Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4cd906d-46fb-4d4f-9a00-520454ab1fe1.roa
File:                     e4cd906d-46fb-4d4f-9a00-520454ab1fe1.roa (raw, json)
Hash identifier:          PC5+Nl3YHv2RFtnk0YD2yJrlj0iODqigJhZ+Zs++hoA=
Subject key identifier:   53:AB:A0:80:2C:7B:F6:94:0E:91:51:01:C5:CF:19:22:23:6F:BD:EB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       687BAFF5EAC5AE7498E2EBB88A6FF6FB29223E04
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4cd906d-46fb-4d4f-9a00-520454ab1fe1.roa
Signing time:             Thu 12 Feb 2026 01:01:41 +0000
ROA not before:           Thu 12 Feb 2026 01:01:41 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c24::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:af:f5:ea:c5:ae:74:98:e2:eb:b8:8a:6f:f6:fb:29:22:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:01:41 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=4f1d5a1c7fc2b87ea33b324e3ce668dd7815882bbf0109ec54f227e1b6b455c3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:26:35:9d:b9:7d:5c:57:04:e9:84:7e:e6:
                    e2:ea:dd:12:71:6d:b4:2c:6d:e3:33:0d:97:56:54:
                    61:ec:9e:c3:ec:d3:28:15:e7:96:05:bc:85:82:e5:
                    8e:84:0d:30:69:62:3c:ab:45:36:65:8a:c5:c4:31:
                    d5:8a:39:14:04:b8:c6:29:b3:9e:42:e4:d4:e1:f8:
                    ea:0e:02:02:3c:9e:83:02:ec:40:0d:ea:8b:97:1f:
                    b6:3a:dc:3e:09:ff:90:e8:4a:b3:bc:ae:12:3a:12:
                    c4:4d:91:34:2a:bc:0d:83:2f:a0:5c:4b:ea:69:01:
                    95:da:36:d9:2b:01:13:e5:57:90:ef:04:b5:ac:e6:
                    54:37:ea:b5:ab:3a:4a:4a:d2:c7:a9:f6:93:37:39:
                    7d:86:09:24:fd:7b:3f:73:17:9f:9c:3c:fe:78:c6:
                    20:f5:0c:8d:8b:af:bf:6b:04:a9:35:c4:e6:4d:66:
                    d4:34:bc:86:f4:10:6a:a2:49:14:78:e2:9e:df:77:
                    cb:1b:2e:1f:50:9c:fa:48:7e:66:17:fe:77:e5:df:
                    ea:d9:af:ef:8d:0a:71:2f:24:e8:ac:f9:29:bc:34:
                    8a:8b:18:5c:a6:39:60:b3:23:d5:9f:3d:7b:f8:ec:
                    aa:77:33:4c:85:52:e7:00:bb:1a:5c:28:b8:a8:d7:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:A0:80:2C:7B:F6:94:0E:91:51:01:C5:CF:19:22:23:6F:BD:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e4cd906d-46fb-4d4f-9a00-520454ab1fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c24::/47

    Signature Algorithm: sha256WithRSAEncryption
         59:9e:59:04:7f:47:4a:ac:7d:fe:5c:cf:bb:ba:4e:35:b0:8e:
         6e:8a:1a:ca:a2:3f:6d:7c:ca:4b:2a:c2:f9:89:b7:7e:d9:0a:
         a4:13:ce:49:d7:ab:f9:25:55:5c:d8:7a:0a:f3:8d:49:69:d8:
         e5:a5:99:c8:9e:a4:6c:c5:65:42:c6:19:b9:10:d8:70:00:bb:
         3f:8a:d4:e0:bf:8c:50:8a:26:b2:15:93:f7:5d:f4:81:48:69:
         c9:3f:82:19:19:a9:1a:40:a0:5d:75:8b:04:bd:d0:bb:85:b2:
         26:cd:06:13:d2:e2:87:3c:a1:fd:4d:4c:8d:7b:ec:ea:f8:cc:
         e0:7c:e0:a0:17:8c:43:4c:5d:7f:12:e5:3e:9f:8d:8e:85:3f:
         4b:dc:dc:9d:6f:eb:ea:0a:31:e8:10:b9:0d:0a:21:d5:e4:a8:
         0d:57:78:23:72:c2:70:21:ac:7d:6f:b0:b7:e8:ae:4d:e8:74:
         30:07:10:a2:89:a8:3b:29:cb:c5:43:53:09:6f:5c:57:ad:c5:
         dc:a7:7e:2e:c2:95:dc:03:43:93:8f:85:89:8a:a1:e1:cd:59:
         f7:26:a4:26:25:97:02:cc:37:31:a6:2f:4d:d8:ba:48:20:ca:
         cd:bf:33:c9:6d:02:c7:0a:08:3f:42:a2:a2:58:b0:83:78:eb:
         b8:39:39:a0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaHuv9erFrnSY4uu4im/2+ykiPgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEwMTQxWhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZjFkNWExYzdmYzJiODdlYTMzYjMyNGUzY2U2NjhkZDc4
MTU4ODJiYmYwMTA5ZWM1NGYyMjdlMWI2YjQ1NWMzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdnCY1nbl9XFcE6YR+5uLq3RJxbbQsbeMzDZdWVGHsnsPs
0ygV55YFvIWC5Y6EDTBpYjyrRTZlisXEMdWKORQEuMYps55C5NTh+OoOAgI8noMC
7EAN6ouXH7Y63D4J/5DoSrO8rhI6EsRNkTQqvA2DL6BcS+ppAZXaNtkrARPlV5Dv
BLWs5lQ36rWrOkpK0sep9pM3OX2GCST9ez9zF5+cPP54xiD1DI2Lr79rBKk1xOZN
ZtQ0vIb0EGqiSRR44p7fd8sbLh9QnPpIfmYX/nfl3+rZr++NCnEvJOis+Sm8NIqL
GFymOWCzI9WfPXv47Kp3M0yFUucAuxpcKLio1yLLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUU6uggCx79pQOkVEBxc8ZIiNvveswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U0Y2Q5MDZkLTQ2ZmItNGQ0Zi05YTAwLTUyMDQ1NGFiMWZlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALCQwDQYJKoZIhvcNAQELBQADggEBAFmeWQR/R0qsff5cz7u6TjWw
jm6KGsqiP218yksqwvmJt37ZCqQTzknXq/klVVzYegrzjUlp2OWlmciepGzFZULG
GbkQ2HAAuz+K1OC/jFCKJrIVk/dd9IFIack/ghkZqRpAoF11iwS90LuFsibNBhPS
4oc8of1NTI177Or4zOB84KAXjENMXX8S5T6fjY6FP0vc3J1v6+oKMegQuQ0KIdXk
qA1XeCNywnAhrH1vsLfork3odDAHEKKJqDspy8VDUwlvXFetxdynfi7CldwDQ5OP
hYmKoeHNWfcmpCYllwLMNzGmL03Yukggys2/M8ltAscKCD9CoqJYsIN467g5OaA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:42 2026 by rpki-client