Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b490a0d-da31-47d2-8389-176abe6ab841.roa
File:                     5b490a0d-da31-47d2-8389-176abe6ab841.roa (raw, json)
Hash identifier:          +VgRgucZloP+vOeBthqUC49LsFjyH7J3+NJiKOdQ59k=
Subject key identifier:   1F:CD:52:E6:19:0E:DE:70:4C:F7:CC:47:76:7B:EC:66:4D:80:6D:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3ABA913217A24A7A093D6B8026F702927325CAF0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b490a0d-da31-47d2-8389-176abe6ab841.roa
Signing time:             Thu 12 Feb 2026 03:21:08 +0000
ROA not before:           Thu 12 Feb 2026 03:21:08 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cf6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:91:32:17:a2:4a:7a:09:3d:6b:80:26:f7:02:92:73:25:ca:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:21:08 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=94ab73932c79a58ff219c93c859dca7f9b4d83bfd780ceeb90af9119699aff4d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:73:4e:c6:90:ac:67:62:82:99:de:fc:a6:
                    74:25:3d:8b:34:e3:9c:7a:3c:23:71:d9:30:d5:0c:
                    36:a1:eb:b0:b3:d4:30:cb:5b:0a:e4:56:6f:27:38:
                    75:d2:a6:ff:a1:58:fc:24:94:47:6c:df:3a:c3:6c:
                    3b:7d:89:2a:f6:2c:da:1f:d9:eb:e2:97:1a:8e:cb:
                    b2:20:78:ec:56:e7:86:bd:4a:00:a3:cb:b4:87:b2:
                    9f:22:23:9c:46:09:39:fe:10:f1:87:19:25:3c:69:
                    cf:15:f4:eb:b4:48:a2:b9:fa:3a:37:f8:fb:9e:89:
                    1c:02:f0:81:95:83:84:1f:03:35:c2:1c:22:31:e3:
                    58:dd:5c:9c:13:c4:c4:c1:6b:32:ca:8b:24:b6:c7:
                    09:15:98:13:30:82:52:5e:4b:64:16:d4:14:be:53:
                    f4:79:9b:90:ce:6f:a7:66:c7:28:3b:0b:fc:91:df:
                    ef:e7:c2:08:cb:bb:98:e9:98:e6:a2:da:b6:cb:94:
                    57:13:2c:21:bd:52:b3:40:0a:37:6b:36:7d:a1:0a:
                    79:d7:b2:95:b2:fd:85:14:3e:55:23:94:aa:93:41:
                    85:e4:87:69:83:1c:3a:ab:ed:4d:e3:b5:17:60:65:
                    07:0a:50:39:87:d6:a2:86:48:83:6f:7c:09:b3:b5:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:52:E6:19:0E:DE:70:4C:F7:CC:47:76:7B:EC:66:4D:80:6D:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b490a0d-da31-47d2-8389-176abe6ab841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cf6::/47

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:ed:d5:f8:11:6f:59:76:78:8a:12:59:ae:95:80:06:dc:
         21:26:17:98:2e:70:c7:d9:3f:a4:5d:9b:89:c3:46:97:53:16:
         8e:cc:67:49:d1:92:b7:47:78:02:e0:53:e0:d7:97:c7:92:54:
         0b:8f:8f:4c:f5:69:6f:9c:d3:03:4c:f7:ab:00:f4:0f:04:d0:
         55:29:42:b5:bf:4d:64:78:5c:cf:87:22:68:3a:58:64:79:17:
         4c:91:aa:fe:bb:6e:d0:7b:bb:12:3e:4c:76:79:36:ce:a8:f1:
         ff:dd:46:65:ea:9f:7b:e3:a4:a2:f9:50:b9:4b:64:56:88:87:
         60:95:d3:58:f2:39:52:67:e4:38:34:19:01:10:4b:12:d7:29:
         28:2c:49:11:b3:f9:fb:69:36:cb:fe:5a:d9:7f:29:66:06:10:
         1b:1d:a1:f0:28:ef:12:bf:a4:05:4c:7d:90:6c:9a:c4:a1:15:
         08:22:79:85:f6:63:f8:db:60:74:b6:42:f8:8e:f2:cb:da:a4:
         a8:5e:e0:fc:ce:f9:0d:62:92:a3:a7:74:45:24:18:27:9b:cf:
         49:46:2b:f6:b6:1e:8d:dd:dc:47:d7:bc:25:74:48:71:a5:5e:
         27:8e:63:93:2d:8f:66:58:62:b6:80:11:7a:78:eb:f5:db:2e:
         dd:8a:ae:fa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOrqRMheiSnoJPWuAJvcCknMlyvAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDMyMTA4WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NGFiNzM5MzJjNzlhNThmZjIxOWM5M2M4NTlkY2E3Zjli
NGQ4M2JmZDc4MGNlZWI5MGFmOTExOTY5OWFmZjRkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDR73NOxpCsZ2KCmd78pnQlPYs045x6PCNx2TDVDDah67Cz
1DDLWwrkVm8nOHXSpv+hWPwklEds3zrDbDt9iSr2LNof2evilxqOy7IgeOxW54a9
SgCjy7SHsp8iI5xGCTn+EPGHGSU8ac8V9Ou0SKK5+jo3+PueiRwC8IGVg4QfAzXC
HCIx41jdXJwTxMTBazLKiyS2xwkVmBMwglJeS2QW1BS+U/R5m5DOb6dmxyg7C/yR
3+/nwgjLu5jpmOai2rbLlFcTLCG9UrNACjdrNn2hCnnXspWy/YUUPlUjlKqTQYXk
h2mDHDqr7U3jtRdgZQcKUDmH1qKGSINvfAmztRDvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUH81S5hkO3nBM98xHdnvsZk2Abd8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzViNDkwYTBkLWRhMzEtNDdkMi04Mzg5LTE3NmFiZTZhYjg0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALPYwDQYJKoZIhvcNAQELBQADggEBAHoA7dX4EW9ZdniKElmulYAG
3CEmF5gucMfZP6Rdm4nDRpdTFo7MZ0nRkrdHeALgU+DXl8eSVAuPj0z1aW+c0wNM
96sA9A8E0FUpQrW/TWR4XM+HImg6WGR5F0yRqv67btB7uxI+THZ5Ns6o8f/dRmXq
n3vjpKL5ULlLZFaIh2CV01jyOVJn5Dg0GQEQSxLXKSgsSRGz+ftpNsv+Wtl/KWYG
EBsdofAo7xK/pAVMfZBsmsShFQgieYX2Y/jbYHS2QviO8svapKhe4PzO+Q1ikqOn
dEUkGCebz0lGK/a2Ho3d3EfXvCV0SHGlXieOY5Mtj2ZYYraAEXp46/XbLt2Krvo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:12 2026 by rpki-client