Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa
File:                     f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa (raw, json)
Hash identifier:          ApulatefEgvV6pmSxl/dNM9QnaFqMtn7nsWvD/z0hZY=
Subject key identifier:   4B:E4:37:E7:D2:69:94:3A:CE:ED:3E:6E:29:ED:B7:32:DA:11:46:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35C2CC1C32A68BC12F4350D1CA3BC6FC68547AB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa
Signing time:             Thu 12 Feb 2026 00:11:46 +0000
ROA not before:           Thu 12 Feb 2026 00:11:46 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:298c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c2:cc:1c:32:a6:8b:c1:2f:43:50:d1:ca:3b:c6:fc:68:54:7a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:11:46 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=e07dc3fd689e90272b774ce938f5ea2df543a27b5c4b3fd6b77488164785528a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:94:cf:48:f9:a1:70:13:04:f7:6e:83:c1:
                    b0:5d:6c:69:f0:b3:8f:96:ce:e7:6b:d2:c4:cd:53:
                    17:f1:e0:00:3a:8f:ba:26:ca:42:ec:e1:be:e1:1e:
                    af:62:b9:79:ff:29:06:a1:42:63:31:e3:6f:5e:34:
                    b8:92:14:c0:14:ef:97:81:69:8a:8a:0a:d9:b5:fa:
                    95:68:f0:cd:e7:51:f7:6e:18:fc:6d:1c:32:59:de:
                    d6:26:80:64:e0:44:23:a8:85:44:db:af:93:c6:50:
                    68:c8:ee:f8:09:4d:c1:50:19:6e:75:4c:f5:23:f1:
                    c7:9b:15:57:42:ac:a7:f1:c7:d7:6c:cc:f8:52:f8:
                    4e:a5:20:3a:e2:49:a8:10:05:fc:e6:21:36:9c:c0:
                    62:fd:4d:23:0d:c0:6c:44:20:da:0f:7a:7f:51:0d:
                    a2:b1:9c:e3:03:53:bf:73:cd:5a:06:d8:c6:32:ac:
                    9d:05:58:9f:a0:6b:57:50:c4:7a:f6:45:22:87:c3:
                    c8:b0:35:9e:a8:fe:28:bd:e5:0d:f6:b8:61:04:a2:
                    8e:6f:6b:3d:0d:ad:37:cb:fc:6e:fb:15:c2:ac:5b:
                    4e:ee:5f:e2:c0:25:4c:45:50:94:a0:03:2c:39:5c:
                    ae:ba:b0:73:ff:ca:f5:7d:4b:55:ff:88:99:08:51:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E4:37:E7:D2:69:94:3A:CE:ED:3E:6E:29:ED:B7:32:DA:11:46:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:298c::/47

    Signature Algorithm: sha256WithRSAEncryption
         79:55:dd:bb:7f:8f:2c:44:ce:d0:58:e7:7d:b3:dc:0e:ed:a7:
         56:14:34:f6:d2:f6:bd:14:58:65:a2:f6:de:a6:8d:b7:03:75:
         ea:bb:e3:4c:8e:8a:b5:15:06:a5:e7:99:69:51:a8:e9:db:c8:
         58:bf:2f:f0:de:32:54:cc:2c:a4:8f:ba:88:78:cc:b5:ab:01:
         91:82:67:97:a0:83:7a:5c:a5:9a:27:c7:2a:8d:b6:11:b3:75:
         18:6e:e8:17:28:af:82:60:3a:fa:35:a8:1d:26:17:ad:a5:ab:
         b9:d3:be:b6:73:e2:9e:ce:06:7c:63:e3:96:21:8e:82:92:3f:
         79:5f:a0:a0:96:83:2c:da:3c:33:ae:db:ab:20:d0:d2:53:52:
         e2:0d:8b:73:73:4f:35:8a:ab:a3:ef:90:b7:82:2c:ec:c9:78:
         57:e9:72:9a:90:a2:0d:d0:b3:f8:65:06:90:a6:2f:f9:5e:44:
         d6:48:1c:62:f1:09:27:24:c9:af:fc:60:2b:9a:24:ad:0d:77:
         ad:05:d5:d0:a7:bb:97:44:ac:fb:15:40:93:d5:8c:fc:a6:fb:
         6f:52:31:3b:da:f5:cc:06:2c:0a:76:75:ff:05:1f:6a:bf:a6:
         1a:81:82:ef:f9:ec:57:8d:d6:f6:5e:92:8c:66:0d:fe:27:41:
         08:ac:15:7d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNcLMHDKmi8EvQ1DRyjvG/GhUerEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDAxMTQ2WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDdkYzNmZDY4OWU5MDI3MmI3NzRjZTkzOGY1ZWEyZGY1
NDNhMjdiNWM0YjNmZDZiNzc0ODgxNjQ3ODU1MjhhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw05TPSPmhcBME926DwbBdbGnws4+Wzudr0sTNUxfx4AA6
j7omykLs4b7hHq9iuXn/KQahQmMx429eNLiSFMAU75eBaYqKCtm1+pVo8M3nUfdu
GPxtHDJZ3tYmgGTgRCOohUTbr5PGUGjI7vgJTcFQGW51TPUj8cebFVdCrKfxx9ds
zPhS+E6lIDriSagQBfzmITacwGL9TSMNwGxEINoPen9RDaKxnOMDU79zzVoG2MYy
rJ0FWJ+ga1dQxHr2RSKHw8iwNZ6o/ii95Q32uGEEoo5vaz0NrTfL/G77FcKsW07u
X+LAJUxFUJSgAyw5XK66sHP/yvV9S1X/iJkIUZBbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUS+Q359JplDrO7T5uKe23MtoRRnUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y2MWNiZjgzLTRkZGMtNDgwOC1hZDc3LTg2Y2I3NTliZGUyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKYwwDQYJKoZIhvcNAQELBQADggEBAHlV3bt/jyxEztBY532z3A7t
p1YUNPbS9r0UWGWi9t6mjbcDdeq740yOirUVBqXnmWlRqOnbyFi/L/DeMlTMLKSP
uoh4zLWrAZGCZ5egg3pcpZonxyqNthGzdRhu6Bcor4JgOvo1qB0mF62lq7nTvrZz
4p7OBnxj45YhjoKSP3lfoKCWgyzaPDOu26sg0NJTUuINi3NzTzWKq6PvkLeCLOzJ
eFfpcpqQog3Qs/hlBpCmL/leRNZIHGLxCSckya/8YCuaJK0Nd60F1dCnu5dErPsV
QJPVjPym+29SMTva9cwGLAp2df8FH2q/phqBgu/57FeN1vZekoxmDf4nQQisFX0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:39 2026 by rpki-client