Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76c2b6f4-8c5d-41de-8b3a-697b625b08f8.roa
File:                     76c2b6f4-8c5d-41de-8b3a-697b625b08f8.roa (raw, json)
Hash identifier:          0lxTciWLFcnND0mnP2EZbF/XbRwXoaX4E1KoL8B1g2k=
Subject key identifier:   09:AC:D9:FB:9B:46:16:65:1F:9B:2B:73:B4:60:C9:7B:9E:87:3B:4D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       38D50BCB69867BC64D70B7D1E489C5D02A9C45FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76c2b6f4-8c5d-41de-8b3a-697b625b08f8.roa
Signing time:             Fri 13 Feb 2026 12:00:49 +0000
ROA not before:           Fri 13 Feb 2026 12:00:49 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d5:0b:cb:69:86:7b:c6:4d:70:b7:d1:e4:89:c5:d0:2a:9c:45:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:00:49 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8b7e95701fedc4c802d7aef6d98dd9cdf34c46d48ddf63e3a6ffd1f4b24ac2aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:b9:65:e2:3d:4b:4b:ba:f4:a9:fb:a7:36:
                    9a:60:f4:ec:58:b3:08:41:14:d9:44:d3:12:ec:64:
                    f7:69:d1:49:ab:23:39:66:79:50:71:36:fc:7d:c7:
                    74:44:10:88:59:3c:6f:6a:37:37:c2:d4:81:77:ef:
                    92:dd:a1:43:14:47:c5:f9:c2:92:34:66:38:7a:d1:
                    e7:bb:44:b3:c6:4f:25:90:fd:cf:9e:1e:57:9b:0c:
                    0a:14:d2:44:3b:6e:a4:fa:fe:7f:dd:38:d0:79:06:
                    aa:f2:66:ea:07:2a:27:b2:77:f0:0b:c1:88:73:c7:
                    5e:24:7b:21:82:ec:2f:f1:71:b4:43:a3:1a:2d:62:
                    54:1e:13:57:25:68:d8:5f:85:ae:c2:2d:44:9c:7b:
                    fe:2c:d0:d8:15:eb:67:da:1f:5a:17:9d:b0:1b:2e:
                    29:09:18:7d:ae:f7:5c:b0:ef:e3:89:f0:d2:34:65:
                    4d:4b:6f:aa:00:b7:40:73:3f:36:a8:28:94:00:ce:
                    38:91:49:92:68:a8:ce:1c:b7:6a:11:d1:fc:43:b4:
                    dd:5a:b7:ff:4b:2f:21:ac:4d:be:d1:93:55:d7:39:
                    b8:96:52:59:30:01:73:89:59:5e:33:42:ee:3f:90:
                    c9:58:26:c4:9d:f2:20:11:84:96:91:90:5a:56:dc:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:D9:FB:9B:46:16:65:1F:9B:2B:73:B4:60:C9:7B:9E:87:3B:4D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76c2b6f4-8c5d-41de-8b3a-697b625b08f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bec::/46

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:28:be:ed:ac:b2:5f:4a:77:84:26:e0:17:56:e6:82:3e:
         fe:80:21:68:21:ea:48:a5:34:a3:63:3e:6e:7a:7a:a1:37:79:
         f2:d2:c3:c7:7b:f6:dd:0a:c7:b7:55:83:14:7b:25:98:e4:1a:
         79:a3:e7:79:74:f3:9f:ed:4d:9a:16:ec:af:d9:07:18:17:83:
         5f:27:04:9b:1a:64:36:e6:78:1e:cc:98:3f:17:af:c4:06:03:
         88:cf:d6:20:95:90:94:59:9b:6f:97:f5:be:15:7d:63:0a:ac:
         55:c7:eb:52:9b:2d:2e:ef:2a:ed:90:89:5b:6d:20:04:6f:90:
         c7:40:67:86:0a:86:62:14:19:c5:cb:8a:3d:f7:77:94:7e:81:
         6d:51:22:97:ff:b4:62:61:48:43:62:82:8a:ad:d2:78:ed:5d:
         ac:0a:8d:0f:60:48:36:09:6d:4a:ce:95:95:52:20:6f:cb:7b:
         50:d4:3f:86:78:b3:47:70:9a:97:ed:3d:65:54:c8:44:0f:07:
         d6:ee:62:5a:56:1d:85:72:01:2a:c6:60:ef:ab:a1:67:ba:b5:
         d7:14:49:58:9d:13:b9:62:8e:54:96:ca:ff:f1:83:dc:1a:a1:
         21:0a:0a:5d:04:22:96:0d:74:84:a4:fc:a0:bf:bc:7c:8b:53:
         86:77:88:ea
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUONULy2mGe8ZNcLfR5InF0CqcRfowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTIwMDQ5WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YjdlOTU3MDFmZWRjNGM4MDJkN2FlZjZkOThkZDljZGYz
NGM0NmQ0OGRkZjYzZTNhNmZmZDFmNGIyNGFjMmFhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJM7ll4j1LS7r0qfunNppg9OxYswhBFNlE0xLsZPdp0Umr
IzlmeVBxNvx9x3REEIhZPG9qNzfC1IF375LdoUMUR8X5wpI0Zjh60ee7RLPGTyWQ
/c+eHlebDAoU0kQ7bqT6/n/dONB5BqryZuoHKieyd/ALwYhzx14keyGC7C/xcbRD
oxotYlQeE1claNhfha7CLUSce/4s0NgV62faH1oXnbAbLikJGH2u91yw7+OJ8NI0
ZU1Lb6oAt0BzPzaoKJQAzjiRSZJoqM4ct2oR0fxDtN1at/9LLyGsTb7Rk1XXObiW
UlkwAXOJWV4zQu4/kMlYJsSd8iARhJaRkFpW3MWFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCazZ+5tGFmUfmytztGDJe56HO00wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc2YzJiNmY0LThjNWQtNDFkZS04YjNhLTY5N2I2MjViMDhmOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAK+wwDQYJKoZIhvcNAQELBQADggEBAFHBKL7trLJfSneEJuAXVuaC
Pv6AIWgh6kilNKNjPm56eqE3efLSw8d79t0Kx7dVgxR7JZjkGnmj53l085/tTZoW
7K/ZBxgXg18nBJsaZDbmeB7MmD8Xr8QGA4jP1iCVkJRZm2+X9b4VfWMKrFXH61Kb
LS7vKu2QiVttIARvkMdAZ4YKhmIUGcXLij33d5R+gW1RIpf/tGJhSENigoqt0njt
XawKjQ9gSDYJbUrOlZVSIG/Le1DUP4Z4s0dwmpftPWVUyEQPB9buYlpWHYVyASrG
YO+roWe6tdcUSVidE7lijlSWyv/xg9waoSEKCl0EIpYNdISk/KC/vHyLU4Z3iOo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:24 2026 by rpki-client