Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06081bf1-17fc-4c79-981b-76a3bd4a2054.roa
File:                     06081bf1-17fc-4c79-981b-76a3bd4a2054.roa (raw, json)
Hash identifier:          D7gABQo+EEBud79qWNq7GHkeW4yD1FtwVbCsgVk0zDY=
Subject key identifier:   F9:05:D8:36:1A:E4:99:79:9E:42:7F:8A:5E:D2:04:BA:CB:75:CB:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2E73BC962FDC65E630F91836328DE1488AADCA57
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06081bf1-17fc-4c79-981b-76a3bd4a2054.roa
Signing time:             Fri 03 Apr 2026 02:30:09 +0000
ROA not before:           Fri 03 Apr 2026 02:30:09 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1e97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:bc:96:2f:dc:65:e6:30:f9:18:36:32:8d:e1:48:8a:ad:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:30:09 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=ec1bfa4b3a8968fc814dd296dcbb9626e18491e17884f8c39235bbdb1d477663, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:0c:1a:8e:3b:df:fe:e3:65:b2:2a:03:a1:
                    ee:09:c3:0c:6a:d9:d8:81:ad:ac:01:bf:16:de:a0:
                    ab:ac:26:9b:9e:7b:ba:42:71:62:7d:06:21:5e:69:
                    2c:c3:ea:d2:93:dd:1d:71:19:7a:18:36:30:33:6a:
                    03:32:fb:e7:9a:26:a3:7f:7c:38:86:6f:b6:c6:64:
                    c5:1b:bb:38:6b:75:67:0d:b1:07:96:8c:42:b5:59:
                    83:c2:d9:df:0a:5a:29:db:d4:bf:d3:8b:68:df:f4:
                    49:f9:cb:33:7b:ff:3b:a3:8b:f1:38:f9:3b:4b:d4:
                    bc:cb:04:be:64:b4:c6:4d:b6:bc:82:14:ac:ea:b9:
                    16:3d:58:5d:03:4f:01:43:c4:15:25:1c:6e:af:09:
                    04:92:2d:73:2d:fc:08:51:2d:04:1e:66:01:f5:81:
                    20:c6:cb:97:c5:22:60:4d:70:50:9e:2f:91:2e:74:
                    30:29:f1:a1:46:fd:19:74:5f:6d:1f:3d:b3:69:b5:
                    f3:6d:f8:09:f2:8e:7f:33:18:94:a6:a1:4d:dc:54:
                    24:07:64:bc:bc:9f:25:5f:b0:fb:43:f2:19:d8:1f:
                    de:8c:dc:82:4d:40:2e:21:d7:8f:4d:55:e4:b2:67:
                    0c:99:17:6b:1d:30:44:c8:1c:ae:4a:ae:28:26:89:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:05:D8:36:1A:E4:99:79:9E:42:7F:8A:5E:D2:04:BA:CB:75:CB:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06081bf1-17fc-4c79-981b-76a3bd4a2054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1e97::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:cf:dd:50:e9:78:21:b4:65:a8:5a:f4:b3:41:39:d3:eb:
         e9:65:4e:c1:42:69:2d:56:10:11:ee:e8:0f:64:95:56:fb:0d:
         25:93:60:cc:7c:33:1a:b9:55:af:52:9c:2a:4e:6d:39:e9:fc:
         47:41:2e:bc:73:ff:e5:62:8e:2d:6b:f9:24:c7:27:ed:13:bf:
         61:79:42:42:09:6a:03:92:73:96:84:39:ed:ac:b5:58:8d:07:
         5f:99:25:75:6f:83:4f:89:bc:7e:50:fd:00:43:95:1b:30:bf:
         46:48:c6:e9:76:c3:c1:8c:73:2f:c9:bf:f4:f3:1b:51:dd:9d:
         be:40:8f:5d:5c:3c:e6:cc:4a:fb:29:0d:5c:b4:50:dd:8f:5f:
         1c:58:39:6e:68:2c:44:f3:a9:87:27:f8:01:5e:f5:18:80:a9:
         52:9b:12:81:da:c7:fe:cd:d1:e4:4a:16:6c:8f:14:a2:04:4d:
         38:90:ee:7f:15:7b:8e:73:1c:26:0c:b6:5f:d3:0b:8c:b6:c7:
         b9:11:18:29:dd:c4:98:8d:7e:c3:28:f5:1c:a8:f5:8f:2e:4b:
         71:2d:fc:d9:05:b1:40:25:19:c2:1c:a8:a3:9f:23:f8:13:02:
         37:bc:75:2e:d5:97:1c:72:97:7a:14:6f:f6:94:d4:46:24:0d:
         59:da:32:3c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULnO8li/cZeYw+Rg2Mo3hSIqtylcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIzMDA5WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzFiZmE0YjNhODk2OGZjODE0ZGQyOTZkY2JiOTYyNmUx
ODQ5MWUxNzg4NGY4YzM5MjM1YmJkYjFkNDc3NjYzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC47gwajjvf/uNlsioDoe4Jwwxq2diBrawBvxbeoKusJpue
e7pCcWJ9BiFeaSzD6tKT3R1xGXoYNjAzagMy++eaJqN/fDiGb7bGZMUbuzhrdWcN
sQeWjEK1WYPC2d8KWinb1L/Ti2jf9En5yzN7/zuji/E4+TtL1LzLBL5ktMZNtryC
FKzquRY9WF0DTwFDxBUlHG6vCQSSLXMt/AhRLQQeZgH1gSDGy5fFImBNcFCeL5Eu
dDAp8aFG/Rl0X20fPbNptfNt+Anyjn8zGJSmoU3cVCQHZLy8nyVfsPtD8hnYH96M
3IJNQC4h149NVeSyZwyZF2sdMETIHK5KrigmiQXHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+QXYNhrkmXmeQn+KXtIEust1y+IwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA2MDgxYmYxLTE3ZmMtNGM3OS05ODFiLTc2YTNiZDRhMjA1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHpcwDQYJKoZIhvcNAQELBQADggEBAJ7bz91Q6XghtGWoWvSzQTnT
6+llTsFCaS1WEBHu6A9klVb7DSWTYMx8Mxq5Va9SnCpObTnp/EdBLrxz/+Viji1r
+STHJ+0Tv2F5QkIJagOSc5aEOe2stViNB1+ZJXVvg0+JvH5Q/QBDlRswv0ZIxul2
w8GMcy/Jv/TzG1Hdnb5Aj11cPObMSvspDVy0UN2PXxxYOW5oLETzqYcn+AFe9RiA
qVKbEoHax/7N0eRKFmyPFKIETTiQ7n8Ve45zHCYMtl/TC4y2x7kRGCndxJiNfsMo
9Ryo9Y8uS3Et/NkFsUAlGcIcqKOfI/gTAje8dS7Vlxxyl3oUb/aU1EYkDVnaMjw=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:28:31 2026 by rpki-client