Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c01fcc42-7820-4d81-bd76-20430ff924f4.roa
File:                     c01fcc42-7820-4d81-bd76-20430ff924f4.roa (raw, json)
Hash identifier:          16br5aKa5q/x4a0hZ5wrUZYjclbGScbDLbaWqd98fRA=
Subject key identifier:   48:9A:52:72:FD:90:02:50:B4:51:10:60:74:E7:46:14:CC:52:ED:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3DB49C610F3A2631655EC659D358A967329688FA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c01fcc42-7820-4d81-bd76-20430ff924f4.roa
Signing time:             Thu 12 Feb 2026 02:01:25 +0000
ROA not before:           Thu 12 Feb 2026 02:01:25 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f30::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b4:9c:61:0f:3a:26:31:65:5e:c6:59:d3:58:a9:67:32:96:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:01:25 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=731e0e0f09fff644df673fd44c967adff51e8a7bb964e7d41f44aea957e2e46a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:be:69:2b:fa:62:81:47:b6:3c:90:be:89:
                    04:f7:59:42:d6:54:ad:bd:67:14:47:e2:fc:47:79:
                    5a:ce:d1:49:a0:52:65:aa:c7:ee:67:19:93:e6:07:
                    ce:fd:f8:24:3b:ce:d2:3f:9e:18:3f:06:0e:15:a3:
                    71:78:c3:3d:66:13:e4:2a:48:53:59:68:d0:7d:60:
                    3a:ec:5b:78:ef:7e:17:9d:8a:e8:3d:e3:30:39:b8:
                    3d:94:fd:75:05:db:09:76:7a:f1:5e:e0:6e:e9:37:
                    d1:ca:b1:e9:0a:2f:14:47:e1:5c:da:eb:2b:94:42:
                    64:69:6d:1d:43:6c:f0:3b:b2:18:6f:d0:4a:34:7a:
                    67:cb:4b:56:22:ca:43:d5:b4:f4:2c:f0:d0:85:fc:
                    34:ed:c1:ff:9d:d6:ad:34:d6:1a:4a:35:92:c3:ce:
                    35:a3:6a:2e:11:8c:92:4c:db:9d:ba:77:a4:74:dd:
                    54:00:ee:5a:ee:d9:34:10:57:a1:cf:7a:14:15:d3:
                    b3:c8:f0:e5:cd:11:58:e0:b0:0b:74:3e:16:fa:3d:
                    6c:00:4a:ad:49:6e:e3:ea:e0:48:6c:f0:70:86:df:
                    20:ac:0f:3a:3a:43:5e:a7:57:06:3b:a0:58:4f:1a:
                    3e:09:59:63:af:53:9f:f5:62:6d:3a:df:a8:99:c6:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:52:72:FD:90:02:50:B4:51:10:60:74:E7:46:14:CC:52:ED:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c01fcc42-7820-4d81-bd76-20430ff924f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f30::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:c7:9e:74:b3:24:41:c4:45:ab:7a:93:08:60:02:5f:af:
         fc:bb:12:a8:ec:d7:42:80:b3:b4:71:ff:3a:f6:84:c6:fd:6f:
         e8:97:e5:90:29:f7:d6:bd:c4:34:38:40:6f:0b:1f:6b:f4:95:
         2a:0e:c7:63:c7:47:74:4c:5b:18:14:3b:35:d5:df:07:0c:f1:
         37:fe:5d:09:c8:8f:62:a6:55:4e:10:10:42:cb:01:a0:96:4d:
         50:56:a9:a3:69:f2:75:58:68:ed:45:35:e0:fa:6e:67:df:57:
         24:3f:d3:77:61:5f:c0:e9:a8:9e:de:2d:cf:43:12:b2:19:ec:
         9d:26:59:75:7f:4a:5c:86:ed:90:02:11:7a:ad:84:75:dc:aa:
         c0:e1:e7:e6:28:68:d2:20:63:73:06:62:b1:2d:e9:f2:b6:d7:
         98:04:14:cd:a2:ca:be:9a:45:9a:a8:98:84:a0:d5:db:a9:3e:
         7e:05:8b:d7:04:e5:8d:61:0a:cc:52:e4:9c:70:ee:66:15:71:
         73:19:60:84:56:75:f9:79:09:14:a6:11:fc:8b:a4:d8:c9:c4:
         ce:97:1c:94:d9:cc:85:ca:11:a5:68:c7:0e:21:be:49:49:45:
         9a:6a:74:61:33:55:44:56:43:db:28:1d:ef:33:ce:81:0b:73:
         14:9c:3f:4b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPbScYQ86JjFlXsZZ01ipZzKWiPowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDIwMTI1WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MzFlMGUwZjA5ZmZmNjQ0ZGY2NzNmZDQ0Yzk2N2FkZmY1
MWU4YTdiYjk2NGU3ZDQxZjQ0YWVhOTU3ZTJlNDZhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6l75pK/pigUe2PJC+iQT3WULWVK29ZxRH4vxHeVrO0Umg
UmWqx+5nGZPmB879+CQ7ztI/nhg/Bg4Vo3F4wz1mE+QqSFNZaNB9YDrsW3jvfhed
iug94zA5uD2U/XUF2wl2evFe4G7pN9HKsekKLxRH4Vza6yuUQmRpbR1DbPA7shhv
0Eo0emfLS1YiykPVtPQs8NCF/DTtwf+d1q001hpKNZLDzjWjai4RjJJM2526d6R0
3VQA7lru2TQQV6HPehQV07PI8OXNEVjgsAt0Phb6PWwASq1JbuPq4Ehs8HCG3yCs
Dzo6Q16nVwY7oFhPGj4JWWOvU5/1Ym0636iZxnJlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSJpScv2QAlC0URBgdOdGFMxS7TUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2MwMWZjYzQyLTc4MjAtNGQ4MS1iZDc2LTIwNDMwZmY5MjRmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALzAwDQYJKoZIhvcNAQELBQADggEBAB6Ex550syRBxEWrepMIYAJf
r/y7Eqjs10KAs7Rx/zr2hMb9b+iX5ZAp99a9xDQ4QG8LH2v0lSoOx2PHR3RMWxgU
OzXV3wcM8Tf+XQnIj2KmVU4QEELLAaCWTVBWqaNp8nVYaO1FNeD6bmffVyQ/03dh
X8DpqJ7eLc9DErIZ7J0mWXV/SlyG7ZACEXqthHXcqsDh5+YoaNIgY3MGYrEt6fK2
15gEFM2iyr6aRZqomISg1dupPn4Fi9cE5Y1hCsxS5Jxw7mYVcXMZYIRWdfl5CRSm
EfyLpNjJxM6XHJTZzIXKEaVoxw4hvklJRZpqdGEzVURWQ9soHe8zzoELcxScP0s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:55 2026 by rpki-client