Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f27c739f-dd28-419b-bc73-bcdab437f4b7.roa
File:                     f27c739f-dd28-419b-bc73-bcdab437f4b7.roa (raw, json)
Hash identifier:          ZAjWhol+cA1XXteVdHMBixfEXx6AOQn2SaSw6ufioW4=
Subject key identifier:   74:89:66:C7:13:FB:B0:9A:D1:7B:00:20:7A:AF:EF:89:5C:A0:67:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1F938975E5A7ECE3B1AE10DE4E913F3CA1AF23C7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f27c739f-dd28-419b-bc73-bcdab437f4b7.roa
Signing time:             Fri 03 Apr 2026 02:21:51 +0000
ROA not before:           Fri 03 Apr 2026 02:21:51 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:93:89:75:e5:a7:ec:e3:b1:ae:10:de:4e:91:3f:3c:a1:af:23:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 02:21:51 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=935806d908c37ceb064f78940dc94d33e83f6e706421a7f45c7e3efeca2b20d3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:f0:4c:38:80:e9:0a:1d:e6:08:ca:df:1e:
                    7b:b3:d2:15:e2:29:de:ef:05:77:99:c2:e5:4c:a3:
                    46:c1:ea:aa:e7:1b:c7:ab:8a:90:bd:88:13:f1:96:
                    6d:48:16:7f:b3:2b:a0:a0:10:fb:74:10:88:45:53:
                    54:9c:0f:40:5c:d7:f0:6f:52:31:1e:5e:94:eb:61:
                    f1:b5:bb:13:b2:8f:f4:92:c0:d0:4f:0d:74:6a:2e:
                    2a:1f:64:83:b3:f0:2e:dc:8c:06:4b:60:19:5b:1d:
                    81:99:71:43:ee:eb:cd:0b:b7:3a:2a:76:e4:de:6d:
                    79:ee:af:23:30:d8:26:b7:b1:18:27:3c:85:90:76:
                    37:fa:be:1d:b6:9a:48:79:bd:0f:6e:a2:8d:1b:fa:
                    6c:9d:9f:f0:35:da:35:71:68:68:33:6a:60:9e:cd:
                    46:38:0f:b3:d9:5c:ed:56:6e:d5:fc:fe:7d:3c:9e:
                    71:ec:f6:81:1a:8a:ed:40:87:fa:f5:f2:4a:ca:ee:
                    17:d1:6a:1a:92:56:9e:9a:8e:e4:39:91:40:ac:7e:
                    6d:a2:45:a9:e2:8c:dc:60:84:c2:95:a0:52:07:98:
                    84:25:ac:d1:72:27:85:74:41:d5:94:83:ce:6a:09:
                    fd:d4:01:b1:14:79:9c:d4:11:c5:c1:0e:8d:d5:fd:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:66:C7:13:FB:B0:9A:D1:7B:00:20:7A:AF:EF:89:5C:A0:67:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f27c739f-dd28-419b-bc73-bcdab437f4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11ce::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:36:5e:32:f9:fb:0b:3a:3c:48:94:1e:37:85:56:a6:d2:15:
         aa:f4:0e:70:78:49:1e:77:4e:a8:51:a7:d0:0f:d9:56:1c:0c:
         60:38:47:1e:32:6a:7c:d8:f3:0f:5d:7b:fd:3b:12:8d:18:47:
         5c:10:a7:08:eb:8a:9d:22:62:94:ff:2b:95:43:d5:0f:03:23:
         89:31:e1:07:2c:76:df:07:80:25:40:2b:51:8d:a3:9d:79:97:
         50:98:2b:35:8c:9d:7c:8a:73:2a:9b:a9:50:67:71:fb:df:80:
         f5:dd:19:f1:9f:db:97:be:8c:d1:42:cc:4c:42:da:37:d8:11:
         1e:ad:5b:7a:b5:4d:03:f9:18:89:b2:93:d7:e6:aa:b1:24:52:
         08:de:d6:85:70:9a:44:f5:ec:09:5a:db:4d:5a:6a:1d:6e:08:
         d2:60:64:8f:ef:33:ac:5e:80:ff:87:70:55:94:9e:37:79:6e:
         98:1e:22:42:7a:78:0f:c0:46:82:f3:2d:9b:73:26:42:3b:a5:
         55:90:97:cd:6a:c3:53:51:83:5c:77:55:c8:cb:e4:59:69:b6:
         9e:20:be:49:79:28:65:e8:e1:78:b4:19:93:b3:d8:b3:68:65:
         b1:ce:45:c1:49:58:b8:ba:d6:9e:51:e1:41:71:10:d7:65:b0:
         9c:e0:35:73
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUH5OJdeWn7OOxrhDeTpE/PKGvI8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIyMTUxWhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MzU4MDZkOTA4YzM3Y2ViMDY0Zjc4OTQwZGM5NGQzM2U4
M2Y2ZTcwNjQyMWE3ZjQ1YzdlM2VmZWNhMmIyMGQzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBe/BMOIDpCh3mCMrfHnuz0hXiKd7vBXeZwuVMo0bB6qrn
G8eripC9iBPxlm1IFn+zK6CgEPt0EIhFU1ScD0Bc1/BvUjEeXpTrYfG1uxOyj/SS
wNBPDXRqLiofZIOz8C7cjAZLYBlbHYGZcUPu680LtzoqduTebXnuryMw2Ca3sRgn
PIWQdjf6vh22mkh5vQ9uoo0b+mydn/A12jVxaGgzamCezUY4D7PZXO1WbtX8/n08
nnHs9oEaiu1Ah/r18krK7hfRahqSVp6ajuQ5kUCsfm2iRanijNxghMKVoFIHmIQl
rNFyJ4V0QdWUg85qCf3UAbEUeZzUEcXBDo3V/e4HAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdIlmxxP7sJrRewAgeq/viVygZ2EwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YyN2M3MzlmLWRkMjgtNDE5Yi1iYzczLWJjZGFiNDM3ZjRiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEc4wDQYJKoZIhvcNAQELBQADggEBAJE2XjL5+ws6PEiUHjeFVqbS
Far0DnB4SR53TqhRp9AP2VYcDGA4Rx4yanzY8w9de/07Eo0YR1wQpwjrip0iYpT/
K5VD1Q8DI4kx4Qcsdt8HgCVAK1GNo515l1CYKzWMnXyKcyqbqVBncfvfgPXdGfGf
25e+jNFCzExC2jfYER6tW3q1TQP5GImyk9fmqrEkUgje1oVwmkT17Ala201aah1u
CNJgZI/vM6xegP+HcFWUnjd5bpgeIkJ6eA/ARoLzLZtzJkI7pVWQl81qw1NRg1x3
VcjL5Flptp4gvkl5KGXo4Xi0GZOz2LNoZbHORcFJWLi61p5R4UFxENdlsJzgNXM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:54 2026 by rpki-client