Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70b73d26-d950-4603-aa31-6c4465b79f95.roa
File:                     70b73d26-d950-4603-aa31-6c4465b79f95.roa (raw, json)
Hash identifier:          mfIieDrKeG2CZu239RLzUrgT5r53hHAekTVUTQmv26Q=
Subject key identifier:   F1:63:6B:5C:1E:99:23:A8:9E:7B:6C:2B:6E:53:67:2E:22:5A:66:D6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       53AE27A5D2840BE8CCD5A3503D9FE19EA894684F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70b73d26-d950-4603-aa31-6c4465b79f95.roa
Signing time:             Fri 13 Feb 2026 07:50:07 +0000
ROA not before:           Fri 13 Feb 2026 07:50:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:338c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:27:a5:d2:84:0b:e8:cc:d5:a3:50:3d:9f:e1:9e:a8:94:68:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:50:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a76fba9d4166c4938c8533bbb4b1829d59a8f6572ebc6c0ebd9cac78d16bc1e9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:ba:b7:bb:43:73:fe:08:73:27:5c:6d:13:
                    d2:ba:a9:bc:0d:2e:ec:4c:dd:c1:75:bb:62:85:a2:
                    7f:2e:0d:86:c0:e1:f7:2c:74:9a:7e:fb:78:c0:74:
                    ca:44:0d:54:59:65:e5:6c:d9:8e:d7:b4:95:17:bb:
                    6b:fc:d2:99:6d:c6:08:03:b4:46:10:31:44:8d:7b:
                    3e:a0:f4:22:37:ce:24:f6:b3:57:75:30:99:e4:3b:
                    57:fb:b2:86:4f:ec:39:e9:50:da:7c:aa:f7:32:d9:
                    74:ca:c9:74:8f:67:43:1b:55:b4:fc:bb:b3:39:a8:
                    b5:ef:9c:bc:03:14:66:b1:0b:ae:f4:ed:22:88:b2:
                    2b:af:a2:30:29:0e:4e:ba:c0:a8:03:69:97:ba:59:
                    b0:56:f5:2d:3b:c4:7f:13:1d:0a:11:79:c1:08:66:
                    d7:c1:1c:2e:e1:ee:36:f2:40:02:03:39:28:af:ad:
                    d4:59:26:19:e8:c0:ee:fb:db:8b:19:75:f1:39:36:
                    88:2b:77:5a:ca:ce:b3:4a:6c:af:c1:84:b5:21:a2:
                    17:0c:28:3d:8f:56:91:fb:cc:2c:b5:14:2f:2c:2c:
                    d7:22:83:83:09:5e:55:e0:ee:88:b3:33:ac:b6:d7:
                    48:1c:2b:3d:1a:50:73:74:55:ec:c0:b2:bc:75:c2:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:6B:5C:1E:99:23:A8:9E:7B:6C:2B:6E:53:67:2E:22:5A:66:D6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70b73d26-d950-4603-aa31-6c4465b79f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:338c::/47

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:95:08:97:b3:72:f1:58:f9:0e:67:24:d5:99:97:62:10:
         6e:19:29:57:a2:8f:d8:c8:81:77:80:cd:32:c4:02:e4:bb:13:
         a9:f0:f5:73:df:9c:d3:68:a5:86:91:f5:84:ca:8d:e0:e3:ca:
         23:30:22:7a:36:9d:3f:d5:df:32:7c:b1:47:6d:60:bd:b3:84:
         83:26:37:78:d8:3a:f4:ee:89:de:1a:9f:b6:54:d2:a9:fe:c3:
         ae:1e:dc:55:aa:10:f6:14:ca:1f:b5:0f:55:97:61:d0:23:2c:
         96:f9:1a:ff:a2:23:cc:f6:e5:63:f4:98:f8:5e:7f:79:6f:e9:
         67:d4:64:de:95:06:79:65:bb:ff:09:8b:5f:20:48:17:3b:5c:
         fd:af:91:b1:3a:c6:17:7d:56:47:38:ec:ec:78:a8:7e:ed:85:
         d1:42:b8:47:4f:75:2d:5b:85:d6:d0:28:4b:4d:d7:53:77:37:
         3c:a4:c7:f2:59:2b:6f:4b:de:14:55:2e:08:b0:ce:3f:36:9d:
         e8:e5:6b:24:e7:bd:77:2d:60:a7:84:38:75:e0:ce:c7:55:70:
         fa:e4:35:8a:e7:a1:f7:90:ff:78:05:e4:91:3a:7d:c3:87:2d:
         f5:50:23:8a:a4:db:22:7f:fa:fb:f4:6d:f3:88:e4:5d:9d:29:
         5a:ee:ba:13
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUU64npdKEC+jM1aNQPZ/hnqiUaE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDc1MDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNzZmYmE5ZDQxNjZjNDkzOGM4NTMzYmJiNGIxODI5ZDU5
YThmNjU3MmViYzZjMGViZDljYWM3OGQxNmJjMWU5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCl7rq3u0Nz/ghzJ1xtE9K6qbwNLuxM3cF1u2KFon8uDYbA
4fcsdJp++3jAdMpEDVRZZeVs2Y7XtJUXu2v80pltxggDtEYQMUSNez6g9CI3ziT2
s1d1MJnkO1f7soZP7DnpUNp8qvcy2XTKyXSPZ0MbVbT8u7M5qLXvnLwDFGaxC670
7SKIsiuvojApDk66wKgDaZe6WbBW9S07xH8THQoRecEIZtfBHC7h7jbyQAIDOSiv
rdRZJhnowO7724sZdfE5Nogrd1rKzrNKbK/BhLUhohcMKD2PVpH7zCy1FC8sLNci
g4MJXlXg7oizM6y210gcKz0aUHN0VezAsrx1wiAFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8WNrXB6ZI6iee2wrblNnLiJaZtYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcwYjczZDI2LWQ5NTAtNDYwMy1hYTMxLTZjNDQ2NWI3OWY5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAM4wwDQYJKoZIhvcNAQELBQADggEBALrOlQiXs3LxWPkOZyTVmZdi
EG4ZKVeij9jIgXeAzTLEAuS7E6nw9XPfnNNopYaR9YTKjeDjyiMwIno2nT/V3zJ8
sUdtYL2zhIMmN3jYOvTuid4an7ZU0qn+w64e3FWqEPYUyh+1D1WXYdAjLJb5Gv+i
I8z25WP0mPhef3lv6WfUZN6VBnllu/8Ji18gSBc7XP2vkbE6xhd9Vkc47Ox4qH7t
hdFCuEdPdS1bhdbQKEtN11N3Nzykx/JZK29L3hRVLgiwzj82nejlayTnvXctYKeE
OHXgzsdVcPrkNYrnofeQ/3gF5JE6fcOHLfVQI4qk2yJ/+vv0bfOI5F2dKVruuhM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:36 2026 by rpki-client