Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8683546-3368-4ef9-9e86-fd7cb36cabd6.roa
File:                     b8683546-3368-4ef9-9e86-fd7cb36cabd6.roa (raw, json)
Hash identifier:          bR6eGXJi9R8A1EbwKcbbSE5estQyu3k/dL3xD+UsHsc=
Subject key identifier:   90:7D:99:91:46:68:80:8D:37:05:9A:33:83:10:EC:4F:F1:74:86:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       455567D225DFE4F4CECCDC75BC63B19B3648A916
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8683546-3368-4ef9-9e86-fd7cb36cabd6.roa
Signing time:             Fri 03 Apr 2026 01:11:24 +0000
ROA not before:           Fri 03 Apr 2026 01:11:24 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:55:67:d2:25:df:e4:f4:ce:cc:dc:75:bc:63:b1:9b:36:48:a9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:11:24 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=941957753140c4bd1f7a382dee79019fb91b81a1128bbe8b6d9f00f13804c4a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:8a:a2:bb:74:c7:a6:af:50:f2:01:9f:e4:
                    e6:1a:68:6b:03:d7:1c:8c:97:a3:3c:f0:b4:60:77:
                    9b:00:d0:83:9b:be:a7:5a:88:43:66:00:c2:2d:b4:
                    4a:32:ff:e2:4e:73:b6:d3:49:d1:20:cd:ee:3b:78:
                    11:c3:f1:47:60:9a:a9:98:19:3c:e5:a7:ff:0c:ef:
                    3b:b1:5d:4d:7a:46:a4:81:ab:e3:8e:92:dc:3e:5f:
                    43:8c:3a:94:e5:bc:dc:75:84:f0:fc:61:d1:67:4b:
                    68:5c:46:14:62:49:c3:38:b2:ba:c4:60:ee:21:0e:
                    96:eb:b4:85:50:d1:95:60:09:94:41:e2:30:e9:b1:
                    69:60:a3:24:4a:89:c3:e0:45:4d:6c:de:b9:4c:cf:
                    bb:c1:e4:1a:f7:cc:38:ce:6a:1d:1e:db:30:2b:e7:
                    ca:69:66:25:f2:7f:0a:86:87:09:d2:ce:39:1e:22:
                    bb:9c:71:64:d8:74:28:e0:6c:08:46:ad:25:b8:3c:
                    a4:a3:20:c8:af:3d:e4:68:c0:71:4a:f4:17:b5:37:
                    76:d4:05:09:bd:7f:fb:52:4d:a1:cf:22:d4:89:83:
                    33:66:5a:40:d3:57:dd:41:b2:f1:3e:75:26:c3:08:
                    99:d2:97:01:21:50:22:a9:df:6e:ab:97:3d:95:fd:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7D:99:91:46:68:80:8D:37:05:9A:33:83:10:EC:4F:F1:74:86:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8683546-3368-4ef9-9e86-fd7cb36cabd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:60:98:4c:05:71:9f:cf:2e:51:fb:c6:b7:c9:78:af:64:f5:
         6b:b9:45:17:07:40:f6:06:b8:e3:7c:8b:e1:d8:d4:45:8f:19:
         02:8c:6f:fb:fc:bb:34:2a:ee:20:e8:d0:87:64:63:42:9e:60:
         03:83:50:e1:f4:a6:40:58:f0:96:62:9e:19:68:94:08:44:8e:
         b8:14:46:0b:4f:45:7e:1a:dc:d4:98:2f:f6:4e:9f:d4:d7:b3:
         45:43:b0:50:78:5e:3f:d7:29:ed:6a:08:8e:33:91:8c:5f:cf:
         c3:ad:4f:ce:56:ef:56:33:cf:c1:a5:5d:0d:80:2c:19:b3:6d:
         54:d0:99:a3:b6:07:08:c2:a9:23:0a:74:fb:6a:6a:37:75:db:
         ff:19:22:46:d8:94:dd:17:6f:ad:9e:6d:99:4f:1c:61:09:b3:
         d7:de:1e:4d:f7:e4:4b:81:81:92:fb:11:02:95:d1:c3:30:ff:
         9b:6c:f5:ae:15:6c:c4:2d:ef:7b:7f:17:d4:3c:69:63:28:72:
         14:59:82:fd:f3:a8:ac:d5:0c:05:48:1e:6e:2c:75:b9:ab:58:
         54:8c:ec:fc:e4:e9:89:07:3e:ed:af:1a:c7:74:8e:4e:d2:63:
         f8:45:55:f8:e0:f1:62:d3:48:d3:85:5b:ec:3d:b6:33:3f:1c:
         8f:23:eb:17
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURVVn0iXf5PTOzNx1vGOxmzZIqRYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMTI0WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDE5NTc3NTMxNDBjNGJkMWY3YTM4MmRlZTc5MDE5ZmI5
MWI4MWExMTI4YmJlOGI2ZDlmMDBmMTM4MDRjNGEyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHwoqiu3THpq9Q8gGf5OYaaGsD1xyMl6M88LRgd5sA0IOb
vqdaiENmAMIttEoy/+JOc7bTSdEgze47eBHD8UdgmqmYGTzlp/8M7zuxXU16RqSB
q+OOktw+X0OMOpTlvNx1hPD8YdFnS2hcRhRiScM4srrEYO4hDpbrtIVQ0ZVgCZRB
4jDpsWlgoyRKicPgRU1s3rlMz7vB5Br3zDjOah0e2zAr58ppZiXyfwqGhwnSzjke
IruccWTYdCjgbAhGrSW4PKSjIMivPeRowHFK9Be1N3bUBQm9f/tSTaHPItSJgzNm
WkDTV91BsvE+dSbDCJnSlwEhUCKp326rlz2V/RGTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUkH2ZkUZogI03BZozgxDsT/F0hqgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I4NjgzNTQ2LTMzNjgtNGVmOS05ZTg2LWZkN2NiMzZjYWJkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEaEwDQYJKoZIhvcNAQELBQADggEBAFRgmEwFcZ/PLlH7xrfJeK9k
9Wu5RRcHQPYGuON8i+HY1EWPGQKMb/v8uzQq7iDo0IdkY0KeYAODUOH0pkBY8JZi
nhlolAhEjrgURgtPRX4a3NSYL/ZOn9TXs0VDsFB4Xj/XKe1qCI4zkYxfz8OtT85W
71Yzz8GlXQ2ALBmzbVTQmaO2BwjCqSMKdPtqajd12/8ZIkbYlN0Xb62ebZlPHGEJ
s9feHk335EuBgZL7EQKV0cMw/5ts9a4VbMQt73t/F9Q8aWMochRZgv3zqKzVDAVI
Hm4sdbmrWFSM7Pzk6YkHPu2vGsd0jk7SY/hFVfjg8WLTSNOFW+w9tjM/HI8j6xc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:36:12 2026 by rpki-client