Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa
File:                     430b234d-b1a6-42f0-a875-b1440b539ec4.roa (raw, json)
Hash identifier:          1E+szNk3q53alsHsaxlhSLFwylxEJWhupXlDCVryIAA=
Subject key identifier:   F8:D7:15:EE:50:1A:00:A1:2B:EF:F8:C5:F1:FB:FD:8F:BD:5C:4F:2B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       713E828D25AEE59E109957EC9E7543912A029167
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa
Signing time:             Fri 13 Feb 2026 13:52:01 +0000
ROA not before:           Fri 13 Feb 2026 13:52:01 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:393e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3e:82:8d:25:ae:e5:9e:10:99:57:ec:9e:75:43:91:2a:02:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:52:01 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8a0f20b8097e5bb2bdf5425462397a3b6a197ff605f3a28726a3f93f0ce0fd67, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:78:dc:b8:13:62:c0:b0:06:eb:56:f8:96:
                    96:6d:32:38:b8:7a:a0:00:a6:9d:e1:6d:f1:33:5b:
                    ec:59:60:c3:9f:b3:03:de:3c:ed:1e:8f:2a:4d:01:
                    9e:18:01:60:2d:99:ed:58:8f:3b:f3:84:ce:6f:d5:
                    59:96:98:c0:e4:6a:a2:c9:bd:de:63:98:9f:cf:1a:
                    a9:60:6e:ec:43:b1:e3:26:91:79:1b:01:0d:1a:2c:
                    ab:15:a3:34:53:08:94:ff:6c:75:7c:01:f1:7b:a5:
                    66:2c:1f:83:b6:eb:5c:8c:8e:15:c3:ab:79:66:8b:
                    ff:50:3d:c7:f8:f1:0f:49:fd:c2:53:8f:b5:66:34:
                    41:ae:71:6e:8b:a9:0c:bf:f1:8b:0e:0f:48:15:43:
                    b2:3d:37:f4:51:9d:8a:41:57:12:9d:a3:ad:eb:b6:
                    e0:97:8e:cc:93:5d:f1:41:99:e6:91:db:ff:d5:78:
                    ee:95:fb:07:a9:34:ac:8a:d6:1d:31:f1:61:83:09:
                    d7:88:8c:20:5c:6d:d4:a0:39:d6:c4:03:75:41:e1:
                    1e:2e:94:f1:be:39:f4:a5:91:95:6f:bb:13:6b:5b:
                    2c:7d:20:a8:90:3a:ec:32:7f:ad:0c:ad:f7:dc:2b:
                    95:d0:d4:c6:dc:b3:96:3b:f1:c7:77:32:cd:b3:2f:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D7:15:EE:50:1A:00:A1:2B:EF:F8:C5:F1:FB:FD:8F:BD:5C:4F:2B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:393e::/47

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:e3:db:ab:8d:77:77:8c:1c:85:df:48:d7:6d:12:32:96:
         10:33:5f:71:5e:f7:81:4a:d8:06:fb:ff:37:1f:83:61:af:29:
         40:5c:7d:da:a9:e1:2a:a8:97:00:97:a9:14:12:f9:de:3d:ee:
         65:54:95:6a:27:aa:b9:20:ec:04:86:bd:0e:f3:3b:12:64:78:
         2d:0e:53:d6:60:d8:b4:09:72:ef:8e:d2:05:5c:ef:d4:bb:e8:
         95:2b:91:58:5e:60:6a:d6:03:87:f4:7a:9a:26:c0:62:1f:5a:
         34:41:46:b0:04:de:0e:4b:24:50:b3:a8:24:8b:a2:43:f8:70:
         f4:85:86:73:81:90:44:b7:f8:2c:86:a7:c3:3c:a1:cf:c6:f7:
         b9:82:a9:c6:1b:e8:74:cd:86:17:b3:36:1f:e8:45:22:a1:32:
         18:1f:66:b3:d0:2b:3c:10:a2:39:e3:62:f0:36:f0:3d:24:81:
         e7:d8:eb:61:a5:d7:22:ed:95:4d:8c:93:df:e2:fb:6e:a0:d9:
         f9:64:a9:e6:72:a0:84:5c:bb:9e:29:23:05:11:df:65:79:0f:
         1a:b7:6c:95:63:ac:2d:10:bd:8a:88:81:d5:3f:b8:28:4c:5b:
         b4:00:6c:04:ee:6f:cb:67:47:2c:74:2e:8d:a8:01:53:26:c9:
         98:e8:50:bc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcT6CjSWu5Z4QmVfsnnVDkSoCkWcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTM1MjAxWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTBmMjBiODA5N2U1YmIyYmRmNTQyNTQ2MjM5N2EzYjZh
MTk3ZmY2MDVmM2EyODcyNmEzZjkzZjBjZTBmZDY3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqQXjcuBNiwLAG61b4lpZtMji4eqAApp3hbfEzW+xZYMOf
swPePO0ejypNAZ4YAWAtme1YjzvzhM5v1VmWmMDkaqLJvd5jmJ/PGqlgbuxDseMm
kXkbAQ0aLKsVozRTCJT/bHV8AfF7pWYsH4O261yMjhXDq3lmi/9QPcf48Q9J/cJT
j7VmNEGucW6LqQy/8YsOD0gVQ7I9N/RRnYpBVxKdo63rtuCXjsyTXfFBmeaR2//V
eO6V+wepNKyK1h0x8WGDCdeIjCBcbdSgOdbEA3VB4R4ulPG+OfSlkZVvuxNrWyx9
IKiQOuwyf60MrffcK5XQ1Mbcs5Y78cd3Ms2zL9e/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+NcV7lAaAKEr7/jF8fv9j71cTyswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQzMGIyMzRkLWIxYTYtNDJmMC1hODc1LWIxNDQwYjUzOWVjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOT4wDQYJKoZIhvcNAQELBQADggEBAJrN49urjXd3jByF30jXbRIy
lhAzX3Fe94FK2Ab7/zcfg2GvKUBcfdqp4SqolwCXqRQS+d497mVUlWonqrkg7ASG
vQ7zOxJkeC0OU9Zg2LQJcu+O0gVc79S76JUrkVheYGrWA4f0epomwGIfWjRBRrAE
3g5LJFCzqCSLokP4cPSFhnOBkES3+CyGp8M8oc/G97mCqcYb6HTNhhezNh/oRSKh
MhgfZrPQKzwQojnjYvA28D0kgefY62Gl1yLtlU2Mk9/i+26g2flkqeZyoIRcu54p
IwUR32V5Dxq3bJVjrC0QvYqIgdU/uChMW7QAbATub8tnRyx0Lo2oAVMmyZjoULw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:00 2026 by rpki-client