Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa
File:                     3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa (raw, json)
Hash identifier:          Mk+3aV/m8wu1e0gWv07LNNZjXQ4UgEXw0TgsKk5aaNA=
Subject key identifier:   00:D3:4B:EB:04:8E:87:3B:F4:41:D5:67:C8:97:99:ED:13:7C:D3:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       440164122A3440BA9076826A4F37DF04AFAF1693
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa
Signing time:             Fri 03 Apr 2026 01:51:29 +0000
ROA not before:           Fri 03 Apr 2026 01:51:29 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:10ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:64:12:2a:34:40:ba:90:76:82:6a:4f:37:df:04:af:af:16:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:51:29 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=a4a3ecd08be3cf60fe9024dc069ac55c5a5cf3964aa2158c0165419aaa4f5140, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:e5:ee:52:7b:7d:d2:99:48:e7:ae:dc:d9:
                    50:1d:0f:a6:68:68:f7:c1:49:a2:c9:ab:e4:e5:95:
                    1c:54:c8:59:d0:0a:ab:ac:5c:73:cd:85:91:73:dc:
                    f0:a4:0a:c4:e5:ff:7f:21:ad:91:ad:da:72:93:b8:
                    17:38:1e:11:95:8e:b7:63:c9:8c:96:37:4e:93:d7:
                    03:0e:fe:c7:d1:19:96:39:6f:1e:90:fe:40:5a:20:
                    35:9a:8d:f4:36:fb:f1:05:b2:89:e9:f1:e2:84:f9:
                    24:c6:4a:23:da:12:a8:26:bc:71:a6:09:5d:81:4d:
                    e1:5e:b1:00:94:dd:39:86:83:e7:8b:99:f2:c8:94:
                    8a:d3:77:59:e4:7b:41:16:e1:2b:8f:b1:ed:59:d3:
                    f5:c2:7d:24:02:1d:94:36:5b:c4:ba:29:c4:13:e9:
                    d7:50:fb:7d:c2:bb:82:24:8e:0e:d7:d0:73:67:66:
                    2c:29:63:a8:2a:70:1b:1e:83:57:cf:fe:8f:e5:e2:
                    00:be:5f:a6:3b:ed:5a:18:0b:b6:f4:2a:fd:99:e1:
                    d3:10:62:dd:94:b5:77:6e:4e:7d:f1:d6:7d:b9:18:
                    53:a9:04:5e:40:20:ea:74:91:ae:2f:37:1a:c3:e2:
                    8e:82:b9:19:2a:8c:8d:56:10:49:00:5c:07:8c:b7:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:4B:EB:04:8E:87:3B:F4:41:D5:67:C8:97:99:ED:13:7C:D3:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fbfd52b-41b3-4bf4-9fe7-486c885285aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:10ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:48:39:13:82:56:af:37:59:e0:4a:8a:cc:08:9b:c6:d8:
         d5:02:c8:d1:6f:f7:c2:78:41:7c:54:8e:3c:bc:f4:d6:8b:82:
         d9:10:3f:0b:a9:5d:88:37:7b:dc:eb:ac:dd:d6:54:1a:8d:e0:
         d8:00:7f:b1:61:2f:b6:d3:d4:3c:41:46:2a:84:88:3b:c5:e0:
         02:b6:b9:8c:a4:36:18:64:cb:15:44:5d:0a:c3:77:12:f4:19:
         1a:41:48:5f:90:27:e3:88:b2:29:2b:f2:ce:65:3d:c8:dc:f7:
         48:da:08:67:40:13:86:6f:75:28:75:fe:3c:83:c8:ec:cf:c1:
         71:26:22:5f:3a:82:72:ba:68:ef:31:23:fd:8e:c4:6a:13:b9:
         aa:7f:17:ae:bb:94:c1:39:75:b1:b1:3c:43:c8:83:7e:cf:95:
         d9:f9:c0:e9:e2:4f:15:4b:0f:a2:e9:e0:15:24:39:b4:d6:d2:
         93:41:53:a5:98:4b:e0:87:18:29:e2:81:dd:e8:f7:8f:b4:fb:
         8a:df:12:d0:4d:9b:04:50:63:17:6d:0a:62:cb:e9:a4:7b:1a:
         89:05:81:d2:52:10:40:ee:43:07:62:87:bf:f7:09:e8:4e:1d:
         64:57:d9:70:ec:43:fd:9a:59:7b:91:3b:2e:72:36:3a:9c:a9:
         f1:83:c4:f2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURAFkEio0QLqQdoJqTzffBK+vFpMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDE1MTI5WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNGEzZWNkMDhiZTNjZjYwZmU5MDI0ZGMwNjlhYzU1YzVh
NWNmMzk2NGFhMjE1OGMwMTY1NDE5YWFhNGY1MTQwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfeOXuUnt90plI567c2VAdD6ZoaPfBSaLJq+TllRxUyFnQ
CqusXHPNhZFz3PCkCsTl/38hrZGt2nKTuBc4HhGVjrdjyYyWN06T1wMO/sfRGZY5
bx6Q/kBaIDWajfQ2+/EFsonp8eKE+STGSiPaEqgmvHGmCV2BTeFesQCU3TmGg+eL
mfLIlIrTd1nke0EW4SuPse1Z0/XCfSQCHZQ2W8S6KcQT6ddQ+33Cu4Ikjg7X0HNn
ZiwpY6gqcBseg1fP/o/l4gC+X6Y77VoYC7b0Kv2Z4dMQYt2UtXduTn3x1n25GFOp
BF5AIOp0ka4vNxrD4o6CuRkqjI1WEEkAXAeMtxKvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUANNL6wSOhzv0QdVnyJeZ7RN80/cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNmYmZkNTJiLTQxYjMtNGJmNC05ZmU3LTQ4NmM4ODUyODVhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAELowDQYJKoZIhvcNAQELBQADggEBAG+ASDkTglavN1ngSorMCJvG
2NUCyNFv98J4QXxUjjy89NaLgtkQPwupXYg3e9zrrN3WVBqN4NgAf7FhL7bT1DxB
RiqEiDvF4AK2uYykNhhkyxVEXQrDdxL0GRpBSF+QJ+OIsikr8s5lPcjc90jaCGdA
E4ZvdSh1/jyDyOzPwXEmIl86gnK6aO8xI/2OxGoTuap/F667lME5dbGxPEPIg37P
ldn5wOniTxVLD6Lp4BUkObTW0pNBU6WYS+CHGCnigd3o94+0+4rfEtBNmwRQYxdt
CmLL6aR7GokFgdJSEEDuQwdih7/3CehOHWRX2XDsQ/2aWXuROy5yNjqcqfGDxPI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:43 2026 by rpki-client