Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7379c8f4-1800-4fe0-ac8f-b6f65fd14d1d.roa
File:                     7379c8f4-1800-4fe0-ac8f-b6f65fd14d1d.roa (raw, json)
Hash identifier:          JmrwHmJBzEdUcDWGt6/ic55ZHUHQbWnx3VsVhCyCq1A=
Subject key identifier:   26:24:86:81:B4:CC:20:F5:28:E8:F2:C1:40:09:B4:25:CB:36:0D:A4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5407644D08D3D3A40D3062232099915A6623B6C6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7379c8f4-1800-4fe0-ac8f-b6f65fd14d1d.roa
Signing time:             Fri 03 Apr 2026 01:01:03 +0000
ROA not before:           Fri 03 Apr 2026 01:01:03 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:07:64:4d:08:d3:d3:a4:0d:30:62:23:20:99:91:5a:66:23:b6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:01:03 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=2b9b76f11b654f9448c9cb9dedc36e30c7feeb535ac06d8614be9406824dfbb6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:96:d5:1e:24:d0:1e:d4:01:cb:06:6a:7e:
                    3e:ca:8f:b3:b8:ac:f6:8b:f4:55:49:dc:d3:e6:7e:
                    2d:6a:f7:4a:fa:54:46:0b:f4:fc:e7:84:1c:18:33:
                    00:14:4f:7a:26:21:a8:4d:27:4c:cd:9e:2a:8f:43:
                    76:b6:3c:37:2e:79:f7:87:6c:b2:01:80:36:84:75:
                    ef:92:f4:57:be:9b:c4:e6:f4:78:cc:8d:90:ad:e8:
                    90:39:39:ba:f1:2b:b4:18:48:03:b3:80:14:f3:9d:
                    2f:a4:8c:10:ec:f6:fc:23:0e:05:8a:1b:f1:fe:43:
                    74:b7:e9:74:dd:6a:03:06:a0:a1:ba:64:e5:d4:e4:
                    a8:0c:cd:a2:e0:95:af:d0:76:d3:dc:ae:4d:70:4e:
                    33:0a:cd:c4:ed:46:e8:39:1e:f4:06:2a:da:23:bb:
                    72:cd:cd:2c:4f:6e:18:9d:49:06:3b:98:26:5a:53:
                    e4:f0:56:60:c0:92:f4:c4:c1:18:f7:5c:06:e9:1a:
                    38:77:e8:bd:76:a0:38:42:9d:e0:8d:cf:85:c7:02:
                    96:1f:45:7e:33:64:de:b7:84:91:42:ca:91:c8:09:
                    6a:9c:3e:22:40:21:66:f2:2f:ea:eb:37:6a:a6:b2:
                    2d:d1:60:79:7d:c7:9b:a1:25:e9:47:7b:b9:47:21:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:86:81:B4:CC:20:F5:28:E8:F2:C1:40:09:B4:25:CB:36:0D:A4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7379c8f4-1800-4fe0-ac8f-b6f65fd14d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1114::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:59:b3:a0:12:27:51:e4:21:c7:f6:54:21:09:a4:fc:03:
         3a:bc:ff:32:7b:da:01:4d:7a:e6:5a:0c:70:37:fd:6a:0a:b5:
         89:12:1b:23:b1:64:6a:40:5f:f8:0b:0c:62:e1:da:9b:55:08:
         1d:31:1e:d2:77:81:77:ce:e5:a3:01:d4:f5:f6:b1:2c:d0:3f:
         49:83:63:f5:9c:2c:93:b3:10:5e:ec:f9:9b:48:a5:ed:8c:91:
         ba:6b:b2:54:df:f4:2a:59:21:69:f2:d8:b5:b8:95:9e:4a:95:
         c0:3b:b7:dc:e0:d4:bd:5a:68:1f:5e:80:d5:09:2f:04:30:0d:
         c8:2f:0c:bb:6f:a3:c1:c9:b9:f1:ab:d0:1e:e5:79:67:b6:b0:
         f8:ec:93:bc:89:5b:7a:c8:90:07:12:a8:a4:53:8b:5d:8a:76:
         e0:f9:c4:0c:77:ec:20:dc:19:cb:15:9e:eb:27:ac:d2:5a:5a:
         5a:35:f4:cd:07:b5:a9:89:cd:35:a1:60:07:5a:b3:01:f6:3c:
         71:ad:b1:88:f2:e8:51:17:27:e2:1a:8c:fd:f2:48:59:1e:d1:
         3a:aa:7d:6b:9a:c8:0f:7a:52:9e:60:83:3f:57:85:bd:d8:5f:
         c5:1a:07:5b:a2:02:42:07:3e:f1:f9:d8:93:75:c5:1e:85:20:
         76:02:bb:6e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVAdkTQjT06QNMGIjIJmRWmYjtsYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEwMTAzWhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjliNzZmMTFiNjU0Zjk0NDhjOWNiOWRlZGMzNmUzMGM3
ZmVlYjUzNWFjMDZkODYxNGJlOTQwNjgyNGRmYmI2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMxZbVHiTQHtQBywZqfj7Kj7O4rPaL9FVJ3NPmfi1q90r6
VEYL9PznhBwYMwAUT3omIahNJ0zNniqPQ3a2PDcuefeHbLIBgDaEde+S9Fe+m8Tm
9HjMjZCt6JA5ObrxK7QYSAOzgBTznS+kjBDs9vwjDgWKG/H+Q3S36XTdagMGoKG6
ZOXU5KgMzaLgla/QdtPcrk1wTjMKzcTtRug5HvQGKtoju3LNzSxPbhidSQY7mCZa
U+TwVmDAkvTEwRj3XAbpGjh36L12oDhCneCNz4XHApYfRX4zZN63hJFCypHICWqc
PiJAIWbyL+rrN2qmsi3RYHl9x5uhJelHe7lHISqnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJiSGgbTMIPUo6PLBQAm0Jcs2DaQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzczNzljOGY0LTE4MDAtNGZlMC1hYzhmLWI2ZjY1ZmQxNGQxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAERQwDQYJKoZIhvcNAQELBQADggEBABx1WbOgEidR5CHH9lQhCaT8
Azq8/zJ72gFNeuZaDHA3/WoKtYkSGyOxZGpAX/gLDGLh2ptVCB0xHtJ3gXfO5aMB
1PX2sSzQP0mDY/WcLJOzEF7s+ZtIpe2MkbprslTf9CpZIWny2LW4lZ5KlcA7t9zg
1L1aaB9egNUJLwQwDcgvDLtvo8HJufGr0B7leWe2sPjsk7yJW3rIkAcSqKRTi12K
duD5xAx37CDcGcsVnusnrNJaWlo19M0HtamJzTWhYAdaswH2PHGtsYjy6FEXJ+Ia
jP3ySFke0TqqfWuayA96Up5ggz9Xhb3YX8UaB1uiAkIHPvH52JN1xR6FIHYCu24=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:45 2026 by rpki-client