Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc4b5001-936a-4d05-9658-b22c5c2b5ed0.roa
File:                     cc4b5001-936a-4d05-9658-b22c5c2b5ed0.roa (raw, json)
Hash identifier:          Po2cNM1Pzdhy17UulkADlYHFYwHZzoY4K/PDCO7mAJk=
Subject key identifier:   7A:2A:2F:55:CF:44:E5:42:2C:CA:E0:32:74:F8:67:09:95:BE:67:8E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A358D36134B8F606A7AA198B258B7CD9ED270A4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc4b5001-936a-4d05-9658-b22c5c2b5ed0.roa
Signing time:             Fri 13 Feb 2026 02:00:07 +0000
ROA not before:           Fri 13 Feb 2026 02:00:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bde::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:8d:36:13:4b:8f:60:6a:7a:a1:98:b2:58:b7:cd:9e:d2:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:00:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=51c71e44ae9434e8f7951c9235e91d57c63f4e3de69ab5626c10c806ded93184, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:3e:9b:16:5a:31:05:ee:b2:bc:c8:c4:32:
                    f5:60:fe:ee:0b:44:59:c9:74:a4:16:0e:38:fc:de:
                    f8:42:5b:1b:5b:a0:78:53:89:76:3c:62:c1:70:5b:
                    e1:f8:94:1c:26:15:09:3e:22:ba:7b:68:f2:bd:57:
                    81:e8:9e:e4:17:60:fc:79:1c:9a:69:7e:f5:2d:2e:
                    43:e3:b4:86:37:fa:27:20:7c:f5:35:0e:a4:fe:07:
                    ed:9e:e1:df:cf:a6:ad:cc:77:7e:ed:1a:9a:10:30:
                    b2:7e:f4:e2:1b:32:ca:71:bc:ed:ce:fb:d3:77:2b:
                    63:6b:af:93:9a:6d:89:d5:1e:1d:0e:fc:50:8b:0f:
                    1a:1e:6e:54:15:20:74:52:d5:02:90:91:a7:de:be:
                    cd:03:9d:03:17:99:34:41:a4:c7:dd:17:70:ad:1b:
                    1e:3b:7e:65:62:59:08:6d:85:a4:d5:d0:23:76:e9:
                    a6:d2:d7:a2:47:5e:03:6c:8b:61:08:73:a9:2f:f5:
                    ae:c0:fb:2f:a8:4a:8b:a5:95:e9:20:9a:77:08:73:
                    63:74:bd:64:08:2f:f2:d1:18:ef:40:7b:cd:4b:37:
                    48:58:9b:7a:47:e0:02:cc:47:41:8c:7d:eb:28:f7:
                    f4:77:7c:16:81:dc:4b:30:1c:c9:3c:57:10:26:03:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:2F:55:CF:44:E5:42:2C:CA:E0:32:74:F8:67:09:95:BE:67:8E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc4b5001-936a-4d05-9658-b22c5c2b5ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bde::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:84:81:4d:b4:d6:6c:a6:93:ad:cf:e9:ad:7c:0c:0d:c2:
         85:8e:0c:1a:c4:6a:09:13:a6:14:d7:dc:5b:a4:0b:d5:4c:03:
         fe:a2:65:f9:cf:59:8a:8e:8c:48:b0:28:fb:07:3a:50:02:3c:
         f2:cd:7c:1d:2b:71:31:77:8f:a4:a5:be:cc:3d:1e:eb:c5:dc:
         28:80:a9:97:9a:db:27:e2:69:9a:d4:bf:ad:86:04:57:27:d5:
         6a:4d:eb:7c:93:c5:70:f2:1e:d9:58:96:67:24:dc:47:47:38:
         bf:fd:1f:0f:50:0d:38:67:9d:f6:f5:d5:58:5c:7f:03:31:2f:
         84:c1:50:3e:d3:49:c2:ef:e0:54:fc:74:bb:6a:99:65:c9:01:
         e0:5d:03:ac:44:e1:8f:47:ae:9f:17:d3:9c:7d:31:be:bb:45:
         0a:9b:f3:44:ca:5a:3d:0f:f8:c2:5a:85:1a:20:e1:1e:9e:8f:
         e1:f9:32:aa:76:00:04:c5:a4:2c:f3:73:13:c6:ce:00:63:de:
         c1:00:4c:50:19:b1:39:55:42:78:99:45:7a:03:6f:90:70:99:
         df:e2:94:60:3e:33:1a:99:3d:13:cc:bb:d3:b9:c7:05:a0:ac:
         2f:9a:66:01:3b:79:a6:72:e4:1f:b2:1f:9b:0d:b2:b2:be:dc:
         11:4a:34:cc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKjWNNhNLj2BqeqGYsli3zZ7ScKQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDIwMDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MWM3MWU0NGFlOTQzNGU4Zjc5NTFjOTIzNWU5MWQ1N2M2
M2Y0ZTNkZTY5YWI1NjI2YzEwYzgwNmRlZDkzMTg0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuGz6bFloxBe6yvMjEMvVg/u4LRFnJdKQWDjj83vhCWxtb
oHhTiXY8YsFwW+H4lBwmFQk+Irp7aPK9V4HonuQXYPx5HJppfvUtLkPjtIY3+icg
fPU1DqT+B+2e4d/Ppq3Md37tGpoQMLJ+9OIbMspxvO3O+9N3K2Nrr5OabYnVHh0O
/FCLDxoeblQVIHRS1QKQkafevs0DnQMXmTRBpMfdF3CtGx47fmViWQhthaTV0CN2
6abS16JHXgNsi2EIc6kv9a7A+y+oSoullekgmncIc2N0vWQIL/LRGO9Ae81LN0hY
m3pH4ALMR0GMfeso9/R3fBaB3EswHMk8VxAmAzBVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUeiovVc9E5UIsyuAydPhnCZW+Z44wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2NjNGI1MDAxLTkzNmEtNGQwNS05NjU4LWIyMmM1YzJiNWVkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAO94wDQYJKoZIhvcNAQELBQADggEBAI4ThIFNtNZsppOtz+mtfAwN
woWODBrEagkTphTX3FukC9VMA/6iZfnPWYqOjEiwKPsHOlACPPLNfB0rcTF3j6Sl
vsw9HuvF3CiAqZea2yfiaZrUv62GBFcn1WpN63yTxXDyHtlYlmck3EdHOL/9Hw9Q
DThnnfb11VhcfwMxL4TBUD7TScLv4FT8dLtqmWXJAeBdA6xE4Y9Hrp8X05x9Mb67
RQqb80TKWj0P+MJahRog4R6ej+H5Mqp2AATFpCzzcxPGzgBj3sEATFAZsTlVQniZ
RXoDb5Bwmd/ilGA+MxqZPRPMu9O5xwWgrC+aZgE7eaZy5B+yH5sNsrK+3BFKNMw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:53 2026 by rpki-client