d1:98:31:ea:61:e6:df:8c:78:8f:32:c5:f8:39:
                    d7:9f:c4:35:a7:fe:e7:b8:76:b6:85:c9:1d:d2:b0:
                    dc:3c:2b:c7:11:fe:cb:3a:89:11:37:cd:6b:6b:ae:
                    bd:08:3a:d6:c4:a7:e6:7c:7f:0b:34:c1:ac:63:6c:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:A0:F0:08:D5:0C:4A:69:FA:24:03:5E:7D:A6:90:42:95:CF:77
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9c58bd9-c0ef-4319-b77b-44f74b0f8867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3282::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:ff:90:1b:cb:5d:d8:a0:8f:ee:78:08:02:15:d8:ee:c5:
         0c:73:61:d8:6c:54:2a:79:6e:85:26:b9:34:a0:88:68:13:14:
         84:9f:43:0f:c5:ba:a1:55:1d:fd:73:29:4d:3e:f2:41:69:8d:
         c2:cb:04:2a:57:5b:cb:aa:f4:f3:bd:38:38:08:fe:fe:e9:7b:
         6d:3d:b8:f0:53:ae:15:be:2e:c3:ef:c5:cb:8c:a1:fd:d4:9d:
         c8:a7:4c:7e:80:f3:80:5b:e9:c3:77:54:c8:55:9a:39:f4:03:
         eb:e1:e9:5c:f8:95:ed:0c:fb:41:48:4d:0c:d7:96:f1:06:e9:
         f0:45:c2:a9:c8:1f:e2:cc:e4:36:12:02:a3:ba:3a:c0:06:0b:
         5c:8a:5e:1d:e4:ab:38:89:79:90:6c:e5:35:d3:f0:3c:45:96:
         58:16:6b:5d:5f:d9:c0:e8:40:82:cc:82:12:4b:ce:84:0a:eb:
         b7:7c:86:79:75:7a:04:c3:e3:ee:49:73:42:49:67:c7:48:10:
         a5:e3:c4:bb:27:71:a5:2d:76:44:39:39:4c:7d:2b:a3:e3:e4:
         40:ad:24:20:9c:43:f2:2f:dc:22:10:84:83:2d:6d:94:3a:83:
         f5:3d:37:1b:df:03:a8:bb:96:12:04:74:b0:16:a2:2b:7e:bd:
         87:3a:7f:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfMvwCWkpQxh/8CR108VLzUE/jl4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDA0MjEzWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOGNlZDczYzc2NTE5Y2M3YmQzMzg5OTU2ZTUyOTViMzM5
OWY4YjE2MjM0NTYyYWRmOGIyNTcwYjE1MDNiMzczMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXEhUhBk4iucrhdHSMqA/yvTCgvUb7CrN+k2gpwFzDvRBM
/wEhwCArRSZawAuAZtkKP0YDl+dEU5CDWAnVrB8RQwK02GNjZFphQxlqBLj75bfU
9XNHmO2ctxiGpzIqWkumSeRGv9q6PADo9j/ywMW/uuvWL/X//0Xsp0nNUgQ4INxS
Y4IcvIpORu7/dGi446i2BOuiHkAejH7TbtJV5aWfETOIcd1UAEVt29BnQCGsNLD5
JHJF7dF2OExlPGxTwTel2wzRmDHqYebfjHiPMsX4OdefxDWn/ue4draFyR3SsNw8
K8cR/ss6iRE3zWtrrr0IOtbEp+Z8fws0waxjbNOPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1Pag8AjVDEpp+iQDXn2mkEKVz3cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y5YzU4YmQ5LWMwZWYtNDMxOS1iNzdiLTQ0Zjc0YjBmODg2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMoIwDQYJKoZIhvcNAQELBQADggEBAHDu/5Aby13YoI/ueAgCFdju
xQxzYdhsVCp5boUmuTSgiGgTFISfQw/FuqFVHf1zKU0+8kFpjcLLBCpXW8uq9PO9
ODgI/v7pe209uPBTrhW+LsPvxcuMof3UncinTH6A84Bb6cN3VMhVmjn0A+vh6Vz4
le0M+0FITQzXlvEG6fBFwqnIH+LM5DYSAqO6OsAGC1yKXh3kqziJeZBs5TXT8DxF
llgWa11f2cDoQILMghJLzoQK67d8hnl1egTD4+5Jc0JJZ8dIEKXjxLsncaUtdkQ5
OUx9K6Pj5ECtJCCcQ/Iv3CIQhIMtbZQ6g/U9NxvfA6i7lhIEdLAWoit+vYc6fyM=
-----END CERTIFICATE-----
Generated at Sun May 3 15:30:19 2026 by rpki-client