Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0267831-a266-49af-aec3-7272b31809a2.roa
File:                     f0267831-a266-49af-aec3-7272b31809a2.roa (raw, json)
Hash identifier:          H6ZU1mK7aefZuFaaJKGWAa+Wu24lhYVqUemPWKw1hhA=
Subject key identifier:   8F:DF:F4:DD:48:41:37:70:7C:FF:30:C6:48:89:09:80:7A:A2:62:28
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DADA4C18AC94FA70E41B0CD7C02E5F156ADABD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0267831-a266-49af-aec3-7272b31809a2.roa
Signing time:             Fri 13 Feb 2026 12:30:09 +0000
ROA not before:           Fri 13 Feb 2026 12:30:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36e8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:a4:c1:8a:c9:4f:a7:0e:41:b0:cd:7c:02:e5:f1:56:ad:ab:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:30:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=9edc12257e777c15d7ae391715902107ed6937e78f74db928fa5c7414f1b1c5b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:4d:a6:2e:f8:32:1e:dc:b9:e1:d6:15:0a:
                    95:6a:df:3a:bb:7f:dc:76:fc:05:7d:ca:64:57:f2:
                    99:9d:a8:dc:a5:6b:ee:60:ee:f7:36:00:7a:ae:1e:
                    ff:d8:01:06:ad:d3:bf:cd:74:cb:20:39:d5:c5:8c:
                    49:1d:a1:cb:66:be:d7:98:9a:ca:8e:c5:bc:31:89:
                    37:58:dd:c9:cd:e6:4b:95:30:a7:37:09:17:fe:84:
                    04:3c:57:d8:de:eb:34:8a:36:a0:f9:11:bd:13:97:
                    97:ee:9f:95:1e:48:a9:13:c2:37:25:43:8f:dc:6d:
                    c3:38:86:d2:6a:64:d8:ba:2f:e2:c7:1b:35:49:93:
                    b8:b2:54:e8:fc:66:3b:9c:d0:9b:fa:99:f3:c7:09:
                    33:ec:c7:26:bd:89:24:21:d3:8a:fa:d3:83:88:4a:
                    25:7d:6b:8c:f4:ed:93:89:a1:e8:54:20:d3:30:85:
                    be:84:3b:70:76:da:35:55:44:e8:ea:58:c3:6f:ca:
                    50:cb:e3:8d:67:f7:e1:8b:c8:d1:12:56:23:57:da:
                    3f:7e:7f:5f:6c:5f:8e:fa:c9:c9:5c:db:01:b3:f5:
                    2a:b8:ef:a1:1b:4a:bf:4d:eb:24:d2:94:02:c2:24:
                    2a:db:b6:92:af:40:56:8c:80:f2:4b:82:17:a5:d2:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:F4:DD:48:41:37:70:7C:FF:30:C6:48:89:09:80:7A:A2:62:28
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0267831-a266-49af-aec3-7272b31809a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36e8::/46

    Signature Algorithm: sha256WithRSAEncryption
         50:18:87:ad:af:e5:00:50:1e:38:6a:3b:f7:5a:03:20:37:b9:
         49:68:ac:da:e2:7e:c3:9d:11:94:68:4c:44:73:ff:74:9c:dc:
         58:ca:75:e8:76:06:32:e6:68:39:89:53:fd:b5:9a:51:c4:67:
         ff:52:30:70:82:2c:32:fc:a6:f2:8f:f0:81:92:d0:d2:37:06:
         76:31:d5:22:86:b1:52:f0:cf:c4:f1:4a:f8:da:6e:33:29:cb:
         54:69:32:e0:a6:ff:ce:98:c4:04:85:fb:72:cf:c4:62:35:63:
         2e:e4:a3:17:5f:fe:77:58:1e:d8:22:aa:cf:34:b4:a6:11:ab:
         27:c9:75:6a:3d:63:24:c5:4b:ad:d6:5a:c9:2d:18:dd:73:a3:
         79:fd:73:04:67:46:9d:1a:6a:ce:8d:b2:65:0a:9a:5d:a4:04:
         96:0c:14:da:f3:53:de:15:9f:fc:fe:a0:0b:01:9b:fa:00:fb:
         69:09:23:7f:91:c0:d9:1a:2b:04:12:30:9e:74:e1:bf:e2:e0:
         4c:64:16:76:f1:c1:f3:78:9c:0e:40:ee:43:60:84:1e:b5:3f:
         a9:be:54:6d:33:9f:be:10:16:7b:18:7a:2b:7a:40:2d:5c:74:
         fc:66:53:11:98:de:e4:4e:fd:9e:d9:2e:11:05:32:42:bf:21:
         60:98:a5:09
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHa2kwYrJT6cOQbDNfALl8Vatq9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTIzMDA5WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZWRjMTIyNTdlNzc3YzE1ZDdhZTM5MTcxNTkwMjEwN2Vk
NjkzN2U3OGY3NGRiOTI4ZmE1Yzc0MTRmMWIxYzViMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5mk2mLvgyHty54dYVCpVq3zq7f9x2/AV9ymRX8pmdqNyl
a+5g7vc2AHquHv/YAQat07/NdMsgOdXFjEkdoctmvteYmsqOxbwxiTdY3cnN5kuV
MKc3CRf+hAQ8V9je6zSKNqD5Eb0Tl5fun5UeSKkTwjclQ4/cbcM4htJqZNi6L+LH
GzVJk7iyVOj8Zjuc0Jv6mfPHCTPsxya9iSQh04r604OISiV9a4z07ZOJoehUINMw
hb6EO3B22jVVROjqWMNvylDL441n9+GLyNESViNX2j9+f19sX476yclc2wGz9Sq4
76EbSr9N6yTSlALCJCrbtpKvQFaMgPJLghel0qurAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUj9/03UhBN3B8/zDGSIkJgHqiYigwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YwMjY3ODMxLWEyNjYtNDlhZi1hZWMzLTcyNzJiMzE4MDlhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAANugwDQYJKoZIhvcNAQELBQADggEBAFAYh62v5QBQHjhqO/daAyA3
uUlorNrifsOdEZRoTERz/3Sc3FjKdeh2BjLmaDmJU/21mlHEZ/9SMHCCLDL8pvKP
8IGS0NI3BnYx1SKGsVLwz8TxSvjabjMpy1RpMuCm/86YxASF+3LPxGI1Yy7koxdf
/ndYHtgiqs80tKYRqyfJdWo9YyTFS63WWsktGN1zo3n9cwRnRp0aas6NsmUKml2k
BJYMFNrzU94Vn/z+oAsBm/oA+2kJI3+RwNkaKwQSMJ504b/i4ExkFnbxwfN4nA5A
7kNghB61P6m+VG0zn74QFnsYeit6QC1cdPxmUxGY3uRO/Z7ZLhEFMkK/IWCYpQk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:04 2026 by rpki-client