Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83a9594b-62d0-42ed-9cc0-934d5be676f9.roa
File:                     83a9594b-62d0-42ed-9cc0-934d5be676f9.roa (raw, json)
Hash identifier:          gwfFNikDYWczdh7m5EhZ150tTrwTS7Jg/WC5QUrV7Jg=
Subject key identifier:   2D:79:37:E1:98:D6:9E:E7:66:33:FD:B6:0A:10:5C:75:98:48:63:ED
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       497B9D4A49B810BD20D9836E6A322F5D1E90851F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83a9594b-62d0-42ed-9cc0-934d5be676f9.roa
Signing time:             Fri 13 Feb 2026 11:50:06 +0000
ROA not before:           Fri 13 Feb 2026 11:50:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7b:9d:4a:49:b8:10:bd:20:d9:83:6e:6a:32:2f:5d:1e:90:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:50:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b4b1fe7df49c167ed1059cca16d366f2e2115843ccaf429bf974de4c00bbb3fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:d0:c6:95:7e:90:50:2f:32:2d:01:b3:00:
                    06:86:59:fe:b7:47:13:7e:44:37:10:e7:13:60:4e:
                    70:0f:fc:23:20:34:21:73:19:8a:03:1d:2b:07:36:
                    f9:17:7c:53:81:7a:62:45:95:00:09:e9:79:96:ce:
                    51:3c:52:d9:f5:06:9f:62:eb:26:35:4f:6f:94:c4:
                    2c:7b:da:a2:c2:e1:da:b8:4a:b3:28:87:00:ad:ac:
                    3a:cb:6d:0c:0b:ff:b8:8c:00:ed:d3:44:6c:ac:07:
                    8c:7c:97:c5:25:f3:86:f5:46:c4:a4:b7:8b:be:ec:
                    e3:d8:ac:6b:e6:be:55:56:bd:0f:54:58:3f:dc:c8:
                    1c:7a:72:ed:6c:ab:2f:0d:83:51:f2:e4:c0:18:2a:
                    d0:36:26:11:5d:ad:aa:5c:74:be:97:3d:7d:24:70:
                    a7:7a:ce:7f:35:b6:78:ce:da:d2:e1:4f:9a:bd:4d:
                    8a:4a:65:99:90:c9:57:85:b7:d5:2d:71:b7:e5:34:
                    bd:22:a7:dd:a0:ac:e3:e9:2b:88:45:94:14:17:74:
                    60:9c:21:8f:59:7f:8a:42:58:33:31:a2:17:0b:d4:
                    73:d1:be:4b:4e:e4:c5:91:b1:93:30:57:f2:ab:b7:
                    f7:21:10:7d:15:5d:83:ec:9f:bc:23:dd:6f:ae:af:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:79:37:E1:98:D6:9E:E7:66:33:FD:B6:0A:10:5C:75:98:48:63:ED
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83a9594b-62d0-42ed-9cc0-934d5be676f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2200::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:47:f3:83:ae:5e:49:d1:74:08:35:d4:e7:da:05:fb:34:0a:
         20:ac:30:41:12:91:31:79:31:86:5c:58:18:97:94:6e:ec:f6:
         c9:ba:5b:46:ba:7e:17:12:c6:04:8f:cd:77:10:00:06:00:2a:
         28:31:5e:6d:cd:4b:5c:94:03:90:71:12:66:36:24:5f:0c:be:
         b2:ec:4f:85:39:56:a5:ba:22:3d:1b:97:a1:d5:ba:08:a0:27:
         d0:27:9d:1e:61:7d:fa:5e:01:7f:07:93:47:4c:4d:03:b0:52:
         6a:89:5c:66:9a:00:d8:d3:01:63:fd:7c:0d:0d:d9:31:82:ba:
         17:9e:db:90:30:de:b2:cd:25:ef:71:18:3a:1f:10:c1:f4:ee:
         1e:a3:12:26:15:7c:02:18:e3:33:7d:1c:7d:52:78:22:ff:1a:
         eb:b0:72:50:86:d2:5c:ca:80:2e:90:d4:37:a2:a8:22:c1:6e:
         e9:a5:50:4d:27:84:be:c3:9c:0e:da:fc:f1:a4:96:72:bb:d2:
         14:d5:cb:c1:32:d7:d1:be:e6:4b:9f:06:bb:d0:5e:68:83:d7:
         c2:dd:f8:60:5a:a5:d2:80:2b:be:52:03:88:89:72:c3:9c:e8:
         4a:25:82:83:80:bd:dc:b5:95:88:1b:b8:2c:b4:de:5d:36:6f:
         92:b7:75:23
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSXudSkm4EL0g2YNuajIvXR6QhR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTE1MDA2WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNGIxZmU3ZGY0OWMxNjdlZDEwNTljY2ExNmQzNjZmMmUy
MTE1ODQzY2NhZjQyOWJmOTc0ZGU0YzAwYmJiM2ZlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqMtDGlX6QUC8yLQGzAAaGWf63RxN+RDcQ5xNgTnAP/CMg
NCFzGYoDHSsHNvkXfFOBemJFlQAJ6XmWzlE8Utn1Bp9i6yY1T2+UxCx72qLC4dq4
SrMohwCtrDrLbQwL/7iMAO3TRGysB4x8l8Ul84b1RsSkt4u+7OPYrGvmvlVWvQ9U
WD/cyBx6cu1sqy8Ng1Hy5MAYKtA2JhFdrapcdL6XPX0kcKd6zn81tnjO2tLhT5q9
TYpKZZmQyVeFt9UtcbflNL0ip92grOPpK4hFlBQXdGCcIY9Zf4pCWDMxohcL1HPR
vktO5MWRsZMwV/Krt/chEH0VXYPsn7wj3W+urwgNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULXk34ZjWnudmM/22ChBcdZhIY+0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzgzYTk1OTRiLTYyZDAtNDJlZC05Y2MwLTkzNGQ1YmU2NzZmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAIgAwDQYJKoZIhvcNAQELBQADggEBAGhH84OuXknRdAg11OfaBfs0
CiCsMEESkTF5MYZcWBiXlG7s9sm6W0a6fhcSxgSPzXcQAAYAKigxXm3NS1yUA5Bx
EmY2JF8MvrLsT4U5VqW6Ij0bl6HVugigJ9AnnR5hffpeAX8Hk0dMTQOwUmqJXGaa
ANjTAWP9fA0N2TGCuhee25Aw3rLNJe9xGDofEMH07h6jEiYVfAIY4zN9HH1SeCL/
GuuwclCG0lzKgC6Q1DeiqCLBbumlUE0nhL7DnA7a/PGklnK70hTVy8Ey19G+5kuf
BrvQXmiD18Ld+GBapdKAK75SA4iJcsOc6EolgoOAvdy1lYgbuCy03l02b5K3dSM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:21 2026 by rpki-client