Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935f8a34-ada0-4d5a-b7be-aab8b4879b1d.roa
File:                     935f8a34-ada0-4d5a-b7be-aab8b4879b1d.roa (raw, json)
Hash identifier:          D3CG8ZHfkOrI4PqXjlpDtprJFGcWtwZm9pFIHG9UqDo=
Subject key identifier:   C6:C1:F4:B0:A3:F0:C0:CA:D7:93:C5:60:3A:13:37:88:89:FB:CA:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       134EBE0972951C4E71F428D8EA2E89B3440688D6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935f8a34-ada0-4d5a-b7be-aab8b4879b1d.roa
Signing time:             Fri 13 Feb 2026 10:20:54 +0000
ROA not before:           Fri 13 Feb 2026 10:20:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4e:be:09:72:95:1c:4e:71:f4:28:d8:ea:2e:89:b3:44:06:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:20:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=17433871db70f39a944529b13fa0d361d47fadf6280f08baa73476ac66ca8598, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b8:e8:8a:42:53:6e:c5:c1:ff:85:02:91:a8:
                    b0:b6:dd:cf:01:51:04:71:cd:5d:d5:84:a9:14:6d:
                    b6:c4:47:59:47:11:b7:20:9f:cc:f8:ce:cd:84:dc:
                    ad:f6:ff:32:77:4d:1c:8f:be:4e:ec:4a:7a:84:b7:
                    76:67:f8:ea:97:97:1b:5c:27:70:46:88:b8:1c:0d:
                    9d:f6:58:4d:01:08:f0:ba:32:2b:e3:5b:c0:f7:de:
                    b8:98:bb:af:df:5a:07:7a:1c:26:3f:68:30:22:e4:
                    05:d0:b3:8e:95:a3:6e:ce:f9:4a:b7:8c:4b:85:c1:
                    92:a5:5c:5b:02:da:a5:e9:a9:2a:d9:62:4a:15:12:
                    57:41:9b:b3:6e:be:80:b2:03:6f:b2:64:fb:ae:1a:
                    20:69:13:e9:1a:e3:ec:a6:10:3b:27:44:23:ad:8a:
                    cc:e1:27:4f:0b:78:6c:e1:7b:56:99:bc:67:5e:8a:
                    08:30:36:06:ec:21:0e:b5:8a:c5:08:3a:b0:9f:6d:
                    84:a7:15:f6:6a:e8:6e:4b:da:ec:f8:21:2b:00:ee:
                    e2:ae:50:1a:9c:63:4d:bc:f2:c0:e4:4a:0e:80:5f:
                    d1:38:78:42:10:a1:12:52:e1:ba:0a:62:88:da:e0:
                    b7:d5:aa:b0:ea:a5:7d:14:91:9d:97:6b:7e:65:01:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:F4:B0:A3:F0:C0:CA:D7:93:C5:60:3A:13:37:88:89:FB:CA:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/935f8a34-ada0-4d5a-b7be-aab8b4879b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32c0::/45

    Signature Algorithm: sha256WithRSAEncryption
         ba:9a:cb:f0:78:b7:75:b9:ee:c3:52:10:da:21:4f:95:f2:5f:
         7f:e5:6c:e3:06:8b:17:b9:04:0f:f3:c2:ad:1c:9c:1f:64:1d:
         3a:fb:73:f4:6d:00:8d:32:cf:8e:0c:7f:2d:0a:54:bd:bb:5c:
         03:50:5b:c5:bb:68:2a:9f:7e:94:90:50:33:59:96:51:fa:79:
         19:ed:69:8d:00:fc:fe:79:0d:7d:88:1f:7f:b0:e3:21:cd:84:
         b7:e5:4e:b9:5d:eb:53:db:93:bb:2c:32:11:43:76:71:a6:85:
         71:81:53:19:7b:8e:2e:6b:09:5d:fc:3e:88:3e:95:e8:8d:9d:
         98:65:aa:07:65:26:67:35:42:76:0b:5a:10:21:f5:ed:42:0f:
         5b:d0:c4:04:b6:2e:69:69:9c:6b:9c:24:db:37:53:90:c7:de:
         11:62:b6:3b:22:d5:70:9c:70:5d:e3:9a:f5:c1:ef:79:c2:8b:
         9d:ed:56:49:df:6b:d6:45:3e:52:49:b0:9d:d3:f8:f1:c4:4d:
         8a:c6:89:84:a9:93:60:ef:c2:06:e0:9e:d4:23:af:6c:eb:8f:
         64:a5:1f:cb:73:7c:c1:95:5b:a3:86:1e:d7:c6:6b:aa:ab:4b:
         a4:2b:b5:8a:0d:f1:f7:14:70:11:5a:cc:b3:e3:1d:5a:63:b0:
         71:75:36:75
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUE06+CXKVHE5x9CjY6i6Js0QGiNYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTAyMDU0WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNzQzMzg3MWRiNzBmMzlhOTQ0NTI5YjEzZmEwZDM2MWQ0
N2ZhZGY2MjgwZjA4YmFhNzM0NzZhYzY2Y2E4NTk4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD1uOiKQlNuxcH/hQKRqLC23c8BUQRxzV3VhKkUbbbER1lH
Ebcgn8z4zs2E3K32/zJ3TRyPvk7sSnqEt3Zn+OqXlxtcJ3BGiLgcDZ32WE0BCPC6
MivjW8D33riYu6/fWgd6HCY/aDAi5AXQs46Vo27O+Uq3jEuFwZKlXFsC2qXpqSrZ
YkoVEldBm7NuvoCyA2+yZPuuGiBpE+ka4+ymEDsnRCOtiszhJ08LeGzhe1aZvGde
iggwNgbsIQ61isUIOrCfbYSnFfZq6G5L2uz4ISsA7uKuUBqcY0288sDkSg6AX9E4
eEIQoRJS4boKYoja4LfVqrDqpX0UkZ2Xa35lASO1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxsH0sKPwwMrXk8VgOhM3iIn7ypUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzkzNWY4YTM0LWFkYTAtNGQ1YS1iN2JlLWFhYjhiNDg3OWIxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAMsAwDQYJKoZIhvcNAQELBQADggEBALqay/B4t3W57sNSENohT5Xy
X3/lbOMGixe5BA/zwq0cnB9kHTr7c/RtAI0yz44Mfy0KVL27XANQW8W7aCqffpSQ
UDNZllH6eRntaY0A/P55DX2IH3+w4yHNhLflTrld61Pbk7ssMhFDdnGmhXGBUxl7
ji5rCV38Pog+leiNnZhlqgdlJmc1QnYLWhAh9e1CD1vQxAS2LmlpnGucJNs3U5DH
3hFitjsi1XCccF3jmvXB73nCi53tVknfa9ZFPlJJsJ3T+PHETYrGiYSpk2Dvwgbg
ntQjr2zrj2SlH8tzfMGVW6OGHtfGa6qrS6QrtYoN8fcUcBFazLPjHVpjsHF1NnU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:07 2026 by rpki-client