Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed3b7663-c151-4029-baf5-eaaa0179f763.roa
File:                     ed3b7663-c151-4029-baf5-eaaa0179f763.roa (raw, json)
Hash identifier:          KrkyCy0PmcGRslLc/cFTDzaGzR2BWUKTZYxIHtSBvDY=
Subject key identifier:   45:E8:01:F7:08:69:9C:C3:4C:B6:DB:80:72:B7:EF:73:DF:FC:48:AC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       23FDFC89A277D99228CA59859C1D4841B87C6717
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed3b7663-c151-4029-baf5-eaaa0179f763.roa
Signing time:             Thu 12 Feb 2026 01:20:52 +0000
ROA not before:           Thu 12 Feb 2026 01:20:52 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ad6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fd:fc:89:a2:77:d9:92:28:ca:59:85:9c:1d:48:41:b8:7c:67:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:20:52 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=950300f46d467d9f6595985f71671eb47f6b91d4235a82196497ef4389d6394f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:6b:b1:79:cb:61:ae:ef:f6:1b:91:e8:7a:
                    2d:ce:4c:fd:63:7c:a4:85:4e:d9:5e:26:db:d3:1f:
                    9c:dd:80:fc:de:a5:7f:c2:af:ae:53:4b:62:e8:91:
                    82:ec:c7:4a:f3:d2:c9:d9:62:ff:4f:3d:17:be:eb:
                    c2:b1:9d:3e:e4:95:eb:9d:e5:c7:d3:4d:07:6b:6b:
                    91:b6:1c:21:ce:39:da:e0:8c:87:2c:81:80:aa:06:
                    b6:37:58:7e:2e:ef:fa:b0:55:0d:ce:a0:85:b6:08:
                    23:3a:df:3c:43:99:8a:80:fa:11:49:c2:a3:1e:b8:
                    6f:60:99:b8:59:76:8a:29:22:8e:e1:0a:59:31:fa:
                    a8:76:58:32:e3:7f:0f:db:0a:45:8e:69:2e:a8:eb:
                    16:87:89:3e:42:bb:f8:bc:11:65:2c:ba:26:06:3e:
                    81:b5:65:84:6c:31:d7:f9:24:d4:fd:56:eb:83:b6:
                    aa:bf:29:a3:eb:60:57:1f:b2:6e:bd:0c:08:6d:24:
                    89:05:fc:84:a1:ec:51:4e:bb:67:d0:f2:c3:4d:50:
                    03:01:5d:df:85:a6:28:4b:89:70:4c:b9:e8:89:4a:
                    5f:b0:1e:c7:97:c7:cc:15:0c:19:0e:8f:54:ed:46:
                    7a:a5:a1:0f:92:1f:15:ee:2c:69:2e:33:80:e0:20:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E8:01:F7:08:69:9C:C3:4C:B6:DB:80:72:B7:EF:73:DF:FC:48:AC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed3b7663-c151-4029-baf5-eaaa0179f763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ad6::/47

    Signature Algorithm: sha256WithRSAEncryption
         ac:80:4a:28:d5:bf:15:2a:4b:a9:0d:ad:19:ff:dc:74:93:86:
         84:4e:1b:e9:e6:7e:e7:6f:d5:67:e4:ea:df:8d:02:e5:88:e9:
         18:4d:33:98:12:bc:a1:8f:a9:88:9f:9d:48:f0:fc:57:27:e0:
         6a:80:11:84:48:b7:f8:39:97:48:c6:ba:5d:a2:ff:c9:4a:9a:
         6c:42:30:0b:38:89:42:c9:75:5c:04:17:a0:ae:8e:93:28:92:
         8b:84:05:ec:5c:01:3a:28:10:c2:d0:d3:c8:ee:1d:78:d1:1e:
         4a:ac:88:ff:97:63:7c:1e:42:e9:33:30:c1:ba:e3:39:67:62:
         87:7b:42:cd:b5:b3:5d:b8:07:a0:1c:a9:cc:63:e1:63:48:58:
         bf:a6:53:00:f4:c1:cc:e2:28:cd:ac:c6:5d:13:f9:1f:27:68:
         a7:51:5a:ff:98:a0:42:df:45:6f:f5:f3:36:d8:63:95:f0:36:
         72:01:d9:3b:d0:ea:94:71:f0:60:fb:59:ae:66:37:e2:bf:62:
         31:67:78:70:02:e3:01:b5:d6:2d:d9:29:9b:c7:11:a6:27:ad:
         1f:9f:a5:e2:91:ca:3c:f9:09:7d:1d:ee:b0:f4:7b:c3:2a:89:
         02:83:fd:2b:61:f1:96:4f:76:a1:3e:d0:42:f7:04:3e:6d:56:
         55:5d:f6:18
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUI/38iaJ32ZIoylmFnB1IQbh8ZxcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEyMDUyWhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTAzMDBmNDZkNDY3ZDlmNjU5NTk4NWY3MTY3MWViNDdm
NmI5MWQ0MjM1YTgyMTk2NDk3ZWY0Mzg5ZDYzOTRmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDILmuxecthru/2G5Hoei3OTP1jfKSFTtleJtvTH5zdgPze
pX/Cr65TS2LokYLsx0rz0snZYv9PPRe+68KxnT7kleud5cfTTQdra5G2HCHOOdrg
jIcsgYCqBrY3WH4u7/qwVQ3OoIW2CCM63zxDmYqA+hFJwqMeuG9gmbhZdoopIo7h
Clkx+qh2WDLjfw/bCkWOaS6o6xaHiT5Cu/i8EWUsuiYGPoG1ZYRsMdf5JNT9VuuD
tqq/KaPrYFcfsm69DAhtJIkF/ISh7FFOu2fQ8sNNUAMBXd+FpihLiXBMueiJSl+w
HseXx8wVDBkOj1TtRnqloQ+SHxXuLGkuM4DgILTnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURegB9whpnMNMttuAcrfvc9/8SKwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2VkM2I3NjYzLWMxNTEtNDAyOS1iYWY1LWVhYWEwMTc5Zjc2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKtYwDQYJKoZIhvcNAQELBQADggEBAKyASijVvxUqS6kNrRn/3HST
hoROG+nmfudv1Wfk6t+NAuWI6RhNM5gSvKGPqYifnUjw/Fcn4GqAEYRIt/g5l0jG
ul2i/8lKmmxCMAs4iULJdVwEF6CujpMokouEBexcATooEMLQ08juHXjRHkqsiP+X
Y3weQukzMMG64zlnYod7Qs21s124B6Acqcxj4WNIWL+mUwD0wcziKM2sxl0T+R8n
aKdRWv+YoELfRW/18zbYY5XwNnIB2TvQ6pRx8GD7Wa5mN+K/YjFneHAC4wG11i3Z
KZvHEaYnrR+fpeKRyjz5CX0d7rD0e8MqiQKD/Sth8ZZPdqE+0EL3BD5tVlVd9hg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:48 2026 by rpki-client