Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa
File:                     34cd602f-12d0-4f1e-8af2-9fef401af449.roa (raw, json)
Hash identifier:          tYw4pipOVEVjz08S16z9I5Ga4n2MmqFaynM7BkLL3nU=
Subject key identifier:   7E:66:CE:F4:2D:20:23:26:9E:F1:E5:8F:E5:A4:5F:48:30:E3:92:AE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01B82CDA189C8E3EAF57070B543D0E1B1712610B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa
Signing time:             Thu 12 Feb 2026 02:21:17 +0000
ROA not before:           Thu 12 Feb 2026 02:21:17 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fe6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b8:2c:da:18:9c:8e:3e:af:57:07:0b:54:3d:0e:1b:17:12:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:21:17 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=45d10f9eaa7e25281c42eed1c59dc69965d1edb83f7f24558f4b69d665712d05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:b1:95:3a:fe:66:f5:30:99:7a:5c:95:4f:
                    04:b8:c1:63:ca:f7:cd:eb:91:93:8f:fb:eb:dd:b4:
                    7f:2e:84:08:4c:15:04:fc:2a:c8:94:92:2e:f6:81:
                    5d:6f:36:53:05:db:60:e3:32:b7:e8:f9:60:26:ea:
                    be:e5:d1:46:11:a9:1a:6c:dd:33:1c:f3:9f:27:8d:
                    8d:d3:47:a2:c2:42:3d:88:b5:06:a5:78:19:b1:a1:
                    d2:00:06:f5:d6:dc:ac:55:da:d7:0b:8e:24:af:59:
                    06:9d:53:23:a3:7e:fd:f6:f1:bd:50:81:86:61:06:
                    be:12:f0:95:0e:1e:18:16:eb:89:4b:16:33:b3:41:
                    3c:62:4c:fa:5d:69:bb:ff:1e:14:37:16:19:15:83:
                    c3:b3:27:6d:c7:29:20:9d:ce:54:b0:3f:16:6c:1c:
                    2a:b1:8f:80:53:b3:38:51:36:81:25:61:c8:15:52:
                    d6:e2:5f:3d:03:65:77:72:13:c2:93:3f:ec:1a:a6:
                    88:7e:d3:1f:a0:91:b5:10:dc:13:c2:8a:2a:9e:df:
                    f4:aa:aa:6a:fa:42:f0:8b:a2:46:85:e1:5e:46:84:
                    94:c9:a5:8f:6c:c8:28:8f:34:8c:c7:64:67:d2:fc:
                    fa:6c:43:5e:53:06:0e:11:3a:6e:cb:f2:c1:8b:ad:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:CE:F4:2D:20:23:26:9E:F1:E5:8F:E5:A4:5F:48:30:E3:92:AE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34cd602f-12d0-4f1e-8af2-9fef401af449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fe6::/47

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:7c:d2:c0:62:4f:ec:92:81:cf:b0:6e:29:33:e7:c7:6d:
         bb:7a:3a:aa:c1:ee:f6:64:a8:3f:95:d3:10:ad:5f:cd:17:4e:
         c3:59:58:91:c7:d9:32:9d:1e:b6:79:89:c5:24:78:0b:00:45:
         ec:ab:0d:ec:98:e8:a0:98:11:54:24:22:7d:64:01:89:04:a0:
         03:40:92:bc:4f:70:ff:9f:07:73:22:9b:af:57:d3:92:72:73:
         22:c2:6e:44:b1:d0:d1:00:d9:32:b4:ab:2c:c4:a5:1b:d6:dd:
         7e:99:ea:75:4e:76:02:9a:ab:03:6b:e2:f7:d5:90:67:b5:d9:
         df:f0:59:a3:2f:79:e0:22:2d:4a:5c:98:6a:60:21:17:60:07:
         04:be:13:e0:c1:ec:16:4b:88:0c:38:bf:58:6d:cb:d4:6b:e4:
         05:b0:e7:ea:e9:8e:da:6a:4b:2f:11:74:9d:2b:3d:76:9f:87:
         10:45:21:7a:30:b0:cf:0b:d9:da:f2:cc:bb:e4:3c:f1:d3:b0:
         2f:87:73:d8:27:82:12:96:bc:66:51:df:f7:79:75:52:d3:57:
         46:cd:9b:90:44:de:95:9c:3d:3d:9d:ab:b4:8d:9d:25:58:c6:
         7c:70:dd:61:3e:c5:35:9b:35:35:47:60:f9:6b:b4:28:fb:f3:
         eb:6c:8f:28
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAbgs2hicjj6vVwcLVD0OGxcSYQswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDIyMTE3WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NWQxMGY5ZWFhN2UyNTI4MWM0MmVlZDFjNTlkYzY5OTY1
ZDFlZGI4M2Y3ZjI0NTU4ZjRiNjlkNjY1NzEyZDA1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCT+7GVOv5m9TCZelyVTwS4wWPK983rkZOP++vdtH8uhAhM
FQT8KsiUki72gV1vNlMF22DjMrfo+WAm6r7l0UYRqRps3TMc858njY3TR6LCQj2I
tQaleBmxodIABvXW3KxV2tcLjiSvWQadUyOjfv328b1QgYZhBr4S8JUOHhgW64lL
FjOzQTxiTPpdabv/HhQ3FhkVg8OzJ23HKSCdzlSwPxZsHCqxj4BTszhRNoElYcgV
UtbiXz0DZXdyE8KTP+wapoh+0x+gkbUQ3BPCiiqe3/Sqqmr6QvCLokaF4V5GhJTJ
pY9syCiPNIzHZGfS/PpsQ15TBg4ROm7L8sGLrZvjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUfmbO9C0gIyae8eWP5aRfSDDjkq4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM0Y2Q2MDJmLTEyZDAtNGYxZS04YWYyLTlmZWY0MDFhZjQ0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAL+YwDQYJKoZIhvcNAQELBQADggEBAHThfNLAYk/skoHPsG4pM+fH
bbt6OqrB7vZkqD+V0xCtX80XTsNZWJHH2TKdHrZ5icUkeAsAReyrDeyY6KCYEVQk
In1kAYkEoANAkrxPcP+fB3Mim69X05JycyLCbkSx0NEA2TK0qyzEpRvW3X6Z6nVO
dgKaqwNr4vfVkGe12d/wWaMveeAiLUpcmGpgIRdgBwS+E+DB7BZLiAw4v1hty9Rr
5AWw5+rpjtpqSy8RdJ0rPXafhxBFIXowsM8L2dryzLvkPPHTsC+Hc9gnghKWvGZR
3/d5dVLTV0bNm5BE3pWcPT2dq7SNnSVYxnxw3WE+xTWbNTVHYPlrtCj78+tsjyg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:52 2026 by rpki-client