Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7335dd5-5954-42c6-b5fb-60025f6c58c8.roa
File:                     d7335dd5-5954-42c6-b5fb-60025f6c58c8.roa (raw, json)
Hash identifier:          amiohTcz8K9UJ7RsYk0UH2NeAWR9WAHDzjFx92nUNw0=
Subject key identifier:   88:80:35:97:B5:AA:07:66:24:62:B9:E8:0D:D8:CF:1A:74:E5:B9:3C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C6068999F42DF5782982A5B166D3589E3D77F16
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7335dd5-5954-42c6-b5fb-60025f6c58c8.roa
Signing time:             Fri 13 Feb 2026 05:30:11 +0000
ROA not before:           Fri 13 Feb 2026 05:30:11 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3920::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:60:68:99:9f:42:df:57:82:98:2a:5b:16:6d:35:89:e3:d7:7f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:30:11 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=de00b6a4d8d0cd45e3ded8fc9298b5ad5bb32bfe926aafd3b98727e470d85810, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:d2:38:60:c0:fd:66:eb:c1:73:35:22:f7:
                    18:59:f8:38:04:56:46:c4:17:64:02:4e:f1:26:d9:
                    79:1e:ee:cf:ac:7c:9c:51:54:9b:f6:73:df:61:ee:
                    c3:79:44:eb:f3:7b:f1:9d:34:a1:db:46:7c:4d:e8:
                    68:d1:13:ed:f0:cf:e9:18:cd:5f:23:eb:80:a4:d0:
                    c0:09:7c:a5:fc:aa:ec:fc:63:fd:07:93:b0:e1:c7:
                    f4:98:88:2d:b3:1e:c6:8c:53:04:91:90:63:d1:bc:
                    3c:4f:eb:14:13:b9:21:01:d1:47:b2:36:38:92:3c:
                    60:f4:99:95:65:4f:45:af:6c:99:2f:a0:47:3e:cf:
                    15:c9:2d:49:3a:c8:ca:db:92:a3:17:41:44:b1:df:
                    75:43:9f:98:38:bb:df:c7:36:0c:96:19:5d:8e:32:
                    68:48:bf:29:64:ca:4b:c0:56:ce:dd:a8:02:ff:a9:
                    9b:81:45:12:65:57:fa:ac:20:80:47:d5:78:db:4d:
                    6b:6a:5b:15:29:29:73:19:39:5d:fe:8b:74:f9:65:
                    6f:a8:62:ce:85:81:9f:6b:84:5f:90:74:a8:cc:c3:
                    d9:a4:91:92:bb:e2:fb:74:f5:0a:92:8d:0b:d8:27:
                    5c:24:2e:ac:32:be:4e:a4:30:a5:f7:55:c9:6b:2c:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:35:97:B5:AA:07:66:24:62:B9:E8:0D:D8:CF:1A:74:E5:B9:3C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7335dd5-5954-42c6-b5fb-60025f6c58c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3920::/46

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:b8:27:7b:82:1d:de:71:91:1b:c6:fe:2f:58:79:bc:75:
         fd:3d:5d:83:d8:26:41:c8:f4:1e:a6:e6:74:42:06:e9:b8:b0:
         c8:46:c6:54:e2:17:b7:15:54:bb:fe:b8:b5:72:92:df:80:6d:
         f2:a4:3a:e0:2e:82:0e:5d:61:7c:c8:76:b8:2e:68:a5:2a:94:
         96:66:ea:56:0e:db:8d:0a:e7:48:51:f4:b2:2f:3a:22:2b:2f:
         b1:b2:8e:8f:d2:a4:9f:d1:80:01:b9:ec:80:3c:a8:c4:b5:f8:
         78:91:7d:f8:ea:01:67:70:cf:eb:49:9d:a7:70:42:10:2f:e8:
         e2:12:19:fb:cb:af:96:86:a4:b2:b6:05:66:c8:d5:04:50:73:
         41:06:95:08:08:ed:17:c8:8a:9a:04:4a:4b:85:6c:c9:b3:3a:
         24:1a:bc:2f:c1:12:ea:73:20:0c:8c:69:0c:f5:a4:b2:c4:97:
         80:65:6d:f7:27:4c:89:09:99:6d:4a:56:85:81:e1:40:87:6a:
         73:54:0f:31:0a:8a:d8:59:90:45:ff:03:44:84:9a:e7:63:ff:
         6d:a2:ef:32:d4:a9:54:e7:65:12:f9:96:c6:8f:2c:4a:f3:09:
         e6:9e:6b:bc:43:2a:d4:26:bc:cc:ae:15:0f:76:48:ef:7e:30:
         bc:cb:c4:ce
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDGBomZ9C31eCmCpbFm01iePXfxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDUzMDExWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZTAwYjZhNGQ4ZDBjZDQ1ZTNkZWQ4ZmM5Mjk4YjVhZDVi
YjMyYmZlOTI2YWFmZDNiOTg3MjdlNDcwZDg1ODEwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrrtI4YMD9ZuvBczUi9xhZ+DgEVkbEF2QCTvEm2Xke7s+s
fJxRVJv2c99h7sN5ROvze/GdNKHbRnxN6GjRE+3wz+kYzV8j64Ck0MAJfKX8quz8
Y/0Hk7Dhx/SYiC2zHsaMUwSRkGPRvDxP6xQTuSEB0UeyNjiSPGD0mZVlT0WvbJkv
oEc+zxXJLUk6yMrbkqMXQUSx33VDn5g4u9/HNgyWGV2OMmhIvylkykvAVs7dqAL/
qZuBRRJlV/qsIIBH1XjbTWtqWxUpKXMZOV3+i3T5ZW+oYs6FgZ9rhF+QdKjMw9mk
kZK74vt09QqSjQvYJ1wkLqwyvk6kMKX3VclrLHphAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUiIA1l7WqB2YkYrnoDdjPGnTluTwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Q3MzM1ZGQ1LTU5NTQtNDJjNi1iNWZiLTYwMDI1ZjZjNThjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOSAwDQYJKoZIhvcNAQELBQADggEBAL7KuCd7gh3ecZEbxv4vWHm8
df09XYPYJkHI9B6m5nRCBum4sMhGxlTiF7cVVLv+uLVykt+AbfKkOuAugg5dYXzI
drguaKUqlJZm6lYO240K50hR9LIvOiIrL7Gyjo/SpJ/RgAG57IA8qMS1+HiRffjq
AWdwz+tJnadwQhAv6OISGfvLr5aGpLK2BWbI1QRQc0EGlQgI7RfIipoESkuFbMmz
OiQavC/BEupzIAyMaQz1pLLEl4BlbfcnTIkJmW1KVoWB4UCHanNUDzEKithZkEX/
A0SEmudj/22i7zLUqVTnZRL5lsaPLErzCeaea7xDKtQmvMyuFQ92SO9+MLzLxM4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:53 2026 by rpki-client