Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42adbca4-4fa6-4469-90f3-9260fdc74e2b.roa
File:                     42adbca4-4fa6-4469-90f3-9260fdc74e2b.roa (raw, json)
Hash identifier:          WMWitQJGXyWJwbcwgPKsYkl2YKlTh3ntW0h5OExgHCs=
Subject key identifier:   68:0E:A7:13:66:A0:1C:27:4D:1A:3A:9C:23:20:A5:04:17:F1:68:98
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       177D98B2C0B7C392C9FBC62E8C8BB9F538691361
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42adbca4-4fa6-4469-90f3-9260fdc74e2b.roa
Signing time:             Fri 13 Feb 2026 08:50:12 +0000
ROA not before:           Fri 13 Feb 2026 08:50:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ee0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7d:98:b2:c0:b7:c3:92:c9:fb:c6:2e:8c:8b:b9:f5:38:69:13:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:50:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0b0dcdf7699fc66a1dd821ce2462df69cf9124cfe2154af7f8012aaed49d9548, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:1b:12:62:36:88:6b:4a:b5:34:b7:43:16:
                    32:67:b8:ee:df:ee:92:3d:ec:f1:82:33:89:72:73:
                    a1:cb:81:41:b4:69:24:e5:63:a2:c5:74:b8:fc:ec:
                    c8:a9:ab:d4:4f:57:2a:7d:3e:ab:9c:44:84:e7:b7:
                    31:ec:33:fe:16:bc:31:f3:ca:da:96:93:46:f5:57:
                    54:30:9e:de:93:09:55:86:6f:86:ec:08:b0:56:49:
                    3c:df:d3:d7:a6:af:ea:8b:3a:f8:95:a0:1d:68:a8:
                    2a:7f:2a:36:78:d1:cf:90:46:3c:10:1d:8c:fb:34:
                    0c:43:aa:bb:51:46:2c:27:2a:80:28:0f:87:ec:9c:
                    0e:1f:a3:de:e3:e2:a4:04:ab:2f:e6:30:14:33:19:
                    60:95:3c:2a:f2:fd:e3:96:52:ff:de:49:39:91:8d:
                    2d:f4:8b:0c:c4:70:3a:a1:bd:ee:60:e9:a4:2a:82:
                    bb:e3:6e:90:dd:2c:ef:45:8a:84:5c:f0:c0:fc:a8:
                    3f:b8:43:55:d8:e6:17:68:63:03:c6:61:29:95:d8:
                    5f:a1:a9:5e:45:db:77:46:4c:ce:b7:56:78:57:5f:
                    12:1c:1b:43:38:fa:0c:20:6a:0f:5f:4d:ac:45:74:
                    95:fd:cb:94:c9:a4:87:d8:d9:4b:8b:f9:eb:3c:59:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:A7:13:66:A0:1C:27:4D:1A:3A:9C:23:20:A5:04:17:F1:68:98
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42adbca4-4fa6-4469-90f3-9260fdc74e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ee0::/46

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:fc:56:aa:d6:1a:21:0e:0c:29:60:62:37:f7:fc:b7:d1:
         9c:14:07:85:b8:3c:f4:df:5e:f3:27:f8:33:3c:6a:99:60:a6:
         39:e5:95:3e:8b:d1:4b:d0:7b:9e:de:cf:f9:09:16:0b:f4:46:
         ac:0b:76:58:63:eb:e5:ed:d9:32:bd:61:d7:17:a9:ae:a3:bf:
         3f:bd:7d:34:08:fb:2c:4a:a0:13:ac:bb:1c:24:1c:9a:45:f3:
         a4:0c:ea:db:34:d0:65:cd:a5:f6:f7:81:57:ee:7e:fc:94:8a:
         ec:ef:c2:47:15:d8:e1:25:2d:8f:dd:a3:54:ce:ae:e4:28:05:
         92:be:5f:91:d5:23:ce:90:a0:27:8d:2a:76:78:52:5b:4b:49:
         1b:d5:b1:0a:51:e4:e2:61:b3:a2:09:11:16:fc:8b:89:52:13:
         4c:7a:0e:ab:b0:4d:ad:5d:74:da:2e:3f:1f:cc:b8:ec:62:a4:
         47:c1:04:e8:d3:9b:04:e1:a9:90:b4:78:25:7d:60:ce:31:d5:
         9d:22:00:2a:99:fc:df:fa:2d:7a:1a:e9:f9:b0:b8:ab:4e:08:
         63:2f:77:46:a1:fb:69:bd:5e:b7:6f:8a:4e:62:98:9c:c0:9a:
         7b:3c:d0:c6:82:22:b3:e0:82:bc:e9:79:9a:b0:23:b3:93:9f:
         d0:47:cc:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF32YssC3w5LJ+8YujIu59ThpE2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDg1MDEyWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjBkY2RmNzY5OWZjNjZhMWRkODIxY2UyNDYyZGY2OWNm
OTEyNGNmZTIxNTRhZjdmODAxMmFhZWQ0OWQ5NTQ4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6XxsSYjaIa0q1NLdDFjJnuO7f7pI97PGCM4lyc6HLgUG0
aSTlY6LFdLj87Mipq9RPVyp9PqucRITntzHsM/4WvDHzytqWk0b1V1Qwnt6TCVWG
b4bsCLBWSTzf09emr+qLOviVoB1oqCp/KjZ40c+QRjwQHYz7NAxDqrtRRiwnKoAo
D4fsnA4fo97j4qQEqy/mMBQzGWCVPCry/eOWUv/eSTmRjS30iwzEcDqhve5g6aQq
grvjbpDdLO9FioRc8MD8qD+4Q1XY5hdoYwPGYSmV2F+hqV5F23dGTM63VnhXXxIc
G0M4+gwgag9fTaxFdJX9y5TJpIfY2UuL+es8WRJlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUaA6nE2agHCdNGjqcIyClBBfxaJgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQyYWRiY2E0LTRmYTYtNDQ2OS05MGYzLTkyNjBmZGM3NGUyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPuAwDQYJKoZIhvcNAQELBQADggEBAD7q/Faq1hohDgwpYGI39/y3
0ZwUB4W4PPTfXvMn+DM8aplgpjnllT6L0UvQe57ez/kJFgv0RqwLdlhj6+Xt2TK9
YdcXqa6jvz+9fTQI+yxKoBOsuxwkHJpF86QM6ts00GXNpfb3gVfufvyUiuzvwkcV
2OElLY/do1TOruQoBZK+X5HVI86QoCeNKnZ4UltLSRvVsQpR5OJhs6IJERb8i4lS
E0x6DquwTa1ddNouPx/MuOxipEfBBOjTmwThqZC0eCV9YM4x1Z0iACqZ/N/6LXoa
6fmwuKtOCGMvd0ah+2m9Xrdvik5imJzAmns80MaCIrPggrzpeZqwI7OTn9BHzBk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:49:36 2026 by rpki-client