Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9dfb4f4-fae2-4898-a587-5963d9d11240.roa
File:                     f9dfb4f4-fae2-4898-a587-5963d9d11240.roa (raw, json)
Hash identifier:          Mi322SSGKaq+MpFHHm8xeGqxg8ZdtAuMsRxYKPgRT1g=
Subject key identifier:   60:39:AB:59:69:D4:86:2D:94:F5:F8:26:CA:C8:5F:C6:04:F8:8C:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60DEC2797D920F88D009BCA07B233B8CBD445406
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9dfb4f4-fae2-4898-a587-5963d9d11240.roa
Signing time:             Fri 13 Feb 2026 03:01:17 +0000
ROA not before:           Fri 13 Feb 2026 03:01:17 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a1c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:de:c2:79:7d:92:0f:88:d0:09:bc:a0:7b:23:3b:8c:bd:44:54:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:01:17 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e1fad078e44e8b620c029dea64aa63ecc7c114c6b97c78b5a86472575cc173f0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:59:23:96:b4:68:ba:de:d5:70:f3:4b:91:
                    bb:7c:c1:32:88:0d:f5:1a:c1:8d:35:c7:e5:cd:47:
                    f1:86:c2:fa:2d:3e:b5:47:8d:24:08:dc:1d:ab:e4:
                    bf:8e:a2:59:93:f5:14:15:4a:0e:ca:18:c8:e7:24:
                    f6:1e:3f:f4:8d:e6:6e:5b:5f:dc:61:31:b5:0d:1c:
                    31:bf:9b:6f:48:6d:0c:eb:2f:b7:0e:a2:40:42:7d:
                    5c:d7:cf:df:66:7f:eb:5f:a7:21:b0:76:a1:a7:40:
                    7e:53:e0:1f:7d:70:c8:d5:91:3d:eb:26:9c:1b:3a:
                    83:7b:a4:93:17:ca:48:22:b6:2f:c2:9c:17:cd:32:
                    13:21:3b:4a:80:9d:ac:bf:64:36:e4:12:7f:84:81:
                    75:ae:2b:08:4a:3e:38:84:3c:ca:70:58:4c:76:ac:
                    4d:b9:0a:86:4c:b5:ea:86:00:68:2f:fe:4c:07:ba:
                    c3:f6:3a:e1:06:0e:e9:36:34:27:25:73:ce:b4:6b:
                    3d:b4:44:fd:7a:ae:2d:72:3a:62:67:54:63:bc:c4:
                    74:de:1e:9e:ba:3c:89:46:27:87:35:5a:81:20:bc:
                    62:15:02:04:22:7b:0d:1e:50:e9:34:b0:96:b8:56:
                    e7:27:1e:e6:ef:e3:f4:94:9c:51:9e:1a:44:d2:97:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:AB:59:69:D4:86:2D:94:F5:F8:26:CA:C8:5F:C6:04:F8:8C:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f9dfb4f4-fae2-4898-a587-5963d9d11240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a1c::/46

    Signature Algorithm: sha256WithRSAEncryption
         b2:1b:d3:73:a2:11:84:37:bf:e2:c2:4d:47:de:6b:2d:18:f8:
         4b:60:79:ec:aa:83:68:07:57:91:7d:43:f7:d9:a2:e7:71:d4:
         6a:7f:ab:ea:bd:9f:d5:8c:8e:cd:81:5f:6a:98:36:9b:9a:3c:
         df:8a:41:f5:0d:94:f8:55:ba:1a:4c:1e:96:ca:ae:aa:a4:06:
         6f:a6:3b:c0:11:ba:99:9f:69:3c:ac:ea:c1:1e:0c:8a:dd:2f:
         f2:75:56:4c:8d:ec:8b:5d:e5:dc:34:d2:83:8c:6e:e0:91:93:
         cc:e9:9c:7e:98:17:8c:87:1a:a2:09:d8:53:7e:30:71:25:fa:
         cd:33:46:9c:eb:c6:04:c8:68:60:3e:5f:73:74:31:9d:3c:d3:
         92:ad:7a:c5:9d:11:9c:09:37:da:16:c6:0f:e4:cb:f8:06:6a:
         a8:ff:36:1b:0c:4c:98:b8:7c:0c:81:c8:a6:8c:91:d7:34:b5:
         53:70:71:0f:17:e9:38:34:b6:5b:9b:dd:aa:7f:0c:41:43:c6:
         71:21:86:55:76:c1:16:53:9c:a3:35:db:f6:89:10:d3:8b:c2:
         9a:f3:cc:d6:18:f1:3e:f0:03:f4:33:c2:34:64:c0:86:90:1b:
         5e:af:41:7e:be:85:74:ca:08:68:32:16:af:7e:11:a8:82:28:
         98:9d:18:1f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYN7CeX2SD4jQCbygeyM7jL1EVAYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDMwMTE3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWZhZDA3OGU0NGU4YjYyMGMwMjlkZWE2NGFhNjNlY2M3
YzExNGM2Yjk3Yzc4YjVhODY0NzI1NzVjYzE3M2YwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCV6lkjlrRout7VcPNLkbt8wTKIDfUawY01x+XNR/GGwvot
PrVHjSQI3B2r5L+OolmT9RQVSg7KGMjnJPYeP/SN5m5bX9xhMbUNHDG/m29IbQzr
L7cOokBCfVzXz99mf+tfpyGwdqGnQH5T4B99cMjVkT3rJpwbOoN7pJMXykgiti/C
nBfNMhMhO0qAnay/ZDbkEn+EgXWuKwhKPjiEPMpwWEx2rE25CoZMteqGAGgv/kwH
usP2OuEGDuk2NCclc860az20RP16ri1yOmJnVGO8xHTeHp66PIlGJ4c1WoEgvGIV
AgQiew0eUOk0sJa4VucnHubv4/SUnFGeGkTSl8HvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUYDmrWWnUhi2U9fgmyshfxgT4jOIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y5ZGZiNGY0LWZhZTItNDg5OC1hNTg3LTU5NjNkOWQxMTI0MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOhwwDQYJKoZIhvcNAQELBQADggEBALIb03OiEYQ3v+LCTUfeay0Y
+Etgeeyqg2gHV5F9Q/fZoudx1Gp/q+q9n9WMjs2BX2qYNpuaPN+KQfUNlPhVuhpM
HpbKrqqkBm+mO8ARupmfaTys6sEeDIrdL/J1VkyN7Itd5dw00oOMbuCRk8zpnH6Y
F4yHGqIJ2FN+MHEl+s0zRpzrxgTIaGA+X3N0MZ0805KtesWdEZwJN9oWxg/ky/gG
aqj/NhsMTJi4fAyByKaMkdc0tVNwcQ8X6Tg0tlub3ap/DEFDxnEhhlV2wRZTnKM1
2/aJENOLwprzzNYY8T7wA/QzwjRkwIaQG16vQX6+hXTKCGgyFq9+EaiCKJidGB8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:25 2026 by rpki-client