Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca524008-2709-4bbf-83b8-afee4c9f750b.roa
File:                     ca524008-2709-4bbf-83b8-afee4c9f750b.roa (raw, json)
Hash identifier:          w0kyF94TPwKgRyYs/VHVOzG384tApCBqq7cjbIys9sY=
Subject key identifier:   44:2F:0E:90:AA:EB:19:67:6C:58:A5:EA:AD:98:40:4D:0E:66:93:2F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D1DC9CE31E18AFDDE66F2CF7BCB74211F3A8C7C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca524008-2709-4bbf-83b8-afee4c9f750b.roa
Signing time:             Fri 13 Feb 2026 06:01:03 +0000
ROA not before:           Fri 13 Feb 2026 06:01:03 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a6c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1d:c9:ce:31:e1:8a:fd:de:66:f2:cf:7b:cb:74:21:1f:3a:8c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:01:03 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ae253df6aef87b92afd478f7a2fa9c457fabd8237b88adb50a6af6c005b03365, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:85:e4:cd:3f:a2:11:59:68:16:bd:f2:a0:
                    03:64:3b:f2:46:dc:21:b4:25:6c:4c:54:ff:a9:4a:
                    5c:56:c7:c8:c4:eb:f4:79:9f:cd:ae:40:ab:63:05:
                    a1:23:5b:b1:5c:eb:67:c4:70:c8:88:fc:4e:d9:04:
                    c2:68:0c:8e:4c:26:5b:c5:64:49:5b:08:7e:04:1f:
                    18:d5:1e:6b:a5:02:66:f7:4b:7b:e1:88:26:4b:f4:
                    16:7b:49:bb:88:23:20:b6:63:43:5a:d1:8a:ec:df:
                    ea:64:ed:e2:89:17:66:97:fb:d8:7f:d1:61:56:f8:
                    4f:71:65:cb:66:d3:30:df:c9:52:58:85:bd:4a:4f:
                    c1:01:bc:b0:e6:10:db:33:0d:e4:ae:07:aa:ae:5c:
                    a9:20:50:ef:41:9f:12:be:31:2e:3d:8f:69:27:13:
                    c9:23:a5:ce:9c:85:75:60:e3:60:f7:ba:d1:24:d3:
                    7a:e6:1e:4f:0b:2d:e3:19:62:6a:09:c6:dc:aa:91:
                    02:5c:1d:e6:78:02:64:6a:75:9a:c2:8c:6c:1f:9f:
                    53:42:39:eb:2d:60:0b:04:ba:27:a6:2f:37:db:5e:
                    bd:f1:eb:88:93:c0:3d:79:db:81:db:8f:de:3d:ab:
                    9f:e5:2e:f8:a1:ca:8b:36:81:b8:73:9f:3c:4c:e2:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2F:0E:90:AA:EB:19:67:6C:58:A5:EA:AD:98:40:4D:0E:66:93:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca524008-2709-4bbf-83b8-afee4c9f750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a6c::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:2f:10:13:a6:43:34:f4:95:0c:31:06:ca:37:27:ef:e7:
         d9:6b:9b:df:95:a1:0d:5c:57:59:99:0b:f0:8e:de:be:cd:4a:
         9e:c5:50:8a:5f:8e:bd:d7:37:93:d2:54:60:89:37:14:50:62:
         93:c8:79:33:81:89:54:ff:4d:ba:ad:c8:a5:08:f2:d1:96:f1:
         92:e9:7d:cd:69:54:ed:b4:83:d1:72:e4:b7:0a:ce:44:99:81:
         2a:e6:a8:74:82:42:ee:f0:8f:34:c4:f6:0f:e2:35:0e:72:23:
         8a:2e:b4:88:42:28:6b:18:ba:3a:53:5c:f0:27:9a:99:f0:8e:
         61:24:1c:90:e5:35:45:ca:68:19:d7:5b:86:9e:1c:11:3f:6c:
         d5:f4:53:e9:c2:a7:13:20:e1:59:b9:06:6c:c2:b5:60:64:bd:
         95:7b:25:73:b0:34:aa:d0:79:24:45:9a:ea:44:82:02:f7:e5:
         68:af:3e:76:45:d7:d2:fc:42:ca:d7:d2:cb:b3:07:1a:e7:90:
         84:1d:0f:73:0f:c6:1a:0d:0b:42:b0:66:f7:0a:84:90:4c:6d:
         5a:76:8c:8d:7f:e5:1e:ed:46:70:17:3a:37:03:c0:19:ee:46:
         93:8c:48:ab:ae:93:ae:e9:6f:65:95:62:0a:36:fe:16:47:4c:
         7c:66:b4:aa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDR3JzjHhiv3eZvLPe8t0IR86jHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDYwMTAzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZTI1M2RmNmFlZjg3YjkyYWZkNDc4ZjdhMmZhOWM0NTdm
YWJkODIzN2I4OGFkYjUwYTZhZjZjMDA1YjAzMzY1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmeIXkzT+iEVloFr3yoANkO/JG3CG0JWxMVP+pSlxWx8jE
6/R5n82uQKtjBaEjW7Fc62fEcMiI/E7ZBMJoDI5MJlvFZElbCH4EHxjVHmulAmb3
S3vhiCZL9BZ7SbuIIyC2Y0Na0Yrs3+pk7eKJF2aX+9h/0WFW+E9xZctm0zDfyVJY
hb1KT8EBvLDmENszDeSuB6quXKkgUO9BnxK+MS49j2knE8kjpc6chXVg42D3utEk
03rmHk8LLeMZYmoJxtyqkQJcHeZ4AmRqdZrCjGwfn1NCOestYAsEuiemLzfbXr3x
64iTwD1524Hbj949q5/lLvihyos2gbhznzxM4iXRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURC8OkKrrGWdsWKXqrZhATQ5mky8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2NhNTI0MDA4LTI3MDktNGJiZi04M2I4LWFmZWU0YzlmNzUwYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAKmwwDQYJKoZIhvcNAQELBQADggEBADxELxATpkM09JUMMQbKNyfv
59lrm9+VoQ1cV1mZC/CO3r7NSp7FUIpfjr3XN5PSVGCJNxRQYpPIeTOBiVT/Tbqt
yKUI8tGW8ZLpfc1pVO20g9Fy5LcKzkSZgSrmqHSCQu7wjzTE9g/iNQ5yI4outIhC
KGsYujpTXPAnmpnwjmEkHJDlNUXKaBnXW4aeHBE/bNX0U+nCpxMg4Vm5BmzCtWBk
vZV7JXOwNKrQeSRFmupEggL35WivPnZF19L8QsrX0suzBxrnkIQdD3MPxhoNC0Kw
ZvcKhJBMbVp2jI1/5R7tRnAXOjcDwBnuRpOMSKuuk67pb2WVYgo2/hZHTHxmtKo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:03 2026 by rpki-client