Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61568716-4b55-4665-84e0-4f141e77493c.roa
File:                     61568716-4b55-4665-84e0-4f141e77493c.roa (raw, json)
Hash identifier:          CqBzCXJQZaqKdzxWsJfOzIrwTAuteGJ1o/JF0DDjDps=
Subject key identifier:   F9:3B:63:24:5F:A8:75:C5:90:49:17:B3:39:C1:93:7C:07:F6:94:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01FE883E6825DB0B7D7708E7BBBEC0E1D93DDC2C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61568716-4b55-4665-84e0-4f141e77493c.roa
Signing time:             Fri 03 Apr 2026 00:30:17 +0000
ROA not before:           Fri 03 Apr 2026 00:30:17 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:88:3e:68:25:db:0b:7d:77:08:e7:bb:be:c0:e1:d9:3d:dc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 00:30:17 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=5d9378efe0146bfa54f1081b9d71638b3b1fea395810c19b77773142dce8d595, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:2d:58:7b:55:aa:ed:4d:8f:c4:28:7b:e4:
                    7a:8e:42:f7:a4:9c:ca:fb:ed:3f:10:cd:61:a6:51:
                    68:f6:bb:1c:55:9a:af:52:59:4e:9b:72:89:15:84:
                    70:48:48:6b:a6:57:85:45:8d:12:79:74:cf:20:35:
                    27:51:08:0e:7a:40:50:6a:26:c5:ba:85:68:54:aa:
                    07:6e:93:f9:bf:20:30:f0:eb:b8:39:bb:a3:4c:13:
                    67:0d:04:b7:28:02:23:74:c1:c5:12:43:cc:36:9a:
                    84:63:d7:2c:1e:47:e3:5a:9b:43:14:97:d9:0e:a8:
                    8d:ad:c0:d5:a9:82:c1:f0:de:af:c4:66:79:41:9d:
                    d1:f5:d0:27:90:7e:85:37:1c:31:bb:02:76:49:4d:
                    7a:d1:01:46:33:e4:1a:f9:c5:8b:b1:57:b6:e6:1e:
                    77:6a:85:ef:a3:4a:d9:71:c5:d2:53:1b:d3:c1:d1:
                    79:ac:c9:71:46:eb:73:cb:70:3b:4e:b6:bb:f6:dd:
                    95:7e:1e:18:3e:cf:81:2d:a6:47:3e:4e:b8:10:26:
                    d9:c0:a0:20:51:56:9e:d9:90:ff:de:5c:49:0b:00:
                    a9:2a:d6:91:32:a6:51:bb:c1:b4:89:00:21:73:4a:
                    0f:25:a2:35:0d:8d:6f:a8:f9:0c:5e:7c:09:be:fc:
                    41:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:63:24:5F:A8:75:C5:90:49:17:B3:39:C1:93:7C:07:F6:94:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61568716-4b55-4665-84e0-4f141e77493c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:93:63:fa:4c:12:12:58:d8:ad:71:02:19:42:27:fe:0d:
         fc:d6:55:dc:e5:87:d3:60:9b:d5:e0:a1:15:b6:32:05:8d:5b:
         76:7a:67:da:a0:7b:a1:c8:4a:2d:00:d3:ca:ad:4c:a9:de:59:
         c9:df:7e:3a:a6:92:de:64:f7:80:73:3b:b2:42:f1:a0:85:81:
         e4:ec:b4:d0:e0:f3:ab:b3:1c:04:7a:0f:34:29:a9:42:f0:c3:
         f3:a0:bb:83:80:d1:6d:4e:3f:b7:aa:2d:7e:19:37:47:97:8a:
         93:51:9d:6b:d7:83:8d:18:02:ec:4f:10:0d:8a:92:f8:79:53:
         87:75:ee:5c:8e:6a:7d:c5:82:7a:92:95:1a:4a:04:fa:33:16:
         b8:af:a0:90:ec:2f:49:53:df:5d:fb:8a:71:36:6e:bf:c6:ce:
         85:17:93:e4:40:20:c4:84:a7:5c:a6:a2:01:1f:5f:8b:29:a6:
         c4:e1:a0:64:e8:08:7d:5e:ef:03:f7:09:fe:91:90:a8:e7:32:
         0c:c1:00:99:91:44:a2:a7:46:3f:00:2f:80:35:e9:8e:a5:9e:
         3a:ed:1f:db:be:49:ea:47:06:95:b6:87:b0:b7:06:7d:c9:a5:
         88:e3:3e:55:f6:ff:d7:b6:8a:07:fc:7a:22:c2:68:b5:5e:1d:
         84:ec:fd:34
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAf6IPmgl2wt9dwjnu77A4dk93CwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDAzMDE3WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZDkzNzhlZmUwMTQ2YmZhNTRmMTA4MWI5ZDcxNjM4YjNi
MWZlYTM5NTgxMGMxOWI3Nzc3MzE0MmRjZThkNTk1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDG+C1Ye1Wq7U2PxCh75HqOQveknMr77T8QzWGmUWj2uxxV
mq9SWU6bcokVhHBISGumV4VFjRJ5dM8gNSdRCA56QFBqJsW6hWhUqgduk/m/IDDw
67g5u6NME2cNBLcoAiN0wcUSQ8w2moRj1yweR+Nam0MUl9kOqI2twNWpgsHw3q/E
ZnlBndH10CeQfoU3HDG7AnZJTXrRAUYz5Br5xYuxV7bmHndqhe+jStlxxdJTG9PB
0XmsyXFG63PLcDtOtrv23ZV+Hhg+z4Etpkc+TrgQJtnAoCBRVp7ZkP/eXEkLAKkq
1pEyplG7wbSJACFzSg8lojUNjW+o+QxefAm+/EEvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+TtjJF+odcWQSRezOcGTfAf2lEwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzYxNTY4NzE2LTRiNTUtNDY2NS04NGUwLTRmMTQxZTc3NDkzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEe8wDQYJKoZIhvcNAQELBQADggEBADn+k2P6TBISWNitcQIZQif+
DfzWVdzlh9Ngm9XgoRW2MgWNW3Z6Z9qge6HISi0A08qtTKneWcnffjqmkt5k94Bz
O7JC8aCFgeTstNDg86uzHAR6DzQpqULww/Ogu4OA0W1OP7eqLX4ZN0eXipNRnWvX
g40YAuxPEA2Kkvh5U4d17lyOan3FgnqSlRpKBPozFrivoJDsL0lT3137inE2br/G
zoUXk+RAIMSEp1ymogEfX4sppsThoGToCH1e7wP3Cf6RkKjnMgzBAJmRRKKnRj8A
L4A16Y6lnjrtH9u+SepHBpW2h7C3Bn3JpYjjPlX2/9e2igf8eiLCaLVeHYTs/TQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:23 2026 by rpki-client