Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b425ea-774d-4120-94b4-8f62a510c091.roa
File:                     c5b425ea-774d-4120-94b4-8f62a510c091.roa (raw, json)
Hash identifier:          7h6sHoRaNv4vrUalRxEAFr56V376Cba1S52PNZhDJQA=
Subject key identifier:   87:07:F4:5C:6D:E1:EA:8C:BE:7E:6F:64:64:D6:D8:39:FE:9A:AA:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F58A5D542CA38EA239527141FBE0D62855D0475
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b425ea-774d-4120-94b4-8f62a510c091.roa
Signing time:             Fri 13 Feb 2026 12:21:03 +0000
ROA not before:           Fri 13 Feb 2026 12:21:03 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2df8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:a5:d5:42:ca:38:ea:23:95:27:14:1f:be:0d:62:85:5d:04:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:21:03 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a0f97a2467aad85fff724b859205773690130ac5f9b2e861e8f909944eff7537, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:21:54:40:a8:2f:54:7b:aa:af:fa:79:a9:
                    ef:d7:46:68:66:ca:f7:ca:35:8e:af:29:31:cf:13:
                    db:66:a8:17:b5:60:c6:16:0d:8c:54:a4:35:dc:2e:
                    93:4f:f4:4e:9a:68:3c:c1:66:78:7d:07:d1:be:4c:
                    83:da:d9:fc:36:48:c5:a5:80:9b:f4:08:d8:d8:bc:
                    de:09:d0:be:b7:4f:ff:0e:f4:9f:12:fd:15:b8:7d:
                    bc:2c:fc:a5:fc:68:19:49:24:cb:8d:03:02:7c:e7:
                    14:26:d5:32:28:86:ac:05:07:c0:d1:ef:81:eb:53:
                    2c:0e:32:9d:8f:15:e3:4d:a6:16:41:6b:f7:16:a8:
                    b8:ec:d8:0e:58:c7:5f:11:c0:fd:42:80:08:38:c0:
                    1c:37:9a:6e:6b:9d:49:da:17:5d:20:9c:f1:b2:87:
                    41:72:1f:75:52:56:99:63:3b:96:1c:75:00:77:0a:
                    17:e0:11:bf:ab:6c:24:9f:a4:62:f8:ef:e6:3b:cf:
                    1b:77:bd:d5:47:10:5a:a8:12:55:86:9a:6f:56:80:
                    66:b2:d1:b6:47:11:b4:74:ef:bf:d7:aa:89:ea:80:
                    fd:7c:9e:72:79:70:74:4c:03:cc:0c:90:60:63:95:
                    e1:6f:31:50:1e:ec:07:41:b0:3a:09:57:cf:fd:8d:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:F4:5C:6D:E1:EA:8C:BE:7E:6F:64:64:D6:D8:39:FE:9A:AA:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5b425ea-774d-4120-94b4-8f62a510c091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2df8::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:c0:78:23:73:0e:33:58:b0:2f:1e:68:16:ed:b5:d7:af:
         78:82:b9:ab:51:e2:ed:88:a1:e5:45:8c:d7:83:bc:99:45:37:
         bd:e2:9b:86:6f:c9:08:7b:93:a2:9d:00:84:2b:94:e0:e5:80:
         29:0c:db:de:a6:3b:f5:9b:55:5f:3a:7d:62:ed:f5:b4:d1:f5:
         da:7e:11:7b:ee:7c:17:97:f8:ac:5a:60:ed:0b:0f:c9:ce:99:
         de:4f:59:23:b3:b6:61:5e:ec:29:d2:a3:c4:80:49:be:7c:58:
         c1:f9:44:c1:47:1e:84:aa:c4:3f:74:06:9b:29:6e:ad:8b:86:
         c1:c4:5f:07:9a:e0:29:b2:aa:88:d2:2d:6b:a2:a9:d6:00:4c:
         09:63:a1:1d:31:4d:2d:46:4c:58:b6:9c:d4:33:1e:ce:42:fe:
         e8:02:24:a0:83:ee:ee:5d:5c:06:db:a1:ff:e9:cd:29:47:1e:
         52:97:e4:43:bf:f4:1c:8c:0c:4e:89:0c:d5:55:8f:b6:1f:8f:
         f1:e0:8b:0a:26:5a:d4:37:de:65:46:90:0a:b6:03:3c:90:07:
         9d:f8:0f:f7:d4:60:bd:50:22:dc:82:c5:97:ca:9f:99:b3:cc:
         7b:cd:81:2a:52:e9:03:f6:5f:b7:cf:7f:55:50:f3:ea:38:f4:
         ce:76:27:d2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUL1il1ULKOOojlScUH74NYoVdBHUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTIyMTAzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMGY5N2EyNDY3YWFkODVmZmY3MjRiODU5MjA1NzczNjkw
MTMwYWM1ZjliMmU4NjFlOGY5MDk5NDRlZmY3NTM3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCV3yFUQKgvVHuqr/p5qe/XRmhmyvfKNY6vKTHPE9tmqBe1
YMYWDYxUpDXcLpNP9E6aaDzBZnh9B9G+TIPa2fw2SMWlgJv0CNjYvN4J0L63T/8O
9J8S/RW4fbws/KX8aBlJJMuNAwJ85xQm1TIohqwFB8DR74HrUywOMp2PFeNNphZB
a/cWqLjs2A5Yx18RwP1CgAg4wBw3mm5rnUnaF10gnPGyh0FyH3VSVpljO5YcdQB3
ChfgEb+rbCSfpGL47+Y7zxt3vdVHEFqoElWGmm9WgGay0bZHEbR077/XqonqgP18
nnJ5cHRMA8wMkGBjleFvMVAe7AdBsDoJV8/9jc67AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhwf0XG3h6oy+fm9kZNbYOf6aqhwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M1YjQyNWVhLTc3NGQtNDEyMC05NGI0LThmNjJhNTEwYzA5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALfgwDQYJKoZIhvcNAQELBQADggEBACO9wHgjcw4zWLAvHmgW7bXX
r3iCuatR4u2IoeVFjNeDvJlFN73im4ZvyQh7k6KdAIQrlODlgCkM296mO/WbVV86
fWLt9bTR9dp+EXvufBeX+KxaYO0LD8nOmd5PWSOztmFe7CnSo8SASb58WMH5RMFH
HoSqxD90Bpspbq2LhsHEXwea4CmyqojSLWuiqdYATAljoR0xTS1GTFi2nNQzHs5C
/ugCJKCD7u5dXAbbof/pzSlHHlKX5EO/9ByMDE6JDNVVj7Yfj/HgiwomWtQ33mVG
kAq2AzyQB534D/fUYL1QItyCxZfKn5mzzHvNgSpS6QP2X7fPf1VQ8+o49M52J9I=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:23 2026 by rpki-client