Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e97f3ad6-fc45-49ca-b1db-41a0f40ecf78.roa
File:                     e97f3ad6-fc45-49ca-b1db-41a0f40ecf78.roa (raw, json)
Hash identifier:          gYduxGi7yUb4383EVdgESiGzYUSsNobdjDJfClE60bs=
Subject key identifier:   F8:A3:46:76:D3:04:BE:38:AE:1C:EB:9D:9C:1F:9F:AC:2E:35:AC:38
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E7BBA534B9B9F97D167C4561087C3D9F053790C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e97f3ad6-fc45-49ca-b1db-41a0f40ecf78.roa
Signing time:             Fri 13 Feb 2026 03:50:09 +0000
ROA not before:           Fri 13 Feb 2026 03:50:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ae0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:ba:53:4b:9b:9f:97:d1:67:c4:56:10:87:c3:d9:f0:53:79:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:50:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2aa74f5cb6f7f6b7e89ad4efacd89aef8031408a30acc432c2490b8afcf6a2b2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:ea:bd:22:66:69:0f:c1:09:4b:00:eb:68:
                    e8:4f:f6:be:d6:a7:cc:58:08:b3:0c:17:e0:ae:dd:
                    ac:f5:bd:59:ca:65:99:8e:d3:2a:d2:1d:97:3f:db:
                    54:f6:e7:88:47:b4:e4:ba:a6:c1:92:23:a5:06:5a:
                    95:28:de:74:2a:26:80:2f:32:21:b9:9f:7c:5a:49:
                    9c:a1:eb:ec:7c:9c:1e:c1:ce:f3:5f:9a:53:eb:df:
                    5e:b9:88:1d:94:ce:bf:83:ea:aa:cb:57:96:af:a2:
                    74:e8:57:75:c1:ff:b8:e6:22:1a:d0:08:3a:08:cc:
                    d7:44:b0:64:fb:35:85:47:67:3c:a1:24:be:b5:48:
                    9b:34:61:cf:f2:3f:dc:d6:ec:7e:e1:bf:64:20:3c:
                    07:ca:48:ef:64:ca:9e:c3:3c:3c:52:45:27:e8:cb:
                    78:1b:85:4a:af:ce:30:a8:f8:38:c7:dd:fa:93:42:
                    3a:5e:c9:95:57:56:4b:de:a9:4c:09:f5:30:62:c2:
                    27:9d:31:fe:05:7a:be:9d:64:1e:77:6d:0b:5b:d7:
                    3b:6f:65:c8:d2:fc:e2:cd:8c:ef:f3:5e:96:75:4f:
                    6e:03:10:96:11:0c:e2:e4:47:41:47:be:d6:39:19:
                    f0:d7:02:99:db:b9:72:fa:89:95:f0:1a:6f:c1:84:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:46:76:D3:04:BE:38:AE:1C:EB:9D:9C:1F:9F:AC:2E:35:AC:38
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e97f3ad6-fc45-49ca-b1db-41a0f40ecf78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ae0::/43

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:8f:0e:b1:b4:97:83:7b:91:59:56:f1:cf:b1:0c:95:d0:
         94:65:b3:fd:77:35:16:f0:45:51:c2:22:5c:ba:26:9d:10:ec:
         7c:56:e3:cc:67:65:5b:8e:a2:53:ce:61:fb:60:7c:d7:9a:c6:
         e4:3b:7f:aa:a2:1c:26:dd:4d:09:6c:f5:3c:a2:b7:02:60:df:
         28:0a:af:e2:76:75:ef:02:c7:a0:b8:74:b0:84:f8:87:30:9e:
         d6:2f:5f:93:f9:a8:59:80:70:b1:cb:63:87:a3:f1:0e:c2:05:
         90:0e:e6:9d:da:2a:40:03:0d:7b:bc:0c:35:e5:87:9b:82:73:
         09:58:16:d7:36:18:67:fc:05:f9:af:5a:fd:f9:45:04:f4:42:
         c1:43:34:d9:ff:8e:c2:4d:42:b0:cc:4c:0c:75:4c:4e:11:60:
         38:a5:de:80:7a:34:e9:78:02:00:13:2e:c0:33:6f:c5:3c:47:
         05:0b:ba:a5:e2:1a:90:be:14:61:f6:57:d7:46:f7:10:23:ec:
         86:bc:9e:05:6d:e1:ca:86:3f:55:92:51:5d:91:c4:45:a7:ac:
         ce:9d:37:24:f3:04:e2:3c:47:86:92:fd:9d:72:40:6c:4a:43:
         10:b4:b4:82:f4:45:ec:f1:a9:3c:3d:13:ee:5f:8e:72:de:43:
         30:93:89:ce
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPnu6U0ubn5fRZ8RWEIfD2fBTeQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDM1MDA5WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWE3NGY1Y2I2ZjdmNmI3ZTg5YWQ0ZWZhY2Q4OWFlZjgw
MzE0MDhhMzBhY2M0MzJjMjQ5MGI4YWZjZjZhMmIyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCq8uq9ImZpD8EJSwDraOhP9r7Wp8xYCLMMF+Cu3az1vVnK
ZZmO0yrSHZc/21T254hHtOS6psGSI6UGWpUo3nQqJoAvMiG5n3xaSZyh6+x8nB7B
zvNfmlPr3165iB2Uzr+D6qrLV5avonToV3XB/7jmIhrQCDoIzNdEsGT7NYVHZzyh
JL61SJs0Yc/yP9zW7H7hv2QgPAfKSO9kyp7DPDxSRSfoy3gbhUqvzjCo+DjH3fqT
QjpeyZVXVkveqUwJ9TBiwiedMf4Fer6dZB53bQtb1ztvZcjS/OLNjO/zXpZ1T24D
EJYRDOLkR0FHvtY5GfDXApnbuXL6iZXwGm/BhL2zAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+KNGdtMEvjiuHOudnB+frC41rDgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U5N2YzYWQ2LWZjNDUtNDljYS1iMWRiLTQxYTBmNDBlY2Y3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAAKuAwDQYJKoZIhvcNAQELBQADggEBAFlbjw6xtJeDe5FZVvHPsQyV
0JRls/13NRbwRVHCIly6Jp0Q7HxW48xnZVuOolPOYftgfNeaxuQ7f6qiHCbdTQls
9TyitwJg3ygKr+J2de8Cx6C4dLCE+IcwntYvX5P5qFmAcLHLY4ej8Q7CBZAO5p3a
KkADDXu8DDXlh5uCcwlYFtc2GGf8BfmvWv35RQT0QsFDNNn/jsJNQrDMTAx1TE4R
YDil3oB6NOl4AgATLsAzb8U8RwULuqXiGpC+FGH2V9dG9xAj7Ia8ngVt4cqGP1WS
UV2RxEWnrM6dNyTzBOI8R4aS/Z1yQGxKQxC0tIL0RezxqTw9E+5fjnLeQzCTic4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:46 2026 by rpki-client