Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75d14a19-6fa1-4355-89e7-fe0860a51ef2.roa
File:                     75d14a19-6fa1-4355-89e7-fe0860a51ef2.roa (raw, json)
Hash identifier:          yFIGKwcdwqWGHSMXYaAri9NEEUoDOGlku3YUXWhzSjk=
Subject key identifier:   78:34:B6:9E:48:4F:D5:A3:F0:90:3A:BE:F3:5B:69:2B:6C:39:A1:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03E67C12A9850AF4FAB8CE7CEB9737FBD02F9FB3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75d14a19-6fa1-4355-89e7-fe0860a51ef2.roa
Signing time:             Fri 13 Feb 2026 05:50:04 +0000
ROA not before:           Fri 13 Feb 2026 05:50:04 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34f8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:7c:12:a9:85:0a:f4:fa:b8:ce:7c:eb:97:37:fb:d0:2f:9f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:50:04 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=70b1a6c79267d2ec77e6ef048bc7f7c5556256b0224719f4c0d0fa335f2cda7d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:55:77:d9:b9:bb:40:10:f9:a7:77:38:7b:
                    b3:f1:46:b2:39:af:9b:9f:3a:c5:2c:96:73:8a:16:
                    de:d8:a9:55:f5:b0:df:5d:b7:76:a7:33:58:9b:62:
                    29:b5:19:5a:c3:a7:0d:35:75:e1:67:49:2a:6e:69:
                    22:4b:0c:33:4a:5d:65:9b:5c:ab:7c:4f:dc:71:3b:
                    5d:a4:31:31:10:c9:67:1e:37:80:5e:4a:89:34:b7:
                    52:f5:56:15:34:2c:67:21:46:d3:d3:ac:c2:61:29:
                    87:e7:7e:85:b0:68:89:66:71:2b:80:24:60:e0:e7:
                    8b:78:c9:39:b9:9d:3a:f8:3e:79:08:92:79:69:7a:
                    83:6e:81:24:f8:60:08:7d:c9:f3:01:3a:a6:61:53:
                    62:7f:c8:2c:3d:06:3a:ac:2d:ce:88:03:4b:ed:9b:
                    d1:7a:e3:14:43:24:c4:f6:42:b5:63:b9:55:be:0d:
                    84:b4:96:1f:50:fd:e8:b5:65:7e:06:29:ef:58:ed:
                    a6:19:19:54:88:81:90:e6:95:5a:06:6f:60:cf:0f:
                    ba:23:2a:01:b4:86:d5:cc:ec:be:e5:11:d8:4e:d4:
                    a5:22:fc:fb:74:1c:33:17:3d:01:f1:c7:a9:76:15:
                    8b:a7:99:2f:f2:bd:f1:ce:23:d7:93:c1:0c:31:a3:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:B6:9E:48:4F:D5:A3:F0:90:3A:BE:F3:5B:69:2B:6C:39:A1:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/75d14a19-6fa1-4355-89e7-fe0860a51ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34f8::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:f3:67:c5:af:25:73:e8:e3:d0:7d:a5:97:5b:fb:67:e7:
         ef:4a:ed:07:c9:32:6e:e6:6b:33:45:d4:4b:a6:da:2e:5d:a1:
         d2:80:0c:34:49:e7:b5:3e:27:47:cb:cf:a0:13:03:78:c0:60:
         97:c2:e7:29:03:2c:f7:c8:30:ef:97:bc:72:45:2e:e1:75:7b:
         4a:56:43:cd:57:c5:8e:97:da:13:60:75:38:c5:b6:c4:3f:d1:
         a5:30:54:f5:62:23:a9:33:6e:17:3b:ba:ca:9e:6d:2f:54:24:
         64:a0:27:59:5d:59:a3:b0:ae:0b:75:1b:5c:b6:b4:9f:51:e0:
         6c:88:9c:1a:8f:bc:21:66:ea:1d:16:b4:94:f2:96:a4:92:98:
         36:62:0c:f6:2c:7d:7d:56:dc:c4:2d:21:86:00:3c:31:47:84:
         37:c1:92:23:cb:12:ac:ea:4c:27:61:72:40:18:05:95:f8:30:
         0f:ae:69:dc:c8:1b:34:8e:eb:0c:1e:2a:99:4a:28:22:7a:22:
         43:57:7c:c2:01:14:4f:c2:07:94:79:47:69:aa:67:40:0a:2f:
         5b:e2:af:43:de:f8:65:50:ad:8f:47:67:e9:e7:80:74:cc:d3:
         e8:1b:64:0c:e9:41:61:84:68:2e:48:89:6f:16:f6:04:00:f0:
         15:08:c3:0f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUA+Z8EqmFCvT6uM5865c3+9Avn7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDU1MDA0WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MGIxYTZjNzkyNjdkMmVjNzdlNmVmMDQ4YmM3ZjdjNTU1
NjI1NmIwMjI0NzE5ZjRjMGQwZmEzMzVmMmNkYTdkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXe1V32bm7QBD5p3c4e7PxRrI5r5ufOsUslnOKFt7YqVX1
sN9dt3anM1ibYim1GVrDpw01deFnSSpuaSJLDDNKXWWbXKt8T9xxO12kMTEQyWce
N4BeSok0t1L1VhU0LGchRtPTrMJhKYfnfoWwaIlmcSuAJGDg54t4yTm5nTr4PnkI
knlpeoNugST4YAh9yfMBOqZhU2J/yCw9BjqsLc6IA0vtm9F64xRDJMT2QrVjuVW+
DYS0lh9Q/ei1ZX4GKe9Y7aYZGVSIgZDmlVoGb2DPD7ojKgG0htXM7L7lEdhO1KUi
/Pt0HDMXPQHxx6l2FYunmS/yvfHOI9eTwQwxoxbbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUeDS2nkhP1aPwkDq+81tpK2w5oSkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc1ZDE0YTE5LTZmYTEtNDM1NS04OWU3LWZlMDg2MGE1MWVmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANPgwDQYJKoZIhvcNAQELBQADggEBAGU782fFryVz6OPQfaWXW/tn
5+9K7QfJMm7mazNF1Eum2i5dodKADDRJ57U+J0fLz6ATA3jAYJfC5ykDLPfIMO+X
vHJFLuF1e0pWQ81XxY6X2hNgdTjFtsQ/0aUwVPViI6kzbhc7usqebS9UJGSgJ1ld
WaOwrgt1G1y2tJ9R4GyInBqPvCFm6h0WtJTylqSSmDZiDPYsfX1W3MQtIYYAPDFH
hDfBkiPLEqzqTCdhckAYBZX4MA+uadzIGzSO6wweKplKKCJ6IkNXfMIBFE/CB5R5
R2mqZ0AKL1vir0Pe+GVQrY9HZ+nngHTM0+gbZAzpQWGEaC5IiW8W9gQA8BUIww8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:24 2026 by rpki-client