Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a36d6b89-7816-4fe9-ae3f-8c1c602d45b6.roa
File:                     a36d6b89-7816-4fe9-ae3f-8c1c602d45b6.roa (raw, json)
Hash identifier:          xxPgWiBfttU2VycWkaCvgq1M8h7v3NJFQUm6aDBtGwY=
Subject key identifier:   EF:84:74:11:23:31:0F:61:7A:6D:8F:A3:B0:81:BD:B6:83:04:93:3D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4B50E3CF32550C966F27BF845713EAA6B7C6AB35
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a36d6b89-7816-4fe9-ae3f-8c1c602d45b6.roa
Signing time:             Fri 03 Apr 2026 01:20:05 +0000
ROA not before:           Fri 03 Apr 2026 01:20:05 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:101d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:50:e3:cf:32:55:0c:96:6f:27:bf:84:57:13:ea:a6:b7:c6:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:20:05 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=84398e539245d80afa6054b2c7d64f777b51fd11dfa503bf4bdf431a9f400cd0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:13:7f:8e:20:9a:95:2d:93:4e:44:00:bc:
                    8a:f5:f0:9e:7f:00:de:99:83:a8:94:51:7e:b2:f4:
                    5a:e4:9d:62:c1:24:da:95:df:ea:4c:5d:de:87:b7:
                    b6:42:52:55:3d:5b:09:1e:6c:d5:4b:e3:03:da:1b:
                    b7:6f:78:9c:53:3d:ca:ad:01:08:6f:96:af:e2:59:
                    2d:60:d4:72:03:f5:c2:40:53:a8:ac:b0:8f:58:29:
                    bf:28:aa:8a:99:c4:84:e3:fe:8f:6b:07:02:d2:11:
                    bb:d7:52:45:f8:10:a0:f6:13:cc:a5:53:64:d6:2b:
                    d6:5b:b5:63:38:e5:ca:92:1e:6b:39:1b:47:77:51:
                    50:84:59:51:79:9d:4a:cf:d6:f9:5f:96:6c:5b:c5:
                    45:67:55:9d:b0:0c:b9:c6:af:f9:3f:b3:a3:23:e2:
                    31:1c:4f:a3:be:f3:70:bc:01:f2:86:d0:0f:11:54:
                    66:2e:8a:d7:8e:0b:8b:56:5b:ca:0e:79:0e:0a:48:
                    12:d0:c6:2b:30:d4:56:d4:99:b0:96:4c:7d:ef:89:
                    26:17:b5:79:1d:b9:32:05:ab:42:c9:f0:3f:04:2d:
                    0f:95:92:92:8f:08:32:13:a8:49:0c:76:ee:60:d1:
                    b7:24:bf:7b:44:43:06:90:c7:b1:ef:b2:a2:c3:f6:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:74:11:23:31:0F:61:7A:6D:8F:A3:B0:81:BD:B6:83:04:93:3D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a36d6b89-7816-4fe9-ae3f-8c1c602d45b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:101d::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:71:63:f6:47:a3:2f:37:56:94:22:15:99:c9:f4:8d:51:b2:
         1d:67:7f:bb:05:ed:54:2a:6d:f9:e6:8d:14:e9:bf:9b:1b:65:
         f5:c3:3f:ef:cd:b3:eb:b5:60:9b:69:eb:de:22:3a:a4:6a:03:
         d5:42:e7:8e:45:82:75:e0:5e:d8:ad:1d:17:ad:43:50:c4:e8:
         6d:9a:f8:23:f0:dd:2d:77:7f:5f:89:b8:30:97:19:71:be:8b:
         38:23:41:76:d7:ba:b7:e4:c5:9f:e3:0d:73:ec:5f:9e:8a:04:
         4d:c8:4f:90:fa:00:3b:2b:41:4c:14:11:86:0b:50:3b:29:2a:
         ec:97:73:86:c3:f7:04:a1:77:fa:45:bb:43:2c:bc:f2:56:a9:
         d7:fc:a5:18:13:0f:ca:22:7a:3f:83:65:69:58:45:a3:86:60:
         af:66:91:a3:e3:e7:d7:0e:c3:dc:2c:75:32:57:5e:18:ba:26:
         9c:d1:4f:fe:ea:9a:a2:2b:9d:74:06:ca:a4:a5:c6:92:16:6c:
         a7:ac:42:ec:fd:f1:e1:ea:2d:ba:89:8d:61:ce:6b:10:4e:7c:
         16:ce:ab:18:ef:fd:8a:51:a3:8b:8f:b9:9a:c5:bd:1b:4a:65:
         34:2f:46:ec:56:de:6c:48:6a:d8:5b:8e:2b:a8:37:61:e4:b1:
         53:75:0b:77
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUS1DjzzJVDJZvJ7+EVxPqprfGqzUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEyMDA1WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDM5OGU1MzkyNDVkODBhZmE2MDU0YjJjN2Q2NGY3Nzdi
NTFmZDExZGZhNTAzYmY0YmRmNDMxYTlmNDAwY2QwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKzRN/jiCalS2TTkQAvIr18J5/AN6Zg6iUUX6y9FrknWLB
JNqV3+pMXd6Ht7ZCUlU9WwkebNVL4wPaG7dveJxTPcqtAQhvlq/iWS1g1HID9cJA
U6issI9YKb8oqoqZxITj/o9rBwLSEbvXUkX4EKD2E8ylU2TWK9ZbtWM45cqSHms5
G0d3UVCEWVF5nUrP1vlflmxbxUVnVZ2wDLnGr/k/s6Mj4jEcT6O+83C8AfKG0A8R
VGYuiteOC4tWW8oOeQ4KSBLQxisw1FbUmbCWTH3viSYXtXkduTIFq0LJ8D8ELQ+V
kpKPCDITqEkMdu5g0bckv3tEQwaQx7HvsqLD9pYpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU74R0ESMxD2F6bY+jsIG9toMEkz0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2EzNmQ2Yjg5LTc4MTYtNGZlOS1hZTNmLThjMWM2MDJkNDViNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEB0wDQYJKoZIhvcNAQELBQADggEBADdxY/ZHoy83VpQiFZnJ9I1R
sh1nf7sF7VQqbfnmjRTpv5sbZfXDP+/Ns+u1YJtp694iOqRqA9VC545FgnXgXtit
HRetQ1DE6G2a+CPw3S13f1+JuDCXGXG+izgjQXbXurfkxZ/jDXPsX56KBE3IT5D6
ADsrQUwUEYYLUDspKuyXc4bD9wShd/pFu0MsvPJWqdf8pRgTD8oiej+DZWlYRaOG
YK9mkaPj59cOw9wsdTJXXhi6JpzRT/7qmqIrnXQGyqSlxpIWbKesQuz98eHqLbqJ
jWHOaxBOfBbOqxjv/YpRo4uPuZrFvRtKZTQvRuxW3mxIathbjiuoN2HksVN1C3c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:05 2026 by rpki-client