Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d3bac86-c080-4630-9ae9-f4576409e624.roa
File:                     7d3bac86-c080-4630-9ae9-f4576409e624.roa (raw, json)
Hash identifier:          ZqOR0GK81wMNgxN7PS8eR59xqaC2ymqZaVtnUgVC69w=
Subject key identifier:   B7:59:AB:22:6E:8F:2F:C2:CA:43:8C:E5:18:AB:50:D5:DD:FA:F9:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6F102C5636E24DD814ED57E03A9F1EB938592A11
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d3bac86-c080-4630-9ae9-f4576409e624.roa
Signing time:             Fri 13 Feb 2026 12:32:16 +0000
ROA not before:           Fri 13 Feb 2026 12:32:16 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e38::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:10:2c:56:36:e2:4d:d8:14:ed:57:e0:3a:9f:1e:b9:38:59:2a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:32:16 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=883ae9db026ff1529fa2acbb9465c1ce8fbc326f69fcc2813a4c39802f77fc49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:d1:4d:2d:d1:91:c0:26:5e:14:b7:b9:e4:
                    8a:bf:bd:d3:67:05:34:95:39:47:9d:30:a1:c8:fb:
                    8b:77:25:cc:c8:59:39:39:2a:36:87:ce:4d:43:15:
                    9b:15:0f:9a:56:76:3e:23:b3:a0:56:82:c5:24:45:
                    36:8f:5e:4c:bd:0c:64:50:d2:36:fa:4a:00:9d:d1:
                    bc:84:ef:45:35:15:93:e6:88:ef:41:b3:a0:6b:2b:
                    3b:09:c5:d0:b1:39:78:e6:55:18:dd:af:cb:0a:2b:
                    80:2e:8c:cd:e6:33:71:a1:49:91:83:35:3c:10:d4:
                    9f:af:fd:ff:f6:87:f0:15:41:61:1f:86:f1:b2:29:
                    26:b6:07:fe:87:ec:68:80:cf:a1:84:49:c1:91:c1:
                    c5:3b:66:da:f5:ac:42:5f:ea:6c:e6:35:2d:fc:38:
                    1a:26:61:35:14:74:8e:62:27:ff:85:ac:8c:c0:ed:
                    2d:eb:d3:cf:ac:03:de:9a:e1:74:23:c2:39:ac:53:
                    01:ea:f3:8f:a5:97:1b:da:04:4c:86:ff:46:5b:15:
                    d6:db:9c:8e:fc:19:9e:78:15:c4:34:72:07:5c:dd:
                    1c:bf:e1:c0:31:a0:d8:c2:94:b0:ad:fa:f6:99:ed:
                    2e:c8:50:41:94:d4:46:54:51:be:a9:20:df:d0:dc:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:AB:22:6E:8F:2F:C2:CA:43:8C:E5:18:AB:50:D5:DD:FA:F9:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d3bac86-c080-4630-9ae9-f4576409e624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e38::/46

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:8a:e7:43:bb:6a:11:e4:3a:7a:4c:98:d0:ed:ea:8b:b2:
         04:45:fd:b5:83:6f:d5:74:23:68:12:11:84:38:a4:b7:59:89:
         82:f4:a3:d1:0a:a4:00:06:a1:f3:a4:e0:e5:ee:ac:82:b1:f6:
         01:ba:b2:4f:89:54:de:81:37:17:70:67:ae:21:e1:9b:f9:4f:
         64:44:ce:b8:33:d5:f2:da:70:72:6c:01:75:60:e5:3d:2e:32:
         ba:09:fb:7e:65:8a:1e:fa:8d:f6:0e:7a:91:2a:c6:2f:fc:93:
         44:43:b9:27:85:17:33:c3:1f:78:da:53:53:96:42:09:06:03:
         5a:bd:8e:0f:6c:b8:81:fd:fa:fc:9f:bc:22:82:84:e1:50:2b:
         3a:65:02:9c:69:18:d1:17:e1:06:ed:ff:55:b6:24:2c:b4:5c:
         07:87:44:54:13:b1:39:7a:67:c1:a1:42:bb:68:d0:38:53:b8:
         01:2c:c7:d6:9d:b9:d2:51:a3:44:42:8f:52:ca:7b:34:da:0a:
         21:1a:33:67:31:9e:59:7b:e7:03:76:a5:41:0d:88:85:88:03:
         25:87:81:6c:ff:41:a5:20:9b:70:bf:b7:58:04:ff:21:ab:66:
         b8:72:3d:9b:b4:d1:1d:ea:93:f5:cb:6b:ad:a1:b5:ff:45:23:
         c0:54:f8:ef
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbxAsVjbiTdgU7VfgOp8euThZKhEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTIzMjE2WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODNhZTlkYjAyNmZmMTUyOWZhMmFjYmI5NDY1YzFjZThm
YmMzMjZmNjlmY2MyODEzYTRjMzk4MDJmNzdmYzQ5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjiNFNLdGRwCZeFLe55Iq/vdNnBTSVOUedMKHI+4t3JczI
WTk5KjaHzk1DFZsVD5pWdj4js6BWgsUkRTaPXky9DGRQ0jb6SgCd0byE70U1FZPm
iO9Bs6BrKzsJxdCxOXjmVRjdr8sKK4AujM3mM3GhSZGDNTwQ1J+v/f/2h/AVQWEf
hvGyKSa2B/6H7GiAz6GEScGRwcU7Ztr1rEJf6mzmNS38OBomYTUUdI5iJ/+FrIzA
7S3r08+sA96a4XQjwjmsUwHq84+llxvaBEyG/0ZbFdbbnI78GZ54FcQ0cgdc3Ry/
4cAxoNjClLCt+vaZ7S7IUEGU1EZUUb6pIN/Q3IFZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUt1mrIm6PL8LKQ4zlGKtQ1d36+U8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdkM2JhYzg2LWMwODAtNDYzMC05YWU5LWY0NTc2NDA5ZTYyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPjgwDQYJKoZIhvcNAQELBQADggEBAJ2PiudDu2oR5Dp6TJjQ7eqL
sgRF/bWDb9V0I2gSEYQ4pLdZiYL0o9EKpAAGofOk4OXurIKx9gG6sk+JVN6BNxdw
Z64h4Zv5T2REzrgz1fLacHJsAXVg5T0uMroJ+35lih76jfYOepEqxi/8k0RDuSeF
FzPDH3jaU1OWQgkGA1q9jg9suIH9+vyfvCKChOFQKzplApxpGNEX4Qbt/1W2JCy0
XAeHRFQTsTl6Z8GhQrto0DhTuAEsx9adudJRo0RCj1LKezTaCiEaM2cxnll75wN2
pUENiIWIAyWHgWz/QaUgm3C/t1gE/yGrZrhyPZu00R3qk/XLa62htf9FI8BU+O8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:12 2026 by rpki-client