Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa
File:                     100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json)
Hash identifier:          rYg5o9zs1ffd8uJnQQ1nXxVdq8NCff61YTYohRPGfA0=
Subject key identifier:   59:11:54:11:85:91:47:77:33:79:A7:13:E2:B8:D8:E5:F1:95:21:A8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       551501765995096E5EAB3D3C4536FDDD910473B3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa
Signing time:             Sat 28 Feb 2026 04:50:36 +0000
ROA not before:           Sat 28 Feb 2026 04:50:36 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:551a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:15:01:76:59:95:09:6e:5e:ab:3d:3c:45:36:fd:dd:91:04:73:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 28 04:50:36 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=00aa3bf63ab040f16827a8ba16ef646f26af91833d6fd67205a0e9492132ecdf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:8b:a2:2d:8b:47:fd:33:ed:d5:a2:cc:ef:
                    e7:10:98:f5:86:48:d1:47:ce:a0:42:9c:62:1f:f0:
                    06:be:3e:a6:4c:45:b9:37:99:14:af:5f:65:43:92:
                    54:c7:1a:c7:3d:c7:bc:ec:16:22:3f:1a:5e:64:77:
                    33:51:a1:77:7f:c1:45:8d:5e:1f:81:3d:49:d7:b7:
                    ee:ba:71:34:fd:52:32:f9:42:a5:8c:43:0b:91:89:
                    2b:0a:33:63:23:59:e1:fa:cc:c3:59:ec:50:9c:9c:
                    6d:91:6a:4f:28:fd:f0:fd:b0:6d:c1:5f:b4:12:9d:
                    58:e1:ae:8c:11:c3:65:99:3a:0e:9c:ec:54:57:2f:
                    4f:01:c2:62:4c:11:c1:ff:71:cd:9c:93:9c:3e:30:
                    7d:72:05:a1:f5:df:a9:d8:0e:41:4a:07:2e:e7:56:
                    aa:76:9f:c9:96:83:a6:3c:e3:89:40:2a:5e:0d:39:
                    65:bb:e8:ec:a6:52:c2:d3:99:e3:b9:77:79:41:7a:
                    02:ed:3f:dc:87:4d:82:11:c9:e3:c2:28:1c:81:75:
                    3b:26:29:19:9f:29:80:7b:91:9d:4d:05:a8:92:77:
                    33:d5:65:9a:b0:a8:e0:8a:fb:21:a6:e8:2b:e4:a8:
                    da:f9:4a:dd:9e:07:b5:64:c0:51:86:f5:a3:32:fc:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:11:54:11:85:91:47:77:33:79:A7:13:E2:B8:D8:E5:F1:95:21:A8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551a::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:89:b1:51:3c:93:b1:66:ee:94:f2:8d:bd:6c:ff:98:57:bc:
         b8:7a:6c:c6:46:28:81:d5:8c:77:50:ef:55:c7:13:71:c3:50:
         ac:4b:9d:31:9c:43:01:6c:fa:5e:81:94:d8:4b:a1:93:3d:0e:
         a8:0c:04:11:c6:93:2e:b4:9a:cb:c7:4b:d7:75:bc:95:6e:6c:
         a2:97:98:72:88:7f:26:64:6c:4e:94:85:e8:8e:0c:d0:86:6d:
         23:75:c3:0d:b7:ab:0a:ad:93:f7:c3:b0:f7:2c:86:43:bd:b3:
         35:83:24:04:f6:46:f9:1e:ab:27:06:7f:0a:d7:74:f5:cd:25:
         ca:e9:99:1f:06:16:b8:b7:eb:a6:1a:eb:45:bc:9e:34:1b:6a:
         a8:58:81:8c:ef:20:13:92:87:e5:93:d1:9d:19:c1:05:79:79:
         34:f4:4f:41:61:de:27:6b:53:f0:20:85:f3:b5:80:19:63:38:
         92:e2:c3:33:13:76:05:3d:86:2b:ea:dd:e9:d1:9d:6a:28:42:
         97:9b:fc:21:ea:09:c1:50:6d:d2:6b:b5:a3:c8:e1:a8:f7:19:
         4a:cb:32:3d:ea:9b:e3:53:3a:8c:c3:fa:b8:91:1f:c0:33:63:
         f6:9d:84:1b:96:00:62:a2:96:28:2d:81:ec:cf:cf:18:cb:8a:
         b0:74:6e:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVRUBdlmVCW5eqz08RTb93ZEEc7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDQ1MDM2WhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMGFhM2JmNjNhYjA0MGYxNjgyN2E4YmExNmVmNjQ2ZjI2
YWY5MTgzM2Q2ZmQ2NzIwNWEwZTk0OTIxMzJlY2RmMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa2IuiLYtH/TPt1aLM7+cQmPWGSNFHzqBCnGIf8Aa+PqZM
Rbk3mRSvX2VDklTHGsc9x7zsFiI/Gl5kdzNRoXd/wUWNXh+BPUnXt+66cTT9UjL5
QqWMQwuRiSsKM2MjWeH6zMNZ7FCcnG2Rak8o/fD9sG3BX7QSnVjhrowRw2WZOg6c
7FRXL08BwmJMEcH/cc2ck5w+MH1yBaH136nYDkFKBy7nVqp2n8mWg6Y844lAKl4N
OWW76OymUsLTmeO5d3lBegLtP9yHTYIRyePCKByBdTsmKRmfKYB7kZ1NBaiSdzPV
ZZqwqOCK+yGm6CvkqNr5St2eB7VkwFGG9aMy/DJPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWRFUEYWRR3czeacT4rjY5fGVIagwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBACiJsVE8k7Fm7pTyjb1s/5hX
vLh6bMZGKIHVjHdQ71XHE3HDUKxLnTGcQwFs+l6BlNhLoZM9DqgMBBHGky60msvH
S9d1vJVubKKXmHKIfyZkbE6UheiODNCGbSN1ww23qwqtk/fDsPcshkO9szWDJAT2
RvkeqycGfwrXdPXNJcrpmR8GFri366Ya60W8njQbaqhYgYzvIBOSh+WT0Z0ZwQV5
eTT0T0Fh3idrU/AghfO1gBljOJLiwzMTdgU9hivq3enRnWooQpeb/CHqCcFQbdJr
taPI4aj3GUrLMj3qm+NTOozD+riRH8AzY/adhBuWAGKiligtgezPzxjLirB0biM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:32 2026 by rpki-client