Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a4ff76c-2e8b-4bb4-af5b-093dec905ee6.roa
File:                     3a4ff76c-2e8b-4bb4-af5b-093dec905ee6.roa (raw, json)
Hash identifier:          d5bfJIDpaPryAMuTEk/h6ge8zEipEmB4gGL8XPEmsKY=
Subject key identifier:   E1:0A:72:03:17:6E:6F:CE:8C:CB:4A:F9:D6:31:AE:6A:FA:64:DD:73
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6F848F456EDE1E91613AC220FB876AF1863CA3B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a4ff76c-2e8b-4bb4-af5b-093dec905ee6.roa
Signing time:             Fri 13 Feb 2026 07:20:52 +0000
ROA not before:           Fri 13 Feb 2026 07:20:52 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d3e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:84:8f:45:6e:de:1e:91:61:3a:c2:20:fb:87:6a:f1:86:3c:a3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:20:52 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=40bbe6d449f5cbffead63389063ff6c2f7b1abfc90030989e54ffbec88b1ac27, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:e0:cb:ec:f9:a1:94:84:08:fb:7f:9d:0e:
                    09:91:e7:28:df:bd:6d:31:ac:01:f0:f7:3c:86:ea:
                    9e:d4:23:38:23:e2:da:99:3b:46:f8:a3:8f:1f:14:
                    64:1a:ab:50:d2:bb:33:f1:65:8c:d9:83:8a:fa:2c:
                    b5:3b:f2:a4:c5:5a:f9:9c:12:85:ed:ea:49:b8:be:
                    01:09:66:ca:77:df:e4:7c:a6:2e:4c:99:4c:47:a2:
                    dd:7e:0b:83:3d:29:87:80:36:c6:0d:dd:45:b2:e7:
                    78:21:dc:11:cb:3f:87:dd:e5:06:ed:7e:f2:55:ce:
                    60:31:45:e6:b2:f7:79:67:ba:e8:33:7b:ce:3b:85:
                    d5:3c:33:4c:17:bb:3e:7e:a2:34:f1:02:33:7b:3d:
                    9f:79:0d:05:67:ca:86:e0:dd:c9:21:a7:60:62:d5:
                    e3:5d:b2:d5:9a:a9:22:47:55:6c:8f:f8:33:3e:20:
                    78:41:e3:3f:47:9f:3d:06:4a:83:55:1b:a5:87:01:
                    d8:0f:c8:d7:97:78:44:f7:88:0c:13:91:ff:9a:e7:
                    0d:55:23:bf:95:42:a5:de:8b:fa:25:64:bb:5f:ff:
                    7e:42:3d:eb:97:c8:57:59:58:2b:26:39:c3:c3:97:
                    75:54:1c:ae:50:a3:fa:3e:ab:70:69:cb:d2:f3:f6:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0A:72:03:17:6E:6F:CE:8C:CB:4A:F9:D6:31:AE:6A:FA:64:DD:73
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a4ff76c-2e8b-4bb4-af5b-093dec905ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d3e::/47

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:fb:42:ed:5a:e8:ba:38:96:db:a7:f0:67:12:d7:cb:6c:
         ea:19:4a:f9:41:a7:fb:01:f6:a1:9e:39:91:25:ff:27:e6:b4:
         f2:13:b4:cf:68:5a:b0:25:6d:c6:93:57:f4:76:5a:cc:a1:7e:
         93:94:76:b6:4f:34:2d:b5:1b:c4:60:d3:55:d5:a4:dc:c6:30:
         0c:81:18:18:5a:ef:be:8f:0a:9f:b5:72:de:a2:8f:8e:f8:4a:
         bf:b2:70:e9:7a:fc:6c:e4:8d:92:6d:0c:57:70:5e:9b:47:6b:
         b0:85:c1:71:ae:3f:91:47:40:13:42:48:94:60:aa:01:1f:e4:
         54:63:a8:c5:4a:9f:71:d0:26:21:7d:55:e9:db:bf:70:41:48:
         45:29:b2:f7:8d:bb:e3:81:d5:f4:b6:f7:50:fb:a2:d5:d0:8f:
         0e:88:4a:31:28:aa:e7:a9:62:74:52:86:b4:f9:4d:08:d9:08:
         87:1d:68:23:e3:67:2f:fc:53:33:0f:2b:a9:f0:ae:6b:98:d1:
         40:e0:47:10:36:bb:b3:08:7a:1f:53:62:64:1b:92:21:60:51:
         d2:06:b1:8d:7d:0f:1b:13:0c:c5:78:29:5d:38:4e:2c:a1:03:
         93:f6:fe:79:75:ef:34:24:9c:0f:3e:3e:a2:3c:44:5a:d9:cb:
         dc:33:d5:d0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUb4SPRW7eHpFhOsIg+4dq8YY8o7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDcyMDUyWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MGJiZTZkNDQ5ZjVjYmZmZWFkNjMzODkwNjNmZjZjMmY3
YjFhYmZjOTAwMzA5ODllNTRmZmJlYzg4YjFhYzI3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDETODL7PmhlIQI+3+dDgmR5yjfvW0xrAHw9zyG6p7UIzgj
4tqZO0b4o48fFGQaq1DSuzPxZYzZg4r6LLU78qTFWvmcEoXt6km4vgEJZsp33+R8
pi5MmUxHot1+C4M9KYeANsYN3UWy53gh3BHLP4fd5QbtfvJVzmAxReay93lnuugz
e847hdU8M0wXuz5+ojTxAjN7PZ95DQVnyobg3ckhp2Bi1eNdstWaqSJHVWyP+DM+
IHhB4z9Hnz0GSoNVG6WHAdgPyNeXeET3iAwTkf+a5w1VI7+VQqXei/olZLtf/35C
PeuXyFdZWCsmOcPDl3VUHK5Qo/o+q3Bpy9Lz9m6FAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4QpyAxdub86My0r51jGuavpk3XMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNhNGZmNzZjLTJlOGItNGJiNC1hZjViLTA5M2RlYzkwNWVlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPT4wDQYJKoZIhvcNAQELBQADggEBAFf7+0LtWui6OJbbp/BnEtfL
bOoZSvlBp/sB9qGeOZEl/yfmtPITtM9oWrAlbcaTV/R2WsyhfpOUdrZPNC21G8Rg
01XVpNzGMAyBGBha776PCp+1ct6ij474Sr+ycOl6/GzkjZJtDFdwXptHa7CFwXGu
P5FHQBNCSJRgqgEf5FRjqMVKn3HQJiF9Venbv3BBSEUpsveNu+OB1fS291D7otXQ
jw6ISjEoquepYnRShrT5TQjZCIcdaCPjZy/8UzMPK6nwrmuY0UDgRxA2u7MIeh9T
YmQbkiFgUdIGsY19DxsTDMV4KV04TiyhA5P2/nl17zQknA8+PqI8RFrZy9wz1dA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:04 2026 by rpki-client