Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/662ef2f7-c11f-4b1b-9a94-f032bf482019.roa
File:                     662ef2f7-c11f-4b1b-9a94-f032bf482019.roa (raw, json)
Hash identifier:          qpfWjCDUaapp75w7VUK6PErzkpLUNT5FuKJ29tyZTF8=
Subject key identifier:   18:0A:F3:99:D1:3F:AF:37:E3:7D:13:DE:C9:0E:3D:A3:B6:E3:F3:9E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       078A9F1E51A36C7C70E3B138DB0BE5EE404A3D0E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/662ef2f7-c11f-4b1b-9a94-f032bf482019.roa
Signing time:             Fri 13 Feb 2026 12:50:43 +0000
ROA not before:           Fri 13 Feb 2026 12:50:43 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c48::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:9f:1e:51:a3:6c:7c:70:e3:b1:38:db:0b:e5:ee:40:4a:3d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:50:43 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=9c2848335fd999c4a12e66d3d7f3b70d526386648ca1a2535142598805f65b60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:a7:79:6d:e7:f3:3b:97:a3:69:6a:06:96:
                    53:43:71:82:5f:c5:0c:fd:00:ee:9f:c0:f1:c8:17:
                    f9:77:9d:b2:31:f6:e3:01:37:21:d7:2f:1a:f3:9f:
                    3c:17:91:d5:4b:7a:c8:c0:9d:bd:bd:dc:0b:06:fb:
                    03:b9:8c:31:db:36:40:7b:f0:dd:43:ce:d7:27:46:
                    59:26:61:a2:28:c1:4a:d4:23:33:23:bf:fc:e2:9c:
                    36:c7:d0:10:b2:30:b4:cc:ea:23:4a:36:f5:f7:4a:
                    8c:3b:e6:f8:88:e4:b8:2c:c3:75:5c:d6:18:a5:94:
                    2c:e0:6b:6b:25:f2:2c:45:fa:b1:96:0e:4f:2b:82:
                    0e:fa:52:d8:5b:e1:c8:0c:42:3d:31:f1:51:5c:22:
                    c4:8c:0d:4a:98:08:0d:a3:5f:fd:ca:08:09:c8:62:
                    b8:96:e0:9f:02:2b:96:a2:f8:07:84:80:ed:68:e9:
                    a6:33:4c:be:84:d7:8f:bd:c7:90:bc:26:78:4f:8f:
                    3a:58:b2:53:da:be:c8:55:f5:13:89:f5:cd:fe:3d:
                    46:8e:d2:c6:29:39:f1:3f:45:f3:77:49:99:16:b2:
                    6d:75:dc:52:de:45:ae:b8:28:da:cb:ec:4c:9a:fd:
                    bc:d2:f1:c2:25:68:60:b3:60:ad:dc:b3:4a:0b:d9:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0A:F3:99:D1:3F:AF:37:E3:7D:13:DE:C9:0E:3D:A3:B6:E3:F3:9E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/662ef2f7-c11f-4b1b-9a94-f032bf482019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c48::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:a3:6b:af:06:bb:08:20:1b:00:2f:61:2f:60:3f:ff:f7:
         78:f4:29:36:ea:40:68:09:6c:9d:fc:a4:5f:18:3a:e0:2c:c0:
         ce:14:cd:b0:78:fd:ff:4e:36:fb:d4:9d:f8:1a:2a:ae:1d:d3:
         52:7c:72:14:61:78:da:f1:20:78:16:1a:b5:e2:21:bf:fd:d6:
         b8:13:82:79:47:aa:9e:b1:3a:95:51:ff:ac:a4:d3:6c:49:27:
         ab:89:39:70:35:54:fd:01:e3:53:f1:21:f2:d3:15:af:fb:cf:
         0b:ee:79:92:c6:81:f9:58:4f:f7:4b:da:b3:06:8f:56:fc:f0:
         e2:82:cf:6e:b3:8d:bf:a5:8e:00:69:80:7c:78:88:5c:1c:a3:
         d4:44:2d:5d:55:a1:0d:ce:ef:bb:4f:a5:5d:35:f3:b5:bf:bb:
         2d:22:c7:bd:5f:c0:c5:ac:92:87:67:12:d2:91:fa:df:61:5e:
         af:bf:07:ba:84:be:7c:e0:31:07:4c:56:65:2d:28:32:2f:d8:
         b7:2f:dc:0a:68:69:ec:f5:a9:28:d2:0c:93:bf:f0:d3:0b:28:
         e1:ed:5b:ef:c7:76:1a:8d:ee:e8:ca:3d:24:86:26:18:e3:23:
         6c:19:14:83:f0:3f:bf:20:75:59:96:99:d2:c2:4d:aa:ee:57:
         bf:01:ea:1b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUB4qfHlGjbHxw47E42wvl7kBKPQ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTI1MDQzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YzI4NDgzMzVmZDk5OWM0YTEyZTY2ZDNkN2YzYjcwZDUy
NjM4NjY0OGNhMWEyNTM1MTQyNTk4ODA1ZjY1YjYwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDot6d5befzO5ejaWoGllNDcYJfxQz9AO6fwPHIF/l3nbIx
9uMBNyHXLxrznzwXkdVLesjAnb293AsG+wO5jDHbNkB78N1DztcnRlkmYaIowUrU
IzMjv/zinDbH0BCyMLTM6iNKNvX3Sow75viI5Lgsw3Vc1hillCzga2sl8ixF+rGW
Dk8rgg76Uthb4cgMQj0x8VFcIsSMDUqYCA2jX/3KCAnIYriW4J8CK5ai+AeEgO1o
6aYzTL6E14+9x5C8JnhPjzpYslPavshV9ROJ9c3+PUaO0sYpOfE/RfN3SZkWsm11
3FLeRa64KNrL7Eya/bzS8cIlaGCzYK3cs0oL2RVTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGArzmdE/rzfjfRPeyQ49o7bj854wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY2MmVmMmY3LWMxMWYtNGIxYi05YTk0LWYwMzJiZjQ4MjAxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPEgwDQYJKoZIhvcNAQELBQADggEBACGio2uvBrsIIBsAL2EvYD//
93j0KTbqQGgJbJ38pF8YOuAswM4UzbB4/f9ONvvUnfgaKq4d01J8chRheNrxIHgW
GrXiIb/91rgTgnlHqp6xOpVR/6yk02xJJ6uJOXA1VP0B41PxIfLTFa/7zwvueZLG
gflYT/dL2rMGj1b88OKCz26zjb+ljgBpgHx4iFwco9RELV1VoQ3O77tPpV0187W/
uy0ix71fwMWskodnEtKR+t9hXq+/B7qEvnzgMQdMVmUtKDIv2Lcv3Apoaez1qSjS
DJO/8NMLKOHtW+/HdhqN7ujKPSSGJhjjI2wZFIPwP78gdVmWmdLCTaruV78B6hs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:02 2026 by rpki-client