Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9939b63-1290-4b96-861f-f3ad02330997.roa
File:                     d9939b63-1290-4b96-861f-f3ad02330997.roa (raw, json)
Hash identifier:          BTOkNtOldqAsnhFX0zLGN5Ithq5PQpQr9OKI947VMJI=
Subject key identifier:   F1:2B:4A:01:72:1B:6B:2A:7D:C3:6B:9D:17:55:58:B1:4B:54:27:54
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       441623D4CB1C9D97C32C71F1BE65C7EFDCF7B4AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9939b63-1290-4b96-861f-f3ad02330997.roa
Signing time:             Fri 03 Apr 2026 02:31:25 +0000
ROA not before:           Fri 03 Apr 2026 02:31:25 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:23:d4:cb:1c:9d:97:c3:2c:71:f1:be:65:c7:ef:dc:f7:b4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:31:25 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=56614b7d6bd529373de456a69506695a0f0b76efb326ffd87f6f8e413f4e4ca3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:5c:e3:cb:ad:0f:73:1d:ce:98:a0:54:26:
                    d9:43:8a:18:22:73:00:bc:74:70:78:f3:5a:10:86:
                    83:78:b2:29:78:c3:ae:41:31:e8:83:9c:81:85:f8:
                    e0:a1:c0:83:e7:20:fa:79:05:cc:62:8f:11:3d:8b:
                    3e:06:b9:04:47:72:f2:58:d4:cd:51:e4:ab:5d:5b:
                    6d:d7:47:36:a9:27:0a:8f:10:be:c8:a2:7e:44:d9:
                    65:41:d4:10:b6:6b:eb:7b:d0:1a:67:1f:59:5e:97:
                    67:8b:c2:f1:31:d5:79:c3:c9:63:d7:be:29:35:a9:
                    b7:ea:bb:70:be:0a:97:83:ca:58:12:40:b5:ee:f6:
                    26:3f:9b:0e:ca:43:cc:50:5a:25:b7:30:89:9b:b3:
                    0b:64:8d:8d:46:67:30:2f:8a:dc:b9:5a:49:f6:8a:
                    4b:8c:90:d1:7b:09:e0:2b:70:cd:92:25:96:b0:48:
                    85:ca:09:80:97:02:13:9e:f2:3a:ae:fc:d4:8d:2c:
                    f7:41:03:26:dd:9c:85:61:23:3c:c4:00:da:63:bd:
                    af:ee:f5:41:26:ef:ec:7a:e2:f2:a7:e4:d4:5b:a0:
                    05:e8:c1:a4:7d:84:89:ff:f9:73:32:7c:5c:fa:b5:
                    34:2a:2a:d9:b4:f5:2c:71:81:fe:9d:3f:65:19:15:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:4A:01:72:1B:6B:2A:7D:C3:6B:9D:17:55:58:B1:4B:54:27:54
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9939b63-1290-4b96-861f-f3ad02330997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:74:45:cf:f7:41:6e:3d:da:bd:76:dc:a8:69:b9:6b:f3:
         c9:f9:f9:25:1a:2e:3f:d1:af:44:9e:8f:a3:05:ff:cd:70:5c:
         9e:dd:72:cd:9e:ff:b1:72:fa:bc:c5:f8:8d:2d:cd:97:39:92:
         c9:5f:d7:6d:ea:4e:d3:c3:8b:b6:c8:c2:bd:17:56:23:b4:34:
         63:c4:f3:b0:e4:59:17:cd:ea:2d:85:b0:8d:78:28:ad:7a:07:
         de:e2:51:b5:4b:3d:03:0a:73:f2:b2:e8:7f:b6:d3:fc:88:5e:
         51:fa:cb:2a:5e:ed:ec:f7:1c:50:83:f6:1d:a9:47:63:c0:cb:
         d8:5c:73:bc:bd:d1:c0:02:65:36:ee:44:38:0e:bd:0a:ea:19:
         96:26:2c:b9:ea:23:02:42:7e:25:4d:c6:b0:41:ac:6f:4b:cc:
         b9:8a:50:80:c9:0e:0e:85:e2:61:71:92:df:2b:7a:5d:5f:a4:
         39:bb:41:c7:2a:d6:a7:80:fe:22:8e:0b:71:c0:3b:4f:60:04:
         a8:b5:53:77:ee:e4:39:b2:83:8f:d0:30:5d:8d:a9:7e:ec:f9:
         91:0e:f6:2b:35:fa:ed:a6:20:2d:4c:d0:41:2c:2a:fa:2c:ad:
         57:6d:80:74:d4:c7:64:48:e8:9d:69:47:6e:6d:63:4c:4d:0c:
         81:1a:e9:42
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURBYj1MscnZfDLHHxvmXH79z3tKowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIzMTI1WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NjYxNGI3ZDZiZDUyOTM3M2RlNDU2YTY5NTA2Njk1YTBm
MGI3NmVmYjMyNmZmZDg3ZjZmOGU0MTNmNGU0Y2EzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1gFzjy60Pcx3OmKBUJtlDihgicwC8dHB481oQhoN4sil4
w65BMeiDnIGF+OChwIPnIPp5BcxijxE9iz4GuQRHcvJY1M1R5KtdW23XRzapJwqP
EL7Ion5E2WVB1BC2a+t70BpnH1lel2eLwvEx1XnDyWPXvik1qbfqu3C+CpeDylgS
QLXu9iY/mw7KQ8xQWiW3MImbswtkjY1GZzAvity5Wkn2ikuMkNF7CeArcM2SJZaw
SIXKCYCXAhOe8jqu/NSNLPdBAybdnIVhIzzEANpjva/u9UEm7+x64vKn5NRboAXo
waR9hIn/+XMyfFz6tTQqKtm09Sxxgf6dP2UZFVHfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8StKAXIbayp9w2udF1VYsUtUJ1QwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Q5OTM5YjYzLTEyOTAtNGI5Ni04NjFmLWYzYWQwMjMzMDk5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEAkwDQYJKoZIhvcNAQELBQADggEBAHX0dEXP90FuPdq9dtyoablr
88n5+SUaLj/Rr0Sej6MF/81wXJ7dcs2e/7Fy+rzF+I0tzZc5kslf123qTtPDi7bI
wr0XViO0NGPE87DkWRfN6i2FsI14KK16B97iUbVLPQMKc/Ky6H+20/yIXlH6yype
7ez3HFCD9h2pR2PAy9hcc7y90cACZTbuRDgOvQrqGZYmLLnqIwJCfiVNxrBBrG9L
zLmKUIDJDg6F4mFxkt8rel1fpDm7Qccq1qeA/iKOC3HAO09gBKi1U3fu5Dmyg4/Q
MF2NqX7s+ZEO9is1+u2mIC1M0EEsKvosrVdtgHTUx2RI6J1pR25tY0xNDIEa6UI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:09 2026 by rpki-client