Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7254d37f-adab-4496-a603-66515808718b.roa
File:                     7254d37f-adab-4496-a603-66515808718b.roa (raw, json)
Hash identifier:          AEPbadz67Yu65kUC07Yu7Ig6BAc2L9EY4kJYAJxMiF8=
Subject key identifier:   AD:CD:50:4F:13:7A:B8:4E:AA:72:68:A7:FD:AD:E6:5E:AE:26:77:4E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2CBC7887B73BCF35B6088D4022D12075570F4EEF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7254d37f-adab-4496-a603-66515808718b.roa
Signing time:             Fri 13 Feb 2026 04:40:43 +0000
ROA not before:           Fri 13 Feb 2026 04:40:43 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bd2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bc:78:87:b7:3b:cf:35:b6:08:8d:40:22:d1:20:75:57:0f:4e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:40:43 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=62e7cf70019e91fee647038a64c1d16d28fe4903343f70041b0bda8675dfc65e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:67:7e:56:0b:56:93:14:f0:f1:a6:e5:a2:
                    34:24:cf:3a:bc:60:da:44:e2:bd:f9:22:b4:f3:f0:
                    e7:e7:87:f1:4a:cf:ca:2c:e6:6c:f4:21:d3:b0:00:
                    01:62:49:43:1e:42:b6:c5:14:f8:30:29:43:e8:5b:
                    4c:02:7f:da:90:35:47:a0:09:d1:67:7b:1d:39:f0:
                    dd:99:19:e3:d0:de:f0:60:c5:47:02:b3:84:c4:99:
                    fa:d3:d8:98:4a:84:ab:c5:e6:97:4c:ff:62:ae:51:
                    09:55:6f:45:79:f9:10:27:64:a2:19:44:ca:3b:fd:
                    2c:ae:d1:e0:ea:11:57:f9:f7:e1:23:96:62:a1:f2:
                    54:9b:31:32:55:c2:09:d4:a2:89:63:ae:c4:f8:2b:
                    3a:5f:ba:ab:33:a2:79:52:f8:43:e8:2b:c1:9e:4c:
                    f9:78:e6:a5:e4:97:01:db:38:74:72:f1:43:d8:2c:
                    b7:5a:c7:84:a5:95:4f:55:8e:5a:b1:76:7f:93:f1:
                    1a:87:ac:7d:4b:a5:4f:64:26:f2:04:5b:ba:42:ee:
                    a6:7a:e9:89:4e:b9:b1:1c:de:d0:0e:0b:38:73:ec:
                    a1:44:21:16:1e:82:10:e3:ed:ea:2f:4f:72:a7:16:
                    fe:30:32:79:61:02:d6:15:1e:b3:b6:eb:ff:09:3d:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CD:50:4F:13:7A:B8:4E:AA:72:68:A7:FD:AD:E6:5E:AE:26:77:4E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7254d37f-adab-4496-a603-66515808718b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bd2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:42:69:57:af:2e:fc:48:8b:7d:b8:7c:93:0f:e3:66:84:
         9c:8a:ab:62:ea:d0:e8:30:ee:d9:fd:bf:ee:81:33:81:df:55:
         86:12:6d:83:ce:9b:e0:21:07:fb:77:ae:34:27:60:a4:f9:68:
         54:69:d6:e7:6e:ad:22:f0:68:8e:23:2a:9a:1b:52:30:70:83:
         dd:8e:85:91:6e:42:98:85:ca:a1:54:b9:6c:09:d1:e7:a8:95:
         fe:54:3b:88:09:38:f3:67:27:95:6e:fa:55:ad:71:64:c9:89:
         78:82:bb:07:75:e7:58:4b:f5:ec:98:f5:4f:9b:0e:1b:58:57:
         b0:02:58:42:bd:a4:0a:56:23:a6:0a:58:4a:82:51:cd:48:5e:
         0b:40:ef:13:46:a7:b8:58:6d:7a:9f:e2:27:63:81:2a:99:17:
         7c:4f:6e:f2:cb:d4:16:98:58:5a:84:ad:26:a5:6d:14:5d:df:
         ea:6d:5c:4f:71:ab:28:33:8e:82:b4:ee:2a:93:ee:dd:a5:d0:
         7f:fc:87:dd:9f:60:6b:f3:dd:b3:33:25:66:c8:02:58:8b:1b:
         3f:49:ef:b5:11:a8:5f:ee:37:4e:92:88:70:98:91:ab:49:16:
         bd:96:aa:cb:65:4e:8d:62:d7:27:ce:a7:58:2f:5e:f4:c4:ae:
         48:85:0e:12
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULLx4h7c7zzW2CI1AItEgdVcPTu8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQ0MDQzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MmU3Y2Y3MDAxOWU5MWZlZTY0NzAzOGE2NGMxZDE2ZDI4
ZmU0OTAzMzQzZjcwMDQxYjBiZGE4Njc1ZGZjNjVlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDS+Gd+VgtWkxTw8ablojQkzzq8YNpE4r35IrTz8Ofnh/FK
z8os5mz0IdOwAAFiSUMeQrbFFPgwKUPoW0wCf9qQNUegCdFnex058N2ZGePQ3vBg
xUcCs4TEmfrT2JhKhKvF5pdM/2KuUQlVb0V5+RAnZKIZRMo7/Syu0eDqEVf59+Ej
lmKh8lSbMTJVwgnUooljrsT4KzpfuqszonlS+EPoK8GeTPl45qXklwHbOHRy8UPY
LLdax4SllU9Vjlqxdn+T8RqHrH1LpU9kJvIEW7pC7qZ66YlOubEc3tAOCzhz7KFE
IRYeghDj7eovT3KnFv4wMnlhAtYVHrO26/8JPbYnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrc1QTxN6uE6qcmin/a3mXq4md04wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzcyNTRkMzdmLWFkYWItNDQ5Ni1hNjAzLTY2NTE1ODA4NzE4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAO9IwDQYJKoZIhvcNAQELBQADggEBAC4FQmlXry78SIt9uHyTD+Nm
hJyKq2Lq0Ogw7tn9v+6BM4HfVYYSbYPOm+AhB/t3rjQnYKT5aFRp1udurSLwaI4j
KpobUjBwg92OhZFuQpiFyqFUuWwJ0eeolf5UO4gJOPNnJ5Vu+lWtcWTJiXiCuwd1
51hL9eyY9U+bDhtYV7ACWEK9pApWI6YKWEqCUc1IXgtA7xNGp7hYbXqf4idjgSqZ
F3xPbvLL1BaYWFqErSalbRRd3+ptXE9xqygzjoK07iqT7t2l0H/8h92fYGvz3bMz
JWbIAliLGz9J77URqF/uN06SiHCYkatJFr2WqstlTo1i1yfOp1gvXvTErkiFDhI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:54 2026 by rpki-client