Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
File:                     64cd6bdf-02f3-45c5-a4db-5133df93db84.roa (raw, json)
Hash identifier:          zQ4eGYY+iwtUiKrcJW3pCKTanY4WWgWs9TA8RMnpO+o=
Subject key identifier:   CA:8C:0B:5C:7E:FB:C5:3A:DF:33:6E:6F:36:16:71:9C:A1:F4:E4:C4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       33C04F3ACCABDF667568DF18DA3321F30894B224
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
Signing time:             Thu 12 Feb 2026 00:30:38 +0000
ROA not before:           Thu 12 Feb 2026 00:30:38 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29c4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c0:4f:3a:cc:ab:df:66:75:68:df:18:da:33:21:f3:08:94:b2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:30:38 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=3841f6e4febfaabef81b8ce250dc3c94c98b07128909a331b7734715471f2f93, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:60:a3:02:4d:8e:a5:7b:a4:72:56:cb:37:
                    df:81:66:48:97:36:70:a9:45:0a:b4:fd:da:22:16:
                    63:e0:64:69:2a:78:1f:c0:63:03:c3:96:9c:31:08:
                    4b:b5:cf:11:7a:07:b4:c7:28:59:ad:71:00:34:51:
                    24:f3:02:39:af:f7:e5:6f:b3:01:ce:37:ff:ec:04:
                    52:f9:cb:ab:c9:54:23:58:d1:7e:71:8d:53:65:5f:
                    74:52:d4:11:aa:3d:0e:8a:5a:5c:3a:a2:08:9d:1f:
                    b9:c7:94:37:11:77:63:0b:73:c2:c2:0a:ed:95:e6:
                    7f:14:82:b3:3b:08:46:04:00:db:f9:f2:c9:27:8f:
                    f0:7d:c2:32:78:5a:74:76:1f:fe:1c:6d:3c:68:0b:
                    3f:1a:a4:d1:21:17:a0:bf:41:7d:e9:63:f5:a9:06:
                    d5:b0:43:3b:84:96:5d:34:40:3a:49:34:6b:68:cd:
                    1d:7a:f1:48:a8:e0:96:8e:49:40:8d:ea:41:a2:35:
                    9b:b7:97:b1:91:e2:b7:57:bc:12:ac:3a:3d:74:f4:
                    b3:12:32:8e:1b:9e:b0:33:04:3d:c1:de:24:f2:42:
                    a8:f8:e9:89:bd:e2:a3:d2:d0:88:19:2b:24:09:fe:
                    94:d9:fd:84:82:a2:7d:25:2a:9c:cb:62:82:13:43:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:0B:5C:7E:FB:C5:3A:DF:33:6E:6F:36:16:71:9C:A1:F4:E4:C4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29c4::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:82:ef:77:43:7d:60:be:1b:2f:78:05:79:48:bd:a2:1a:
         72:c9:4c:27:1e:99:00:87:4e:15:61:c7:e5:e7:89:fa:e9:b6:
         fb:31:a9:b3:c9:15:36:e7:41:26:d2:33:87:e1:46:65:78:c6:
         a7:ed:3c:bd:0e:84:c6:37:57:e4:eb:02:d7:50:ec:0a:65:7a:
         9b:1c:10:fe:8e:f0:b2:4e:62:4d:6e:89:24:61:f5:e0:51:31:
         ba:11:2d:9d:f6:28:9c:ff:56:f0:63:68:9f:0f:13:17:0b:53:
         47:af:00:97:a0:e5:8e:9b:e6:1a:b0:20:e4:68:36:30:d1:a2:
         70:ed:01:05:10:89:f6:1a:e3:71:f5:dc:b3:04:0c:52:c4:a4:
         28:cf:02:32:18:fb:2b:f3:81:e7:c6:c1:b3:60:17:81:b3:c5:
         ed:3c:20:1c:58:55:90:a4:d1:fb:e4:c5:60:5a:db:ae:65:90:
         ba:37:f0:7d:50:d4:21:12:41:68:f3:85:96:fe:da:8d:45:25:
         3f:e0:78:fa:7e:89:c7:f2:11:f5:70:8a:cc:d4:a3:5d:3c:d8:
         57:b5:68:41:ba:66:e7:f1:74:c8:be:49:ca:0e:60:30:ca:5f:
         68:ac:08:36:bd:0d:93:ed:0c:f0:dc:d6:23:c0:d7:3c:99:99:
         9f:3b:5c:43
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM8BPOsyr32Z1aN8Y2jMh8wiUsiQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDAzMDM4WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzODQxZjZlNGZlYmZhYWJlZjgxYjhjZTI1MGRjM2M5NGM5
OGIwNzEyODkwOWEzMzFiNzczNDcxNTQ3MWYyZjkzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdN2CjAk2OpXukclbLN9+BZkiXNnCpRQq0/doiFmPgZGkq
eB/AYwPDlpwxCEu1zxF6B7THKFmtcQA0USTzAjmv9+VvswHON//sBFL5y6vJVCNY
0X5xjVNlX3RS1BGqPQ6KWlw6ogidH7nHlDcRd2MLc8LCCu2V5n8UgrM7CEYEANv5
8sknj/B9wjJ4WnR2H/4cbTxoCz8apNEhF6C/QX3pY/WpBtWwQzuEll00QDpJNGto
zR168Uio4JaOSUCN6kGiNZu3l7GR4rdXvBKsOj109LMSMo4bnrAzBD3B3iTyQqj4
6Ym94qPS0IgZKyQJ/pTZ/YSCon0lKpzLYoITQ38xAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUyowLXH77xTrfM25vNhZxnKH05MQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY0Y2Q2YmRmLTAyZjMtNDVjNS1hNGRiLTUxMzNkZjkzZGI4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKcQwDQYJKoZIhvcNAQELBQADggEBAH+Ygu93Q31gvhsveAV5SL2i
GnLJTCcemQCHThVhx+XnifrptvsxqbPJFTbnQSbSM4fhRmV4xqftPL0OhMY3V+Tr
AtdQ7AplepscEP6O8LJOYk1uiSRh9eBRMboRLZ32KJz/VvBjaJ8PExcLU0evAJeg
5Y6b5hqwIORoNjDRonDtAQUQifYa43H13LMEDFLEpCjPAjIY+yvzgefGwbNgF4Gz
xe08IBxYVZCk0fvkxWBa265lkLo38H1Q1CESQWjzhZb+2o1FJT/gePp+icfyEfVw
iszUo1082Fe1aEG6ZufxdMi+ScoOYDDKX2isCDa9DZPtDPDc1iPA1zyZmZ87XEM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:47 2026 by rpki-client