Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41da6bd0-c8bc-4d79-8a9e-8d7d60998d95.roa
File:                     41da6bd0-c8bc-4d79-8a9e-8d7d60998d95.roa (raw, json)
Hash identifier:          JLLHspyfzjRdKbR+EegvIlTBKHbVnoY+mdHpVbClVT8=
Subject key identifier:   C7:4F:DD:49:D1:83:F2:CF:72:70:12:EA:8D:27:4C:E0:FE:18:46:2E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B9FEFC3131599B70CAB1B6376E92D0A9B5CCC60
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41da6bd0-c8bc-4d79-8a9e-8d7d60998d95.roa
Signing time:             Fri 13 Feb 2026 07:50:09 +0000
ROA not before:           Fri 13 Feb 2026 07:50:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d40::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:ef:c3:13:15:99:b7:0c:ab:1b:63:76:e9:2d:0a:9b:5c:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:50:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=23c7290de585bf1dd738cc2871cea9774d94eb787c8eb58b49ea5b8208e25654, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:fd:9a:fa:99:3c:7e:bb:be:1b:f8:a2:30:
                    da:4b:30:3b:26:a7:56:61:6e:00:a8:e2:82:3e:86:
                    7f:b2:a0:70:5d:3e:01:48:19:07:be:12:4c:58:fc:
                    93:14:c5:c1:15:20:b7:90:41:50:e7:cb:b4:32:a9:
                    b4:93:d8:4f:bc:62:3f:a2:f6:92:7e:79:64:29:71:
                    a3:df:46:89:9d:4e:e3:31:a2:42:2b:99:fd:ce:b5:
                    f9:d6:68:5a:0c:82:f6:d8:3a:06:df:f6:6e:d6:71:
                    3e:da:24:d2:34:05:b2:b2:2c:ac:d4:69:46:a2:f0:
                    ba:44:e7:ea:1c:78:ca:ae:50:25:d1:27:19:cf:71:
                    62:09:de:a8:56:59:4d:93:32:be:8a:ae:dd:10:d5:
                    ec:25:79:e0:f7:b3:61:7d:c4:ae:76:2f:d5:62:cb:
                    99:8f:14:61:ad:69:df:55:37:76:a3:d3:7e:8b:57:
                    7c:12:b9:8a:36:56:1b:84:fb:a6:29:c2:b7:58:77:
                    a0:05:2d:21:87:2f:19:c8:14:e7:f0:df:4f:2e:8c:
                    8b:d6:9d:16:d4:7c:8b:ec:eb:65:7e:90:71:d4:d9:
                    c6:a7:67:fc:88:ed:a2:05:75:d5:02:f4:69:ad:55:
                    58:dc:c1:c2:89:e3:c2:99:5d:cf:90:f8:f1:49:9c:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4F:DD:49:D1:83:F2:CF:72:70:12:EA:8D:27:4C:E0:FE:18:46:2E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41da6bd0-c8bc-4d79-8a9e-8d7d60998d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d40::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:60:08:4d:67:99:d3:66:94:15:c2:44:3e:bf:c7:75:54:
         cd:e3:e6:49:46:b2:a5:29:01:5b:75:8b:52:11:d0:96:8d:6a:
         32:7c:aa:d7:ff:42:b3:2d:ee:dd:8b:01:71:a9:f6:9d:c4:4c:
         a1:53:16:f3:54:13:1b:0d:7b:15:09:f8:0d:5f:2b:53:33:ea:
         a4:ac:59:0b:d3:3a:30:61:3f:85:f4:2e:5a:40:91:2d:4d:78:
         bc:1c:90:a0:dc:2b:3b:86:c8:29:5e:e5:de:cb:02:b5:be:d5:
         99:87:f9:5e:96:ac:16:2c:fd:45:40:91:a3:72:8b:f6:7f:56:
         41:a6:db:ea:f4:a7:eb:eb:20:a2:77:35:2c:17:ea:ba:26:0a:
         ac:90:8e:be:9d:c7:4a:3e:a2:60:b2:0e:f5:c9:c0:65:57:31:
         f4:f9:f9:fb:fc:6c:22:87:e9:c0:2f:95:ae:29:2c:66:27:d7:
         b2:e1:6b:ad:d2:9d:9c:3a:53:fe:3b:2c:1f:34:58:3e:26:2a:
         d5:56:a3:c7:d1:f2:42:c0:da:5e:15:a4:48:a2:5d:a9:4c:3b:
         e7:3a:45:76:53:d9:5f:94:25:c8:b7:fa:b0:1e:03:ce:22:a0:
         6e:75:ef:d2:c6:98:1e:0c:f9:78:0a:39:7b:bc:a7:62:1d:45:
         fa:ad:61:94
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUC5/vwxMVmbcMqxtjduktCptczGAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDc1MDA5WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyM2M3MjkwZGU1ODViZjFkZDczOGNjMjg3MWNlYTk3NzRk
OTRlYjc4N2M4ZWI1OGI0OWVhNWI4MjA4ZTI1NjU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2M/2a+pk8fru+G/iiMNpLMDsmp1ZhbgCo4oI+hn+yoHBd
PgFIGQe+EkxY/JMUxcEVILeQQVDny7QyqbST2E+8Yj+i9pJ+eWQpcaPfRomdTuMx
okIrmf3OtfnWaFoMgvbYOgbf9m7WcT7aJNI0BbKyLKzUaUai8LpE5+oceMquUCXR
JxnPcWIJ3qhWWU2TMr6Krt0Q1ewleeD3s2F9xK52L9Viy5mPFGGtad9VN3aj036L
V3wSuYo2VhuE+6YpwrdYd6AFLSGHLxnIFOfw308ujIvWnRbUfIvs62V+kHHU2can
Z/yI7aIFddUC9GmtVVjcwcKJ48KZXc+Q+PFJnAJzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUx0/dSdGD8s9ycBLqjSdM4P4YRi4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQxZGE2YmQwLWM4YmMtNGQ3OS04YTllLThkN2Q2MDk5OGQ5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPUAwDQYJKoZIhvcNAQELBQADggEBAACMYAhNZ5nTZpQVwkQ+v8d1
VM3j5klGsqUpAVt1i1IR0JaNajJ8qtf/QrMt7t2LAXGp9p3ETKFTFvNUExsNexUJ
+A1fK1Mz6qSsWQvTOjBhP4X0LlpAkS1NeLwckKDcKzuGyCle5d7LArW+1ZmH+V6W
rBYs/UVAkaNyi/Z/VkGm2+r0p+vrIKJ3NSwX6romCqyQjr6dx0o+omCyDvXJwGVX
MfT5+fv8bCKH6cAvla4pLGYn17Lha63SnZw6U/47LB80WD4mKtVWo8fR8kLA2l4V
pEiiXalMO+c6RXZT2V+UJci3+rAeA84ioG5179LGmB4M+XgKOXu8p2IdRfqtYZQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:43:16 2026 by rpki-client