Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa
File:                     0405393c-8613-4fed-b845-7ea8bcd9e672.roa (raw, json)
Hash identifier:          J9IYZ1+Hvisvdk61sG6IO4zrhtZGO/NVRj2HAFJn6yc=
Subject key identifier:   AA:16:5E:9E:32:F9:92:F0:55:DE:B0:CB:9B:12:AF:E2:3D:07:55:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7F348581219AA72B8488EDDDDA8F14DAC20114D2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa
Signing time:             Fri 03 Apr 2026 01:10:10 +0000
ROA not before:           Fri 03 Apr 2026 01:10:10 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:34:85:81:21:9a:a7:2b:84:88:ed:dd:da:8f:14:da:c2:01:14:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:10:10 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=d26ae662b5da386d72a5bef926c3916375af87344686d837c8f05602a07d90f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:76:76:3f:9d:a6:a5:58:3b:09:3e:3a:2c:
                    d8:0d:ea:fe:1e:37:b6:ed:5d:22:13:4c:e5:b2:23:
                    89:e6:c5:28:0c:f8:bb:a5:ed:94:f3:b8:bc:76:6b:
                    15:33:21:07:4f:08:f4:b5:40:28:8c:9d:8d:c7:57:
                    46:89:63:3d:a6:63:2e:6d:b0:bc:8b:4a:d9:df:4f:
                    3d:b1:c3:49:9a:9e:b5:0a:5f:57:b4:51:58:c3:51:
                    56:69:e3:1c:97:ba:aa:18:ca:4b:e9:da:57:60:3c:
                    d0:f2:8a:6a:5c:be:c6:9b:b8:7a:bb:06:1f:43:5e:
                    4c:92:8f:1b:15:f3:2f:fa:eb:cc:97:6e:e3:30:67:
                    f7:21:6d:6b:ce:b7:2a:af:f1:45:00:de:0b:fe:3c:
                    06:d5:f8:e0:ed:54:ac:34:5c:09:ad:5d:fb:4e:cd:
                    70:e0:4d:26:cc:b8:e6:4d:4a:f9:14:5f:65:b0:57:
                    c7:58:1a:a8:9d:18:5b:64:22:6c:7b:da:b6:37:7a:
                    d8:b9:7a:3b:e4:9a:46:20:ee:7d:60:87:e7:bd:2b:
                    c7:40:34:35:63:05:43:fb:f1:47:cb:08:52:41:38:
                    17:65:4e:fe:34:6e:4a:12:de:f8:22:c1:3f:ad:f4:
                    cc:a3:08:32:69:e5:f9:39:dd:25:52:cf:fe:66:4c:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:16:5E:9E:32:F9:92:F0:55:DE:B0:CB:9B:12:AF:E2:3D:07:55:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1210::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:0c:b4:f4:fc:8c:41:c8:72:bd:44:4a:9b:d8:94:f1:63:
         e4:da:94:34:ed:fa:a6:62:c0:0a:78:8c:ab:a9:ce:b1:47:31:
         ac:af:77:62:d7:50:f1:c0:5d:15:8a:12:39:15:73:3c:18:57:
         57:1a:98:9c:ff:04:ac:54:f6:6f:a2:f2:51:26:dd:c0:03:9b:
         d1:77:87:14:43:16:45:87:cb:fe:da:63:48:1f:66:e1:96:69:
         c3:18:f3:4a:4c:16:ad:7d:7e:da:b0:ea:cc:5d:74:2e:30:1d:
         0d:93:01:5d:83:78:18:e1:c9:35:0f:76:ae:85:27:6f:04:d5:
         d3:db:64:15:4b:3e:7f:3d:28:8e:28:ad:b1:8e:ba:f0:e1:df:
         b2:52:a6:58:70:73:f1:87:3f:11:98:7e:80:60:cc:31:59:43:
         e7:2e:ef:36:99:d5:f8:f5:ce:4f:2c:2a:68:47:6c:b7:50:03:
         63:00:d6:f8:de:3c:c2:b7:9d:6b:88:a6:ec:5a:19:7e:d1:15:
         af:e8:59:c4:4f:f8:8d:40:c6:5f:04:d6:9c:c8:6b:85:e6:8a:
         5f:2b:51:b0:76:ab:d8:58:8a:b1:4c:5c:8c:a4:7b:a6:2e:2e:
         bb:bb:fc:14:8d:61:a1:67:5c:76:09:ad:fe:dd:03:58:cf:b2:
         cf:2f:af:a9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfzSFgSGapyuEiO3d2o8U2sIBFNIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMDEwWhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjZhZTY2MmI1ZGEzODZkNzJhNWJlZjkyNmMzOTE2Mzc1
YWY4NzM0NDY4NmQ4MzdjOGYwNTYwMmEwN2Q5MGYxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhPXZ2P52mpVg7CT46LNgN6v4eN7btXSITTOWyI4nmxSgM
+Lul7ZTzuLx2axUzIQdPCPS1QCiMnY3HV0aJYz2mYy5tsLyLStnfTz2xw0manrUK
X1e0UVjDUVZp4xyXuqoYykvp2ldgPNDyimpcvsabuHq7Bh9DXkySjxsV8y/668yX
buMwZ/chbWvOtyqv8UUA3gv+PAbV+ODtVKw0XAmtXftOzXDgTSbMuOZNSvkUX2Ww
V8dYGqidGFtkImx72rY3eti5ejvkmkYg7n1gh+e9K8dANDVjBUP78UfLCFJBOBdl
Tv40bkoS3vgiwT+t9MyjCDJp5fk53SVSz/5mTOMpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqhZenjL5kvBV3rDLmxKv4j0HVX0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA0MDUzOTNjLTg2MTMtNGZlZC1iODQ1LTdlYThiY2Q5ZTY3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEhAwDQYJKoZIhvcNAQELBQADggEBABuRDLT0/IxByHK9REqb2JTx
Y+TalDTt+qZiwAp4jKupzrFHMayvd2LXUPHAXRWKEjkVczwYV1camJz/BKxU9m+i
8lEm3cADm9F3hxRDFkWHy/7aY0gfZuGWacMY80pMFq19ftqw6sxddC4wHQ2TAV2D
eBjhyTUPdq6FJ28E1dPbZBVLPn89KI4orbGOuvDh37JSplhwc/GHPxGYfoBgzDFZ
Q+cu7zaZ1fj1zk8sKmhHbLdQA2MA1vjePMK3nWuIpuxaGX7RFa/oWcRP+I1Axl8E
1pzIa4Xmil8rUbB2q9hYirFMXIyke6YuLru7/BSNYaFnXHYJrf7dA1jPss8vr6k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:06 2026 by rpki-client