Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/145abddc-dac7-47cc-a3c5-7baac5224ad7.roa
File:                     145abddc-dac7-47cc-a3c5-7baac5224ad7.roa (raw, json)
Hash identifier:          wxfJ4yaYX2fQhkKE6YkHv/CLCHVb8RcwsTTlZMgUZPU=
Subject key identifier:   6F:BA:63:A1:B6:CE:18:D0:6E:3C:CF:47:8C:17:5C:5C:90:EA:DD:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       14593A63786CA6ADA4AC956426F481B7E3826256
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/145abddc-dac7-47cc-a3c5-7baac5224ad7.roa
Signing time:             Fri 03 Apr 2026 01:20:45 +0000
ROA not before:           Fri 03 Apr 2026 01:20:45 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:59:3a:63:78:6c:a6:ad:a4:ac:95:64:26:f4:81:b7:e3:82:62:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:20:45 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=47529a9652137fd48b98634951d9ed88ef763a6a3ee2eda3b8a3f7dae70d5f05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:cf:05:e2:87:6f:c7:d8:8f:4c:2b:4a:32:
                    bb:c1:4e:f1:31:ad:f5:d8:b8:6d:44:7d:f0:00:9b:
                    5a:c9:d6:2e:1d:0b:8e:7b:86:70:c3:2c:b8:c5:93:
                    63:3c:3f:34:8b:6b:d3:a0:61:bb:e0:18:db:fb:12:
                    74:ba:4f:bc:fe:39:f8:3e:7a:f4:5d:e4:09:c3:b2:
                    a1:f2:c7:71:f7:74:6d:13:2f:c3:f3:7b:80:73:1f:
                    ef:d4:28:e6:06:65:1b:9d:cf:b2:e8:7d:58:ae:2e:
                    54:42:9b:be:25:4e:6e:2a:66:4b:e2:c0:09:77:7c:
                    09:b1:2d:4f:af:fd:8a:35:49:42:67:79:69:3e:63:
                    cd:2c:9e:00:b5:e0:7b:b0:89:77:64:a1:57:e8:6b:
                    20:65:e5:e0:32:46:1f:cb:0e:cd:7b:4b:81:a6:8b:
                    31:11:63:cb:1b:5f:de:a8:3b:ac:75:25:51:61:7c:
                    0c:96:ec:5c:3b:19:fb:9e:8f:4f:b1:4c:ba:fb:37:
                    5e:67:f4:0a:73:47:37:7f:17:8f:8a:49:d7:9a:a5:
                    d8:f3:ce:b5:03:3b:9b:45:e9:16:45:7a:42:b3:80:
                    27:b3:45:40:b9:a0:2b:1a:23:1a:b7:c0:60:db:e1:
                    b3:7f:a1:4f:df:c8:2d:50:1f:fb:3e:1b:9c:a4:c7:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:63:A1:B6:CE:18:D0:6E:3C:CF:47:8C:17:5C:5C:90:EA:DD:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/145abddc-dac7-47cc-a3c5-7baac5224ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1102::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:85:df:a9:81:8a:00:78:32:8a:20:40:21:6c:d7:9a:5a:f9:
         89:4a:9b:4d:9c:40:54:ab:39:b9:77:38:57:8a:02:63:e8:a2:
         7f:84:90:9f:08:f3:82:e1:fd:bc:9b:5f:7b:20:3c:a5:21:10:
         3b:7a:1e:2a:33:70:7d:5d:0d:73:a1:0c:a5:b6:eb:de:17:21:
         e2:d9:80:bb:05:57:ca:2a:a2:af:8c:4d:74:01:83:5d:73:87:
         62:5c:ad:d3:bf:5d:c9:c6:55:e7:c1:e2:d0:88:4d:93:05:50:
         f1:fe:30:52:5b:2d:36:a0:28:e4:cb:12:a9:8e:6a:96:5d:1a:
         85:36:88:76:67:69:c4:6a:98:ef:10:25:7a:67:2a:75:f6:b6:
         7b:60:3d:de:38:fe:90:08:3e:59:f4:ba:47:04:4a:8c:bd:a4:
         2d:f1:1e:f9:d0:a2:2d:21:e0:5e:d2:06:6b:a7:9a:60:53:4d:
         18:55:b6:fc:f0:e1:e7:4c:10:cc:af:e4:7f:96:d2:9c:27:3c:
         0f:dc:4a:24:d5:53:b0:4b:f9:bf:42:a1:e2:e4:95:a3:e9:9f:
         02:a9:84:8a:5e:f3:cc:1c:08:e3:34:22:c9:63:db:7b:f8:95:
         c7:6e:d2:e1:7c:ce:6f:a4:a5:4b:52:a5:18:ec:17:6b:14:6e:
         09:04:c6:8b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFFk6Y3hspq2krJVkJvSBt+OCYlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEyMDQ1WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzUyOWE5NjUyMTM3ZmQ0OGI5ODYzNDk1MWQ5ZWQ4OGVm
NzYzYTZhM2VlMmVkYTNiOGEzZjdkYWU3MGQ1ZjA1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUEs8F4odvx9iPTCtKMrvBTvExrfXYuG1EffAAm1rJ1i4d
C457hnDDLLjFk2M8PzSLa9OgYbvgGNv7EnS6T7z+Ofg+evRd5AnDsqHyx3H3dG0T
L8Pze4BzH+/UKOYGZRudz7LofViuLlRCm74lTm4qZkviwAl3fAmxLU+v/Yo1SUJn
eWk+Y80sngC14HuwiXdkoVfoayBl5eAyRh/LDs17S4GmizERY8sbX96oO6x1JVFh
fAyW7Fw7Gfuej0+xTLr7N15n9ApzRzd/F4+KSdeapdjzzrUDO5tF6RZFekKzgCez
RUC5oCsaIxq3wGDb4bN/oU/fyC1QH/s+G5ykx/0HAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUb7pjobbOGNBuPM9HjBdcXJDq3TkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE0NWFiZGRjLWRhYzctNDdjYy1hM2M1LTdiYWFjNTIyNGFkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEQIwDQYJKoZIhvcNAQELBQADggEBABKF36mBigB4MoogQCFs15pa
+YlKm02cQFSrObl3OFeKAmPoon+EkJ8I84Lh/bybX3sgPKUhEDt6HiozcH1dDXOh
DKW2694XIeLZgLsFV8oqoq+MTXQBg11zh2JcrdO/XcnGVefB4tCITZMFUPH+MFJb
LTagKOTLEqmOapZdGoU2iHZnacRqmO8QJXpnKnX2tntgPd44/pAIPln0ukcESoy9
pC3xHvnQoi0h4F7SBmunmmBTTRhVtvzw4edMEMyv5H+W0pwnPA/cSiTVU7BL+b9C
oeLklaPpnwKphIpe88wcCOM0Islj23v4lcdu0uF8zm+kpUtSpRjsF2sUbgkExos=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:22 2026 by rpki-client