Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584d9dd6-6823-453e-a1a0-5c3696d274c8.roa
File:                     584d9dd6-6823-453e-a1a0-5c3696d274c8.roa (raw, json)
Hash identifier:          Pox7mINbfeQp3PZ4xMvTLp2uejrpb4AWYCh8N8PhgOQ=
Subject key identifier:   5F:43:FB:CD:93:1C:CF:F8:F1:DE:CC:CD:6A:49:1E:C4:96:29:5C:11
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       339845099B0A87EE01826E060E07290EB98FB8FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584d9dd6-6823-453e-a1a0-5c3696d274c8.roa
Signing time:             Thu 12 Feb 2026 02:20:46 +0000
ROA not before:           Thu 12 Feb 2026 02:20:46 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:45:09:9b:0a:87:ee:01:82:6e:06:0e:07:29:0e:b9:8f:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:20:46 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=736b9e8909d39133e073466774a0f7317186507c6dc46c06205f3f941dc5d118, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:6f:43:14:7f:ec:79:1b:8c:3b:51:95:e2:
                    a4:ba:6f:d8:0f:83:0b:64:55:aa:3b:a5:77:2d:da:
                    22:b7:a8:eb:1d:6a:e3:56:85:48:d4:c7:be:f6:dd:
                    0a:12:60:cc:94:e2:c9:ed:c2:15:16:a6:41:e7:f5:
                    d4:10:8c:af:08:13:8d:5d:33:7f:f2:c6:da:91:ce:
                    1f:e5:81:03:33:a0:97:b8:7a:27:d4:f4:ab:39:ba:
                    a2:e6:ef:a4:33:61:4f:7d:43:d3:06:ab:10:1b:b4:
                    59:81:b4:ba:5b:5a:d5:b6:5a:34:9a:5c:71:84:2d:
                    07:33:05:7e:2e:c6:c0:6a:6f:06:8c:a5:5e:1d:6e:
                    72:65:d8:86:d7:9a:3d:8a:ed:38:8c:e6:88:2c:7a:
                    bc:3f:f7:2a:8d:ff:83:f8:16:dd:55:98:1a:16:e5:
                    a5:f1:ef:8a:cb:d1:2a:ea:37:5a:a4:20:51:37:16:
                    ba:10:2e:d8:f9:c3:da:84:81:83:9e:5f:5b:b8:f7:
                    fc:4d:27:61:a6:97:b6:4b:33:b0:15:90:73:93:21:
                    b5:d4:55:2c:9f:4f:15:43:66:5a:19:1c:8c:52:9a:
                    92:f1:9e:59:04:73:1e:f8:8b:a1:b3:cd:c0:be:3d:
                    6e:8d:72:15:22:23:be:0a:85:2c:b0:7a:22:df:fe:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:FB:CD:93:1C:CF:F8:F1:DE:CC:CD:6A:49:1E:C4:96:29:5C:11
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584d9dd6-6823-453e-a1a0-5c3696d274c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d02::/47

    Signature Algorithm: sha256WithRSAEncryption
         90:ae:56:13:1e:8a:89:8a:ca:66:eb:12:48:41:0e:8d:3b:c3:
         77:be:af:3c:ba:5c:31:57:25:3d:32:f2:d0:4c:98:c5:11:cf:
         f2:93:92:f9:1b:12:00:bf:13:5b:e7:99:6e:48:7e:6f:58:b4:
         6d:d3:b2:06:1e:c2:9a:00:dc:3c:65:fe:88:b2:2b:85:eb:d8:
         43:6b:9d:89:d1:21:81:4f:4b:57:c9:10:bc:c3:c7:72:8d:f3:
         f9:c8:26:d5:a1:8d:79:53:28:fd:72:4b:d5:8f:ed:50:fb:c1:
         8b:13:fc:4c:8d:4b:15:30:eb:46:b3:82:f5:97:92:a4:b0:56:
         f7:f2:51:c6:88:64:b1:42:3e:ce:18:39:77:69:62:12:28:2f:
         cd:70:9d:71:f7:f0:ab:1b:8e:9f:57:18:88:14:27:dd:6d:57:
         e8:5c:60:2a:df:1d:14:86:b1:69:c8:7b:33:07:1b:38:28:c7:
         32:b0:d2:61:5c:6c:37:73:f4:06:a1:5a:cd:21:9a:0b:8c:23:
         05:14:0e:04:08:b6:f3:fe:4e:4b:0f:af:e2:a1:1f:d2:92:d0:
         87:26:63:22:93:f0:38:00:cb:5d:cb:6b:1d:cb:ea:8d:46:d4:
         2a:73:61:68:b1:22:17:fc:31:ff:42:9e:d1:b0:a4:e4:13:85:
         97:24:3f:fe
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM5hFCZsKh+4Bgm4GDgcpDrmPuP4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDIyMDQ2WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MzZiOWU4OTA5ZDM5MTMzZTA3MzQ2Njc3NGEwZjczMTcx
ODY1MDdjNmRjNDZjMDYyMDVmM2Y5NDFkYzVkMTE4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3cG9DFH/seRuMO1GV4qS6b9gPgwtkVao7pXct2iK3qOsd
auNWhUjUx7723QoSYMyU4sntwhUWpkHn9dQQjK8IE41dM3/yxtqRzh/lgQMzoJe4
eifU9Ks5uqLm76QzYU99Q9MGqxAbtFmBtLpbWtW2WjSaXHGELQczBX4uxsBqbwaM
pV4dbnJl2IbXmj2K7TiM5ogserw/9yqN/4P4Ft1VmBoW5aXx74rL0SrqN1qkIFE3
FroQLtj5w9qEgYOeX1u49/xNJ2Gml7ZLM7AVkHOTIbXUVSyfTxVDZloZHIxSmpLx
nlkEcx74i6GzzcC+PW6NchUiI74KhSyweiLf/rknAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUX0P7zZMcz/jx3szNakkexJYpXBEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU4NGQ5ZGQ2LTY4MjMtNDUzZS1hMWEwLTVjMzY5NmQyNzRjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALQIwDQYJKoZIhvcNAQELBQADggEBAJCuVhMeiomKymbrEkhBDo07
w3e+rzy6XDFXJT0y8tBMmMURz/KTkvkbEgC/E1vnmW5Ifm9YtG3TsgYewpoA3Dxl
/oiyK4Xr2ENrnYnRIYFPS1fJELzDx3KN8/nIJtWhjXlTKP1yS9WP7VD7wYsT/EyN
SxUw60azgvWXkqSwVvfyUcaIZLFCPs4YOXdpYhIoL81wnXH38Ksbjp9XGIgUJ91t
V+hcYCrfHRSGsWnIezMHGzgoxzKw0mFcbDdz9AahWs0hmguMIwUUDgQItvP+TksP
r+KhH9KS0IcmYyKT8DgAy13Lax3L6o1G1CpzYWixIhf8Mf9CntGwpOQThZckP/4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:07 2026 by rpki-client