Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e8c1de36-6e2d-4930-b5c4-f763072b166d.roa
File:                     e8c1de36-6e2d-4930-b5c4-f763072b166d.roa (raw, json)
Hash identifier:          4XR2CmEIv/VlYHonxNeQ2bmbe+izP7XdS/S+BO+MS/o=
Subject key identifier:   E5:71:81:1B:15:E4:AD:5A:D1:3F:3D:AD:1E:49:DD:95:12:EC:F4:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7379A1A9EE2C3E8AA1F9FEB5224EB9650EC8D4FC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e8c1de36-6e2d-4930-b5c4-f763072b166d.roa
Signing time:             Fri 13 Feb 2026 01:30:54 +0000
ROA not before:           Fri 13 Feb 2026 01:30:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a38::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:79:a1:a9:ee:2c:3e:8a:a1:f9:fe:b5:22:4e:b9:65:0e:c8:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:30:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c956ffa5bfbf9715295f260ca5e5f132e3e575a368d757efce9ae4080741c727, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:35:ab:43:45:3a:56:25:c6:bc:8d:fd:41:
                    6b:0e:2c:32:75:d5:bb:25:11:17:9f:9d:9d:50:fb:
                    d0:0d:ea:3f:42:bf:f5:03:08:a1:0d:a0:eb:31:1d:
                    6d:1a:58:5a:60:48:d6:ee:09:64:b0:64:f6:0a:f4:
                    74:6c:bb:c9:c0:fe:f1:a2:d2:83:b9:8d:86:f0:48:
                    3e:8e:40:89:c9:76:96:b4:c9:96:ea:93:98:f2:b8:
                    9b:fa:ba:34:e9:d8:a2:2d:11:77:04:ef:b4:53:f8:
                    4b:0e:6d:7a:0e:4b:13:03:a0:61:34:f6:a0:27:43:
                    e6:71:ab:6f:81:c5:45:04:d3:eb:e2:68:79:8c:a3:
                    0c:8d:08:d3:03:78:d3:e8:b4:37:71:90:e0:4f:9c:
                    f0:5f:91:15:74:34:96:47:39:9b:07:ea:63:a7:84:
                    b7:0d:1c:47:ae:a3:bc:b0:57:7f:8c:ca:7f:85:01:
                    dd:34:ec:5e:a1:ba:85:8c:9d:19:13:bf:45:94:43:
                    fb:ba:b1:13:cc:84:76:46:df:13:07:49:b9:7e:e9:
                    a7:20:ef:4e:12:3a:46:aa:19:ab:ba:ef:eb:55:1c:
                    d2:36:2c:20:6e:f7:c9:f4:10:fb:e5:1a:5d:84:cf:
                    a9:54:b0:6c:97:e8:35:f4:a1:01:fb:2e:ea:6c:f0:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:71:81:1B:15:E4:AD:5A:D1:3F:3D:AD:1E:49:DD:95:12:EC:F4:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e8c1de36-6e2d-4930-b5c4-f763072b166d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a38::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:67:cc:29:05:8e:8a:09:82:68:80:3d:96:a0:d4:b2:65:
         59:3a:fa:a0:03:59:ea:6f:a1:a4:27:34:60:7d:08:df:98:e6:
         af:0a:47:a6:e7:76:da:89:ef:20:b6:79:22:f0:b1:07:42:cd:
         8b:85:b0:41:37:83:0c:69:1a:51:f4:8e:fe:6b:8d:9a:9c:56:
         85:18:13:1d:34:76:07:3e:ea:02:a4:d9:b9:58:22:11:2d:ca:
         e8:f0:e1:60:63:f6:23:e9:72:4d:29:73:77:0b:69:24:de:d1:
         36:3e:4b:af:2a:0f:9b:95:98:81:90:75:97:59:69:df:bb:57:
         0d:bd:65:a9:44:25:02:cf:f5:b6:bf:97:9b:6f:3b:11:0e:f6:
         79:5d:99:15:cb:30:8d:05:45:58:49:8e:7a:bb:6a:ed:21:17:
         01:cb:a9:b8:fa:6b:fc:67:4f:15:54:58:7a:64:2a:48:7d:cc:
         66:54:2a:2f:7c:3e:0e:94:fd:54:4e:ad:7b:88:54:f9:b6:af:
         1c:df:5d:54:e0:94:fd:17:0a:59:f4:e6:af:20:89:1f:1d:c7:
         40:65:de:6c:41:a4:ea:c5:f2:b8:f4:46:9e:ca:2b:82:b1:4b:
         fd:cd:51:71:84:cd:dc:f8:5d:96:68:c5:f8:35:72:bd:82:a4:
         7a:7d:4d:6a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUc3mhqe4sPoqh+f61Ik65ZQ7I1PwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDEzMDU0WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTU2ZmZhNWJmYmY5NzE1Mjk1ZjI2MGNhNWU1ZjEzMmUz
ZTU3NWEzNjhkNzU3ZWZjZTlhZTQwODA3NDFjNzI3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtjjWrQ0U6ViXGvI39QWsOLDJ11bslERefnZ1Q+9AN6j9C
v/UDCKENoOsxHW0aWFpgSNbuCWSwZPYK9HRsu8nA/vGi0oO5jYbwSD6OQInJdpa0
yZbqk5jyuJv6ujTp2KItEXcE77RT+EsObXoOSxMDoGE09qAnQ+Zxq2+BxUUE0+vi
aHmMowyNCNMDeNPotDdxkOBPnPBfkRV0NJZHOZsH6mOnhLcNHEeuo7ywV3+Myn+F
Ad007F6huoWMnRkTv0WUQ/u6sRPMhHZG3xMHSbl+6acg704SOkaqGau67+tVHNI2
LCBu98n0EPvlGl2Ez6lUsGyX6DX0oQH7Lups8PNTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5XGBGxXkrVrRPz2tHkndlRLs9EEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U4YzFkZTM2LTZlMmQtNDkzMC1iNWM0LWY3NjMwNzJiMTY2ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOjgwDQYJKoZIhvcNAQELBQADggEBAJnRZ8wpBY6KCYJogD2WoNSy
ZVk6+qADWepvoaQnNGB9CN+Y5q8KR6bndtqJ7yC2eSLwsQdCzYuFsEE3gwxpGlH0
jv5rjZqcVoUYEx00dgc+6gKk2blYIhEtyujw4WBj9iPpck0pc3cLaSTe0TY+S68q
D5uVmIGQdZdZad+7Vw29ZalEJQLP9ba/l5tvOxEO9nldmRXLMI0FRVhJjnq7au0h
FwHLqbj6a/xnTxVUWHpkKkh9zGZUKi98Pg6U/VROrXuIVPm2rxzfXVTglP0XCln0
5q8giR8dx0Bl3mxBpOrF8rj0Rp7KK4KxS/3NUXGEzdz4XZZoxfg1cr2CpHp9TWo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:35 2026 by rpki-client