Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa
File:                     9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa (raw, json)
Hash identifier:          ZTkBgtLfs/IEO2rcxDoDoTbFpg6FejYaG9h4vhKS94A=
Subject key identifier:   BB:8B:FD:81:85:1D:8F:05:94:F4:45:46:B0:E2:6D:A6:04:77:3B:95
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6FCB53F89A8147BFDB1E4BA52C1174C080836153
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa
Signing time:             Fri 13 Feb 2026 10:31:49 +0000
ROA not before:           Fri 13 Feb 2026 10:31:49 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35b8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:53:f8:9a:81:47:bf:db:1e:4b:a5:2c:11:74:c0:80:83:61:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:31:49 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c17480ee53aaa5a11af68413cac79a575668fa6408432d573d526078b11215d3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:aa:26:5b:94:5d:62:ff:11:51:2c:5d:3f:
                    69:d8:d8:f1:2b:34:19:20:cd:c7:8d:59:e5:b2:c4:
                    ba:90:d8:a9:15:22:4a:ff:a0:03:52:36:40:25:c2:
                    c4:8c:7c:25:68:70:84:b9:1a:a0:fa:a6:bc:1a:59:
                    f7:d0:7a:67:b0:a9:34:ba:4a:0a:5a:cb:7c:82:e7:
                    12:8d:f9:01:e2:cb:3f:2e:3d:2a:28:56:4e:d3:e8:
                    ff:9b:77:5e:75:c9:60:ec:b6:7c:e4:11:d8:1b:af:
                    5c:27:21:cb:1c:bf:5c:62:70:2c:e6:38:90:cf:19:
                    25:ef:cd:d0:b4:cc:81:77:44:2e:60:b3:9a:8d:8b:
                    19:44:a4:94:ca:15:ee:b8:71:e8:60:c2:2b:0d:c7:
                    c7:e0:94:22:2a:90:48:9e:e4:f4:48:8f:4a:61:26:
                    94:f0:2f:32:5f:4d:4b:76:2a:3f:08:d6:0b:d9:b0:
                    75:a2:90:ae:23:83:f0:5c:c1:07:29:ea:86:60:2b:
                    0c:d3:fb:47:69:f8:97:cd:34:da:83:02:6d:cf:e1:
                    ec:5b:14:eb:8c:45:28:1d:87:e8:6c:ad:22:e3:bc:
                    d3:2c:3c:1a:21:e8:26:78:3d:65:60:be:4f:7f:17:
                    90:a4:53:9f:e7:4c:22:91:15:fd:30:30:87:dd:7f:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:FD:81:85:1D:8F:05:94:F4:45:46:B0:E2:6D:A6:04:77:3B:95
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35b8::/47

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:40:c2:b0:e6:1e:66:1c:73:e9:85:58:92:18:ac:5d:35:
         d9:a8:ea:68:3a:25:0c:22:69:df:0d:bd:38:64:7b:f5:eb:1e:
         0f:1a:dc:b3:f0:d7:bd:4a:85:cc:6f:dd:ff:3d:c6:b4:f5:47:
         c1:95:45:b2:5f:5c:49:c9:4f:50:f8:4d:39:4b:3d:70:92:c1:
         06:63:f3:9b:e5:df:b8:a6:5c:19:f8:b0:1a:59:20:c4:2c:a7:
         aa:7e:8a:7c:6e:c3:2f:cc:dd:95:0f:82:57:77:b5:c2:e2:0f:
         24:93:ae:ff:1e:30:a3:dc:3f:f8:11:da:be:f5:a9:00:24:e7:
         83:22:f3:0d:47:81:18:f5:ee:d7:06:12:2c:c4:95:76:73:10:
         f4:03:f8:7b:ce:a4:0a:a9:70:cb:45:41:df:66:2d:68:6f:cb:
         7c:18:47:53:68:3e:7a:48:9a:e3:3c:20:f1:ae:81:69:fa:17:
         69:be:46:a7:09:e7:f8:6b:f0:2a:ca:18:4d:58:88:7b:e9:00:
         bd:cf:4e:0c:08:9d:77:e2:33:e3:22:0b:75:a0:0b:10:13:fa:
         d2:2e:e9:87:5f:99:c0:da:73:fd:b8:a6:bb:1f:51:1d:ac:6d:
         7f:1c:be:42:01:00:97:a2:50:f3:ea:31:e7:43:72:cd:4d:0f:
         9f:c9:d4:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUb8tT+JqBR7/bHkulLBF0wICDYVMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTAzMTQ5WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMTc0ODBlZTUzYWFhNWExMWFmNjg0MTNjYWM3OWE1NzU2
NjhmYTY0MDg0MzJkNTczZDUyNjA3OGIxMTIxNWQzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcp6omW5RdYv8RUSxdP2nY2PErNBkgzceNWeWyxLqQ2KkV
Ikr/oANSNkAlwsSMfCVocIS5GqD6prwaWffQemewqTS6Sgpay3yC5xKN+QHiyz8u
PSooVk7T6P+bd151yWDstnzkEdgbr1wnIcscv1xicCzmOJDPGSXvzdC0zIF3RC5g
s5qNixlEpJTKFe64cehgwisNx8fglCIqkEie5PRIj0phJpTwLzJfTUt2Kj8I1gvZ
sHWikK4jg/BcwQcp6oZgKwzT+0dp+JfNNNqDAm3P4exbFOuMRSgdh+hsrSLjvNMs
PBoh6CZ4PWVgvk9/F5CkU5/nTCKRFf0wMIfdf2u9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUu4v9gYUdjwWU9EVGsOJtpgR3O5UwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzljYjFhMTc2LWRmZGEtNDAyMy1hODUzLWM2NGEyZmJiOTVmYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANbgwDQYJKoZIhvcNAQELBQADggEBAJomQMKw5h5mHHPphViSGKxd
Ndmo6mg6JQwiad8NvThke/XrHg8a3LPw171Khcxv3f89xrT1R8GVRbJfXEnJT1D4
TTlLPXCSwQZj85vl37imXBn4sBpZIMQsp6p+inxuwy/M3ZUPgld3tcLiDySTrv8e
MKPcP/gR2r71qQAk54Mi8w1HgRj17tcGEizElXZzEPQD+HvOpAqpcMtFQd9mLWhv
y3wYR1NoPnpImuM8IPGugWn6F2m+RqcJ5/hr8CrKGE1YiHvpAL3PTgwInXfiM+Mi
C3WgCxAT+tIu6YdfmcDac/24prsfUR2sbX8cvkIBAJeiUPPqMedDcs1ND5/J1Lo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:07:23 2026 by rpki-client