Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5db278e-5629-48c6-8559-7413d2339c9c.roa
File:                     a5db278e-5629-48c6-8559-7413d2339c9c.roa (raw, json)
Hash identifier:          rM2vHYe8anAKEU9zIcnBqQYJglgb/QfcRVXQcnM2K9A=
Subject key identifier:   1F:AB:92:87:A3:A8:9A:2C:62:B4:1D:45:6A:20:78:78:5E:08:3A:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       64AE48D522B6AA1B596ECE0CF2D8530D2D597E1B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5db278e-5629-48c6-8559-7413d2339c9c.roa
Signing time:             Fri 13 Feb 2026 08:10:07 +0000
ROA not before:           Fri 13 Feb 2026 08:10:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b98::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ae:48:d5:22:b6:aa:1b:59:6e:ce:0c:f2:d8:53:0d:2d:59:7e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:10:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=9e7537234f8687052decb8b9a2b1407e7207a5e92f9e96cf339158fd8e8ca86b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:99:0c:3c:49:49:c6:e4:e8:93:27:74:0c:9b:
                    04:54:e7:71:53:5e:db:f7:d9:16:50:01:e1:79:c6:
                    11:5f:35:b3:be:8f:f7:4c:55:ee:de:28:07:f5:30:
                    53:94:a3:b2:e9:3e:b0:97:b9:5b:c7:6e:fe:ab:d6:
                    06:b0:22:e5:2c:52:7f:73:29:ab:20:21:b9:de:3b:
                    3b:fa:54:c9:89:0c:11:e1:6d:aa:6d:7c:5a:02:43:
                    7e:c3:8f:c1:38:9a:21:e0:3b:6d:55:49:da:32:eb:
                    03:30:e2:92:78:81:45:da:d2:aa:14:33:17:da:95:
                    16:8e:36:e0:34:e8:42:6a:84:28:a1:79:53:e2:4d:
                    7a:de:b2:a2:d7:4c:7b:61:c4:e8:c8:92:7e:ad:45:
                    bc:f1:a0:9a:37:0d:04:57:05:30:20:33:27:e1:75:
                    72:a2:9b:d6:66:21:bb:a5:32:1d:19:28:a7:44:21:
                    05:f6:7f:bb:0a:fc:a4:9e:1b:94:47:ee:73:a5:fc:
                    2a:f4:64:c9:d0:c5:6b:09:f2:c3:69:42:eb:40:61:
                    57:72:f1:4a:a3:a7:46:cb:de:f3:5e:ca:ab:46:49:
                    52:c4:44:1d:91:7c:fb:85:dd:39:cb:3a:14:80:7d:
                    60:b0:d9:02:c4:17:6d:b0:8d:d8:c5:92:7f:b3:ce:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:92:87:A3:A8:9A:2C:62:B4:1D:45:6A:20:78:78:5E:08:3A:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5db278e-5629-48c6-8559-7413d2339c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b98::/45

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:ea:1e:a8:ea:60:7b:29:00:a5:3b:b1:ad:3e:a4:87:da:
         d0:13:d6:60:22:56:ef:19:61:de:f7:0d:03:90:14:71:b2:19:
         e8:52:08:d2:c1:a4:38:e9:9c:68:e0:9e:52:cb:d5:9f:e9:81:
         52:5f:a8:19:c4:d9:5c:9e:04:20:89:d4:ec:77:34:0d:90:7d:
         27:e1:9c:50:fa:0a:d0:a8:eb:97:90:f7:6d:1b:76:70:61:9e:
         b2:08:88:bd:b1:3a:07:30:84:18:5f:f6:61:24:11:22:32:40:
         ee:c2:7a:36:9b:46:50:e7:4a:01:08:fc:29:2a:29:36:70:5e:
         e7:a6:ee:19:a0:a9:2f:90:07:c3:fd:8c:f6:fa:c2:81:a4:17:
         46:57:86:0e:a1:c7:79:62:b4:1f:4a:ff:9f:ba:cf:83:b7:01:
         d4:f0:60:27:ed:57:fc:c6:10:f2:22:28:69:f0:3f:ef:62:44:
         51:bd:66:d9:f8:4c:55:f5:56:3c:e6:85:17:45:07:1a:5a:09:
         27:2d:f9:57:90:3d:cf:3b:1c:5c:48:7c:c6:10:be:f7:37:c5:
         9a:f5:92:f8:0f:7b:e9:7d:6a:b8:bb:ad:4b:83:d0:b9:d7:d9:
         01:ec:52:4a:8c:0c:1a:ff:52:03:bf:15:f5:17:24:2a:01:f4:
         17:25:77:4a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZK5I1SK2qhtZbs4M8thTDS1ZfhswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDgxMDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTc1MzcyMzRmODY4NzA1MmRlY2I4YjlhMmIxNDA3ZTcy
MDdhNWU5MmY5ZTk2Y2YzMzkxNThmZDhlOGNhODZiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDzmQw8SUnG5OiTJ3QMmwRU53FTXtv32RZQAeF5xhFfNbO+
j/dMVe7eKAf1MFOUo7LpPrCXuVvHbv6r1gawIuUsUn9zKasgIbneOzv6VMmJDBHh
baptfFoCQ37Dj8E4miHgO21VSdoy6wMw4pJ4gUXa0qoUMxfalRaONuA06EJqhCih
eVPiTXresqLXTHthxOjIkn6tRbzxoJo3DQRXBTAgMyfhdXKim9ZmIbulMh0ZKKdE
IQX2f7sK/KSeG5RH7nOl/Cr0ZMnQxWsJ8sNpQutAYVdy8Uqjp0bL3vNeyqtGSVLE
RB2RfPuF3TnLOhSAfWCw2QLEF22wjdjFkn+zzu6nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUH6uSh6OomixitB1FaiB4eF4IOpAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2E1ZGIyNzhlLTU2MjktNDhjNi04NTU5LTc0MTNkMjMzOWM5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAO5gwDQYJKoZIhvcNAQELBQADggEBAFE/6h6o6mB7KQClO7GtPqSH
2tAT1mAiVu8ZYd73DQOQFHGyGehSCNLBpDjpnGjgnlLL1Z/pgVJfqBnE2VyeBCCJ
1Ox3NA2QfSfhnFD6CtCo65eQ920bdnBhnrIIiL2xOgcwhBhf9mEkESIyQO7Cejab
RlDnSgEI/CkqKTZwXuem7hmgqS+QB8P9jPb6woGkF0ZXhg6hx3litB9K/5+6z4O3
AdTwYCftV/zGEPIiKGnwP+9iRFG9Ztn4TFX1VjzmhRdFBxpaCSct+VeQPc87HFxI
fMYQvvc3xZr1kvgPe+l9ari7rUuD0LnX2QHsUkqMDBr/UgO/FfUXJCoB9Bcld0o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:49 2026 by rpki-client