Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f907e59b-37cc-4dcb-8b9e-a07285f007eb.roa
File:                     f907e59b-37cc-4dcb-8b9e-a07285f007eb.roa (raw, json)
Hash identifier:          KvlWiQn5OgH6v5qSZu5ojBIR0dr5PwZ+ykTOQEeMggg=
Subject key identifier:   16:0E:3A:C4:85:F3:99:08:5E:CF:0C:D6:0B:EB:67:18:0C:C1:36:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       049C3705118D5912DE23DAC1844BC35039FDB9F8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f907e59b-37cc-4dcb-8b9e-a07285f007eb.roa
Signing time:             Fri 13 Feb 2026 08:41:37 +0000
ROA not before:           Fri 13 Feb 2026 08:41:37 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3738::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9c:37:05:11:8d:59:12:de:23:da:c1:84:4b:c3:50:39:fd:b9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:41:37 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2cedf1be47c0dac609acfbea084586afae884c9437e7a7c960fb963c28758895, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:32:63:e6:45:1b:5f:56:2f:8d:0c:b1:63:
                    60:4a:e4:f9:3f:e6:f9:9f:1a:32:d4:27:17:f0:e4:
                    a7:7b:2d:b8:a8:19:eb:88:1e:25:b4:42:6a:26:24:
                    9b:b6:c8:d0:42:52:a8:2a:5f:f7:63:fb:15:0f:0b:
                    28:99:f1:e5:2a:b4:79:c0:8e:4b:c3:7f:e4:34:74:
                    ee:12:b3:a8:66:01:3e:06:7d:7e:b6:90:42:d8:b6:
                    0a:4d:30:0e:c5:d7:00:91:6a:3e:4f:77:b4:0a:03:
                    6e:13:9e:5d:ca:d4:64:f9:04:9c:11:53:19:e5:9b:
                    98:c2:c3:3a:17:86:c4:a8:13:43:bd:30:21:08:be:
                    02:ba:65:5a:52:81:b8:6c:18:f2:9e:20:20:0f:70:
                    56:be:b6:a8:5e:c9:b7:e9:bf:6c:37:c9:61:f6:92:
                    2e:a6:e2:9e:66:61:7f:c6:c1:f1:c3:c9:23:f9:63:
                    c2:00:ba:78:bc:20:88:cd:1f:53:0d:20:80:8f:0d:
                    a4:14:30:8a:65:a0:56:c5:8d:14:f8:65:db:5b:ef:
                    21:b2:74:56:3f:01:50:5b:6a:53:6a:95:77:6d:a0:
                    22:c8:6b:5d:a2:2d:3c:4f:4c:8e:38:37:ed:51:fc:
                    5a:7e:85:b7:15:05:28:cc:c4:dd:0a:d6:b4:c9:fd:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:3A:C4:85:F3:99:08:5E:CF:0C:D6:0B:EB:67:18:0C:C1:36:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f907e59b-37cc-4dcb-8b9e-a07285f007eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3738::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:16:05:01:52:00:43:f6:3e:92:6e:1d:4d:28:41:64:3a:5f:
         8b:04:ff:c7:60:9c:67:55:35:89:fe:c6:e0:18:4e:03:e7:59:
         9e:26:7b:76:8f:d8:9d:36:15:cd:e6:bf:9c:39:9b:05:e4:55:
         e6:14:8b:b9:9d:08:28:d6:a9:be:67:7a:e7:04:4d:84:ac:db:
         e3:b3:61:39:82:7b:1b:2c:13:04:c4:1f:02:05:40:77:98:bb:
         e6:00:19:01:b8:93:c8:82:d7:35:ac:07:05:e8:10:e1:44:e1:
         52:30:6b:2f:b2:7f:0c:d2:fe:71:c1:d2:c5:2d:79:2d:19:44:
         dc:b1:bd:19:ac:7d:9f:c6:c9:b6:b7:78:48:5b:d3:a3:2f:18:
         f1:9b:eb:c0:f8:32:3e:f1:b5:0f:76:10:78:e5:22:dd:db:55:
         c6:8f:30:8e:ee:0c:83:bb:a0:a6:6d:01:eb:c1:27:a2:93:a6:
         cf:c9:4e:b0:0e:47:71:01:a4:0d:06:42:18:be:2d:d2:3c:a9:
         4f:8a:ca:79:3c:39:5c:ec:ea:bc:33:5c:79:cb:8e:29:d5:e4:
         19:2f:e0:a0:1a:bb:05:53:79:34:24:8c:79:f0:ed:1b:2f:f3:
         bf:b1:5a:18:5c:fb:8f:5d:36:6a:ef:4d:5b:f1:90:6d:9f:1a:
         54:85:5a:32
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBJw3BRGNWRLeI9rBhEvDUDn9ufgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDg0MTM3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyY2VkZjFiZTQ3YzBkYWM2MDlhY2ZiZWEwODQ1ODZhZmFl
ODg0Yzk0MzdlN2E3Yzk2MGZiOTYzYzI4NzU4ODk1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJhjJj5kUbX1YvjQyxY2BK5Pk/5vmfGjLUJxfw5Kd7Lbio
GeuIHiW0QmomJJu2yNBCUqgqX/dj+xUPCyiZ8eUqtHnAjkvDf+Q0dO4Ss6hmAT4G
fX62kELYtgpNMA7F1wCRaj5Pd7QKA24Tnl3K1GT5BJwRUxnlm5jCwzoXhsSoE0O9
MCEIvgK6ZVpSgbhsGPKeICAPcFa+tqheybfpv2w3yWH2ki6m4p5mYX/GwfHDySP5
Y8IAuni8IIjNH1MNIICPDaQUMIploFbFjRT4Zdtb7yGydFY/AVBbalNqlXdtoCLI
a12iLTxPTI44N+1R/Fp+hbcVBSjMxN0K1rTJ/TSDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUFg46xIXzmQhezwzWC+tnGAzBNt8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y5MDdlNTliLTM3Y2MtNGRjYi04YjllLWEwNzI4NWYwMDdlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANzgwDQYJKoZIhvcNAQELBQADggEBAGUWBQFSAEP2PpJuHU0oQWQ6
X4sE/8dgnGdVNYn+xuAYTgPnWZ4me3aP2J02Fc3mv5w5mwXkVeYUi7mdCCjWqb5n
eucETYSs2+OzYTmCexssEwTEHwIFQHeYu+YAGQG4k8iC1zWsBwXoEOFE4VIway+y
fwzS/nHB0sUteS0ZRNyxvRmsfZ/Gyba3eEhb06MvGPGb68D4Mj7xtQ92EHjlIt3b
VcaPMI7uDIO7oKZtAevBJ6KTps/JTrAOR3EBpA0GQhi+LdI8qU+Kynk8OVzs6rwz
XHnLjinV5Bkv4KAauwVTeTQkjHnw7Rsv87+xWhhc+49dNmrvTVvxkG2fGlSFWjI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:05 2026 by rpki-client