Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
File:                     e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json)
Hash identifier:          ql91OlF88PUjXK1+zPN35LRoOUOBu3QtxNWERfWPaYU=
Subject key identifier:   87:42:D4:FD:B6:1F:A2:4F:1D:C9:B5:77:92:E6:5C:EF:D3:62:2C:69
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       62403AC61DF095761638D022C24DD70CA3674830
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
Signing time:             Wed 25 Feb 2026 00:00:40 +0000
ROA not before:           Wed 25 Feb 2026 00:00:40 +0000
ROA not after:            Tue 26 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:40:3a:c6:1d:f0:95:76:16:38:d0:22:c2:4d:d7:0c:a3:67:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Feb 25 00:00:40 2026 GMT
            Not After : May 26 23:59:59 2026 GMT
        Subject: serialNumber=caab36c0d239a22b95ceb00b023d61f6999671fad4e86b5a49c8254df3052645, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:19:db:7d:d4:31:54:3c:aa:b4:c3:af:91:
                    fb:b5:87:6e:62:9a:80:59:33:26:e7:70:e5:4b:72:
                    ee:d9:e4:64:65:cb:85:74:19:24:dd:9a:58:5f:31:
                    58:c3:e3:57:0a:ac:b7:98:d8:f7:bf:ed:88:df:8d:
                    45:f4:48:e7:46:8e:89:1f:16:dd:a4:39:e8:44:93:
                    fa:43:21:eb:3c:3c:46:3d:21:61:4e:f3:ad:87:fe:
                    7d:f5:6c:31:90:58:dc:e0:af:bc:f0:9c:e3:44:ce:
                    a8:d7:7e:c2:d6:ff:ed:ad:3e:b0:28:b4:97:dd:b9:
                    72:65:f0:8d:c9:09:3c:5f:4d:28:df:c8:a5:7e:6f:
                    56:9c:03:68:58:20:2d:19:18:a9:00:2f:91:7e:dc:
                    25:cd:7f:b4:b0:82:34:00:4c:61:bc:4b:d4:8f:70:
                    3b:5a:a6:f1:ea:53:ef:3f:24:67:d4:87:15:ab:de:
                    ac:88:f3:5d:b6:3d:96:4d:8f:13:98:49:91:3c:65:
                    a0:4c:fe:c9:ed:65:f9:23:e9:96:10:fe:d8:9e:e3:
                    ab:94:3a:38:98:ea:1d:c9:63:23:07:f8:04:f2:8a:
                    a9:5e:15:9f:74:1e:32:66:78:80:d7:de:49:e3:ae:
                    e1:3b:31:98:a6:46:be:23:ce:10:5e:7a:0b:1a:60:
                    69:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:D4:FD:B6:1F:A2:4F:1D:C9:B5:77:92:E6:5C:EF:D3:62:2C:69
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:d9:3e:16:d6:0c:2c:9f:eb:dd:a2:f9:18:92:35:6f:ae:
         33:71:9f:80:87:bf:f4:40:cd:69:e6:cc:3b:89:c9:be:c6:a2:
         90:4c:86:90:58:5d:e5:ab:54:3f:52:84:80:70:02:e6:0f:d8:
         75:61:d6:14:cf:d3:5e:2a:5a:82:bc:4d:02:34:81:bc:a5:7d:
         03:57:37:da:a7:bb:91:f3:8d:f5:70:54:58:5d:5c:9b:d3:57:
         fc:f3:26:a8:0b:92:89:5a:32:c7:3c:a9:2e:7c:c6:a2:a9:0d:
         d5:84:58:81:57:26:8e:25:25:ec:e8:5a:99:91:f8:72:f3:dd:
         87:01:ce:b4:3b:e0:80:d5:ff:c2:5c:d6:6e:5e:15:20:e7:30:
         04:ca:b2:cd:7f:b5:f6:30:22:96:b0:21:10:f8:2b:cd:4c:4d:
         ec:ae:89:28:45:7f:56:f4:a6:83:07:72:e4:74:3c:17:a7:f0:
         7e:8f:bb:3e:81:64:91:89:79:a2:cc:11:52:7b:2c:c0:9d:4e:
         7c:f4:06:55:5a:5a:c9:0b:f5:d8:b4:2e:bc:81:50:5a:c2:fa:
         4d:04:44:2e:0f:7c:1a:e3:76:c7:4d:6e:49:cd:80:a7:3c:a8:
         26:fd:e3:a8:bf:8f:77:49:dd:e6:c8:d9:71:a1:e7:d6:ad:16:
         6b:d6:16:53
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYkA6xh3wlXYWONAiwk3XDKNnSDAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy
MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwMjI1MDAwMDQwWhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWFiMzZjMGQyMzlhMjJiOTVjZWIwMGIwMjNkNjFmNjk5
OTY3MWZhZDRlODZiNWE0OWM4MjU0ZGYzMDUyNjQ1MS0wKwYDVQQDEyQ3MWMzODc2
ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb1RnbfdQxVDyqtMOvkfu1h25imoBZMybncOVLcu7Z5GRl
y4V0GSTdmlhfMVjD41cKrLeY2Pe/7YjfjUX0SOdGjokfFt2kOehEk/pDIes8PEY9
IWFO862H/n31bDGQWNzgr7zwnONEzqjXfsLW/+2tPrAotJfduXJl8I3JCTxfTSjf
yKV+b1acA2hYIC0ZGKkAL5F+3CXNf7SwgjQATGG8S9SPcDtapvHqU+8/JGfUhxWr
3qyI8122PZZNjxOYSZE8ZaBM/sntZfkj6ZYQ/tie46uUOjiY6h3JYyMH+ATyiqle
FZ90HjJmeIDX3knjruE7MZimRr4jzhBeegsaYGmvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh0LU/bYfok8dybV3kuZc79NiLGkwHwYDVR0jBBgwFoAU/iLg9yLMTwYM
WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y
MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3
ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4
NmYwYjE1OTRjL2UzYzg0NmIxLWZiMDAtNGNiNy04MjNkLTNhNThiZWRkNjY1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm
LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO4qbAwDQYJKoZIhvcNAQELBQADggEBAHMv2T4W1gwsn+vdovkYkjVvrjNx
n4CHv/RAzWnmzDuJyb7GopBMhpBYXeWrVD9ShIBwAuYP2HVh1hTP014qWoK8TQI0
gbylfQNXN9qnu5HzjfVwVFhdXJvTV/zzJqgLkolaMsc8qS58xqKpDdWEWIFXJo4l
JezoWpmR+HLz3YcBzrQ74IDV/8Jc1m5eFSDnMATKss1/tfYwIpawIRD4K81MTeyu
iShFf1b0poMHcuR0PBen8H6Puz6BZJGJeaLMEVJ7LMCdTnz0BlVaWskL9di0LryB
UFrC+k0ERC4PfBrjdsdNbknNgKc8qCb946i/j3dJ3ebI2XGh59atFmvWFlM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:58 2026 by rpki-client