Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d10186-8d91-4904-8813-bee5e6e0a4cf.roa
File:                     e2d10186-8d91-4904-8813-bee5e6e0a4cf.roa (raw, json)
Hash identifier:          xDmiWVHoX/1pLJSC6hIffpMdfKPZ8Mxuea0uc5Ipx4E=
Subject key identifier:   04:9F:75:51:96:84:E3:02:4B:57:E6:09:E3:A0:DB:F5:EE:86:08:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3C08FABAFBCBCA7F1A97AEF624B6E964D57F7370
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d10186-8d91-4904-8813-bee5e6e0a4cf.roa
Signing time:             Fri 13 Feb 2026 02:31:27 +0000
ROA not before:           Fri 13 Feb 2026 02:31:27 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2a40::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:fa:ba:fb:cb:ca:7f:1a:97:ae:f6:24:b6:e9:64:d5:7f:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:31:27 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8cfb96f8f5d9cca4b19a2b2488590c91ef96248f6e9767a42cba41c7b14e6b2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:62:73:7d:5b:c9:b9:a3:b1:97:2a:cc:6b:
                    c5:f7:bc:d0:3e:8e:4b:fb:40:0e:ca:0f:76:c3:86:
                    25:0f:f7:1e:ad:05:47:25:88:66:ca:b7:8b:56:a1:
                    41:0e:62:31:5c:89:a2:55:bf:ee:98:23:c6:6a:28:
                    0e:2b:50:39:4e:ef:4d:ca:9c:ce:65:61:3d:ae:d9:
                    f2:40:af:80:95:3a:7e:ea:c9:c8:b1:55:be:81:4d:
                    4e:da:ba:f2:51:57:21:08:e9:1a:ae:0b:1b:bf:5a:
                    45:37:4c:b1:54:bb:d2:99:34:2d:d1:2e:6c:06:28:
                    9d:9c:ee:48:c1:1a:f3:26:45:64:24:4c:aa:d8:b5:
                    d3:6a:76:39:57:b3:2e:62:73:37:61:e0:be:56:ee:
                    c6:3c:f7:36:d5:64:99:12:14:0c:a7:b9:60:13:60:
                    3a:30:fd:b6:0b:19:88:94:2c:86:8a:66:f1:a0:0c:
                    38:19:9b:db:f1:de:fd:6a:34:87:b8:d9:99:46:0a:
                    8b:db:5c:fe:d8:09:a9:15:75:c2:50:55:c1:c8:8f:
                    f5:9a:31:59:6a:99:e3:9a:77:6f:01:dd:a8:68:80:
                    7d:dc:87:9c:a6:48:89:6d:62:de:08:49:06:d5:9b:
                    15:52:54:9f:50:1e:75:55:bd:b9:69:12:f0:8b:11:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9F:75:51:96:84:E3:02:4B:57:E6:09:E3:A0:DB:F5:EE:86:08:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d10186-8d91-4904-8813-bee5e6e0a4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2a40::/46

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:3a:20:26:14:c8:5d:62:80:12:5c:30:16:e8:c5:c3:5b:
         e3:63:ce:06:99:41:e3:38:d2:80:01:01:cf:f8:5c:8b:3f:70:
         c6:c3:e9:c2:5b:87:77:14:7a:4b:fe:d2:f2:f2:cf:c6:d8:71:
         90:ea:ea:bb:bf:14:36:b9:d1:a3:d0:f5:3d:d0:30:c4:2f:13:
         ed:69:a6:99:f7:21:b4:fa:14:52:4f:f3:08:56:ca:79:66:45:
         f9:91:6a:bc:18:ed:1e:16:3e:5d:d7:fa:16:90:ab:db:bf:12:
         be:70:e6:71:c0:4f:3f:bd:f8:5a:7e:25:4d:d4:7c:b6:5e:be:
         49:03:99:fc:6d:73:ca:18:ca:d8:59:17:a2:19:7d:e1:1e:1d:
         71:08:4a:db:aa:13:e3:32:5c:83:95:4a:18:ad:66:7a:35:e8:
         1c:51:2f:0c:38:9a:b8:2d:44:ea:9f:50:a3:c8:83:9d:dd:14:
         7a:93:3d:35:00:b1:fe:4f:19:a3:0b:a1:1f:76:86:32:de:bf:
         23:17:c8:2e:f9:03:c3:9a:0c:0e:db:c5:38:8c:20:98:26:1e:
         e7:79:29:3e:59:43:ab:30:d3:ec:6b:97:34:c8:e6:e5:14:f7:
         9f:b1:ca:7e:b7:84:10:2e:23:f5:dc:9e:b5:b2:4b:96:28:b0:
         a8:5a:77:9a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPAj6uvvLyn8al672JLbpZNV/c3AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDIzMTI3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Y2ZiOTZmOGY1ZDljY2E0YjE5YTJiMjQ4ODU5MGM5MWVm
OTYyNDhmNmU5NzY3YTQyY2JhNDFjN2IxNGU2YjJlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0hGJzfVvJuaOxlyrMa8X3vNA+jkv7QA7KD3bDhiUP9x6t
BUcliGbKt4tWoUEOYjFciaJVv+6YI8ZqKA4rUDlO703KnM5lYT2u2fJAr4CVOn7q
ycixVb6BTU7auvJRVyEI6RquCxu/WkU3TLFUu9KZNC3RLmwGKJ2c7kjBGvMmRWQk
TKrYtdNqdjlXsy5iczdh4L5W7sY89zbVZJkSFAynuWATYDow/bYLGYiULIaKZvGg
DDgZm9vx3v1qNIe42ZlGCovbXP7YCakVdcJQVcHIj/WaMVlqmeOad28B3ahogH3c
h5ymSIltYt4ISQbVmxVSVJ9QHnVVvblpEvCLEdbZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBJ91UZaE4wJLV+YJ46Db9e6GCHAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2UyZDEwMTg2LThkOTEtNDkwNC04ODEzLWJlZTVlNmUwYTRjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAKkAwDQYJKoZIhvcNAQELBQADggEBADfYOiAmFMhdYoASXDAW6MXD
W+NjzgaZQeM40oABAc/4XIs/cMbD6cJbh3cUekv+0vLyz8bYcZDq6ru/FDa50aPQ
9T3QMMQvE+1pppn3IbT6FFJP8whWynlmRfmRarwY7R4WPl3X+haQq9u/Er5w5nHA
Tz+9+Fp+JU3UfLZevkkDmfxtc8oYythZF6IZfeEeHXEIStuqE+MyXIOVShitZno1
6BxRLww4mrgtROqfUKPIg53dFHqTPTUAsf5PGaMLoR92hjLevyMXyC75A8OaDA7b
xTiMIJgmHud5KT5ZQ6sw0+xrlzTI5uUU95+xyn63hBAuI/XcnrWyS5YosKhad5o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:47 2026 by rpki-client