Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa
File:                     74ee40b5-e01d-4498-8112-6b41948193a7.roa (raw, json)
Hash identifier:          UJBK60m1blXr6ZbasTj/YqrtZJ/dN7Sb1dxNvChp+Qs=
Subject key identifier:   70:0C:54:97:82:F3:BA:AD:91:B5:9C:75:DA:1C:0D:CA:A8:2F:32:3F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4FC2B98F8D2C80DB88A482D1C86195DD64799F46
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa
Signing time:             Fri 13 Feb 2026 12:51:55 +0000
ROA not before:           Fri 13 Feb 2026 12:51:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cd8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c2:b9:8f:8d:2c:80:db:88:a4:82:d1:c8:61:95:dd:64:79:9f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:51:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=7b8065eb2619ffe425f2560a9908f563558641b1f96f4d97fdf38dd1ba4560ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:97:a4:e7:b0:6a:a0:51:75:f7:08:33:04:
                    e5:69:4a:0b:fd:b0:22:e9:b4:f7:27:04:a1:c3:d3:
                    53:e9:db:d2:a6:77:18:4e:7e:52:cb:59:8c:59:57:
                    01:ee:42:1d:e3:6a:24:e1:8f:c7:b0:2e:81:09:4d:
                    45:1f:80:e4:b5:6c:fe:4c:b6:88:73:2b:51:6d:f2:
                    d7:d2:49:32:f8:72:6b:59:6c:a1:53:44:df:a4:bf:
                    dd:08:53:39:fd:4a:82:f3:f3:59:16:27:1f:34:d9:
                    6f:74:cd:32:74:40:3e:51:f4:20:43:d3:72:4f:6e:
                    40:16:af:81:c8:d3:3a:42:75:dc:8e:20:fc:98:32:
                    52:d4:bd:02:be:2c:b3:87:8f:f0:60:36:26:6f:ea:
                    53:25:e6:ec:61:af:be:a7:f6:fa:c7:e4:aa:b4:04:
                    a5:74:73:b2:b1:88:c3:2f:c3:eb:90:76:d7:23:29:
                    c2:eb:99:be:1b:e5:4c:a9:56:63:7f:64:dc:b2:71:
                    0b:50:4e:87:ab:bd:1f:88:4d:1b:07:74:41:41:40:
                    a2:79:c1:cf:e5:2f:88:c0:54:91:2c:7e:8a:03:2b:
                    05:22:3b:7d:10:ea:63:e2:69:ca:75:80:c3:81:88:
                    8d:21:43:79:04:95:20:0c:2c:c8:57:3f:fd:6b:aa:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:54:97:82:F3:BA:AD:91:B5:9C:75:DA:1C:0D:CA:A8:2F:32:3F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ee40b5-e01d-4498-8112-6b41948193a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cd8::/46

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:8d:96:41:1f:63:3b:c9:3c:5b:64:eb:92:45:f8:90:10:
         ac:71:98:89:90:22:f1:5c:0a:19:1d:f2:1a:a3:47:29:4d:80:
         62:74:47:69:af:bd:8c:75:8a:73:49:32:ae:ba:2c:37:f5:fc:
         e3:c2:eb:e6:9e:82:ad:46:f3:4f:f4:1f:bf:65:8b:13:df:75:
         b6:3e:ed:ad:dc:07:8a:cc:9d:bc:95:95:51:ea:89:d8:49:a7:
         ec:78:a8:72:97:f3:44:fb:c4:1c:18:e1:ae:c7:c3:b2:a9:d0:
         fe:48:d7:88:10:d0:1a:16:d7:ff:ea:e6:a2:22:ca:dc:45:ca:
         b7:45:52:ab:e9:3b:ee:0c:3c:d2:83:73:54:59:c6:b3:e1:86:
         0e:32:26:7b:f4:57:6d:54:06:db:aa:e2:e9:ba:cc:b3:b9:bb:
         65:f8:4d:14:ab:78:62:b0:a8:7e:7d:47:73:ba:15:b0:21:16:
         83:dc:81:0c:59:a8:65:a6:9c:56:75:ed:c9:bc:9d:e0:3c:4c:
         2b:b7:ec:99:b0:6b:31:07:3d:47:ed:3d:cb:43:34:4e:7e:f9:
         97:c3:f2:c3:38:28:f7:6a:cb:5e:5e:fb:58:de:27:ce:eb:bd:
         04:9f:c8:53:1c:ee:b8:4d:1e:4e:37:69:ed:0b:e8:e6:aa:9f:
         2f:a0:da:53
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUT8K5j40sgNuIpILRyGGV3WR5n0YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTI1MTU1WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YjgwNjVlYjI2MTlmZmU0MjVmMjU2MGE5OTA4ZjU2MzU1
ODY0MWIxZjk2ZjRkOTdmZGYzOGRkMWJhNDU2MGFlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDvpek57BqoFF19wgzBOVpSgv9sCLptPcnBKHD01Pp29Km
dxhOflLLWYxZVwHuQh3jaiThj8ewLoEJTUUfgOS1bP5MtohzK1Ft8tfSSTL4cmtZ
bKFTRN+kv90IUzn9SoLz81kWJx802W90zTJ0QD5R9CBD03JPbkAWr4HI0zpCddyO
IPyYMlLUvQK+LLOHj/BgNiZv6lMl5uxhr76n9vrH5Kq0BKV0c7KxiMMvw+uQdtcj
KcLrmb4b5UypVmN/ZNyycQtQToervR+ITRsHdEFBQKJ5wc/lL4jAVJEsfooDKwUi
O30Q6mPiacp1gMOBiI0hQ3kElSAMLMhXP/1rqu6lAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUcAxUl4Lzuq2RtZx12hwNyqgvMj8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc0ZWU0MGI1LWUwMWQtNDQ5OC04MTEyLTZiNDE5NDgxOTNhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALNgwDQYJKoZIhvcNAQELBQADggEBAIu8jZZBH2M7yTxbZOuSRfiQ
EKxxmImQIvFcChkd8hqjRylNgGJ0R2mvvYx1inNJMq66LDf1/OPC6+aegq1G80/0
H79lixPfdbY+7a3cB4rMnbyVlVHqidhJp+x4qHKX80T7xBwY4a7Hw7Kp0P5I14gQ
0BoW1//q5qIiytxFyrdFUqvpO+4MPNKDc1RZxrPhhg4yJnv0V21UBtuq4um6zLO5
u2X4TRSreGKwqH59R3O6FbAhFoPcgQxZqGWmnFZ17cm8neA8TCu37JmwazEHPUft
PctDNE5++ZfD8sM4KPdqy15e+1jeJ87rvQSfyFMc7rhNHk43ae0L6Oaqny+g2lM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:58 2026 by rpki-client