Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fdb5ddc3-a6ab-4c8a-babe-30aef115d8dc.roa
File:                     fdb5ddc3-a6ab-4c8a-babe-30aef115d8dc.roa (raw, json)
Hash identifier:          3CLAn/st1hHewCO4rXrP7S7I6fDUfnb0uksGknaS1z8=
Subject key identifier:   67:26:74:68:7C:9B:A9:07:79:8C:69:DA:2F:D9:C9:0D:53:8C:FD:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4527C7DFE1F6F226FCD051D7AD2A2C71A01111A9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fdb5ddc3-a6ab-4c8a-babe-30aef115d8dc.roa
Signing time:             Fri 13 Feb 2026 04:20:07 +0000
ROA not before:           Fri 13 Feb 2026 04:20:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3278::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:c7:df:e1:f6:f2:26:fc:d0:51:d7:ad:2a:2c:71:a0:11:11:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:20:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f77aa9419e35f0ccb6961bc04f5aeba8544361df50d69aacf9d97e98707ec55b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:60:8b:69:f9:f5:f4:5e:40:d9:40:9c:4c:
                    3e:ca:ea:c3:10:e2:ba:b5:fd:a4:c3:0d:f5:f1:97:
                    17:12:7e:7c:65:19:3e:23:4f:9e:2a:51:5d:b5:69:
                    35:39:6c:e6:4c:be:eb:54:20:f2:69:78:d8:1c:62:
                    d0:ab:53:9c:b3:a0:8e:e0:1c:79:99:b9:98:7d:6e:
                    52:ee:67:14:53:b5:fc:f0:da:3f:9b:84:0b:a7:c2:
                    e8:0c:a6:0d:16:c6:b5:9c:27:10:64:fd:3a:1e:44:
                    ee:33:82:7b:3e:c0:ab:98:32:08:c3:ed:50:56:ba:
                    6a:e2:4b:ad:81:11:98:71:68:4a:eb:80:64:ba:0f:
                    81:20:5a:88:80:86:0b:20:9a:46:a8:c1:e2:1b:aa:
                    6e:98:74:4a:f1:08:e8:de:78:35:1b:71:63:96:af:
                    7b:7d:cc:83:8b:39:73:e0:af:ad:1f:c1:6d:5e:8b:
                    f5:fa:45:62:9f:56:aa:f8:b3:67:6b:8e:71:b5:48:
                    5d:e7:0c:b4:23:bb:1d:11:95:9a:3d:d0:e6:81:1e:
                    5c:af:c2:7a:3c:c5:16:dc:69:bc:ab:02:9a:da:a0:
                    65:5a:ab:a0:29:f3:34:d4:09:7b:2a:ab:a8:ac:7b:
                    a2:4f:90:cd:2e:d5:54:aa:6d:4d:ed:ad:a4:7c:ee:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:74:68:7C:9B:A9:07:79:8C:69:DA:2F:D9:C9:0D:53:8C:FD:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fdb5ddc3-a6ab-4c8a-babe-30aef115d8dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3278::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:23:ce:07:af:65:d9:1e:57:c4:76:35:1b:2d:ce:2f:1d:
         1c:78:a3:ab:1b:9d:80:98:a8:8f:0e:40:0a:a0:fb:50:6f:d1:
         18:33:3f:91:ce:eb:47:77:e8:2d:69:49:04:94:e2:21:ce:8e:
         56:64:8b:29:27:27:03:85:6d:28:88:3a:39:96:1a:61:1b:4a:
         2b:b7:a3:b5:f7:c4:53:e7:e1:9e:9a:df:7b:96:b6:28:89:a4:
         94:5f:97:fb:a4:00:f7:08:ec:d3:1f:ad:e5:cf:ee:9c:cd:22:
         18:79:22:a9:20:c3:79:68:81:d8:fd:89:e7:46:9b:61:51:e1:
         a0:d2:c9:7e:59:e3:17:9f:42:64:31:24:3c:d6:b9:a0:9f:7c:
         61:5b:ac:7f:0a:1a:9a:70:ea:c4:41:c2:30:a8:46:bf:ee:b3:
         17:31:08:e2:a5:73:f7:87:a4:ea:d7:a4:2b:86:a0:91:ee:a8:
         90:79:f6:22:1e:51:90:bf:57:a3:8b:1a:0c:d0:1f:c7:c1:f5:
         3e:e4:79:77:6d:bc:24:fc:5b:fa:4e:d9:2c:b7:58:67:e0:57:
         32:4c:15:6f:c6:14:80:99:0a:ca:99:26:4a:88:45:1d:16:10:
         70:1a:09:67:ac:e2:cd:9e:67:0f:ad:c0:a3:b7:19:98:25:93:
         6a:56:f6:92
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURSfH3+H28ib80FHXrSoscaAREakwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQyMDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzdhYTk0MTllMzVmMGNjYjY5NjFiYzA0ZjVhZWJhODU0
NDM2MWRmNTBkNjlhYWNmOWQ5N2U5ODcwN2VjNTViMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmrmCLafn19F5A2UCcTD7K6sMQ4rq1/aTDDfXxlxcSfnxl
GT4jT54qUV21aTU5bOZMvutUIPJpeNgcYtCrU5yzoI7gHHmZuZh9blLuZxRTtfzw
2j+bhAunwugMpg0WxrWcJxBk/ToeRO4zgns+wKuYMgjD7VBWumriS62BEZhxaErr
gGS6D4EgWoiAhgsgmkaoweIbqm6YdErxCOjeeDUbcWOWr3t9zIOLOXPgr60fwW1e
i/X6RWKfVqr4s2drjnG1SF3nDLQjux0RlZo90OaBHlyvwno8xRbcabyrApraoGVa
q6Ap8zTUCXsqq6ise6JPkM0u1VSqbU3traR87gTJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZyZ0aHybqQd5jGnaL9nJDVOM/SEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ZkYjVkZGMzLWE2YWItNGM4YS1iYWJlLTMwYWVmMTE1ZDhkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAMngwDQYJKoZIhvcNAQELBQADggEBAE0mI84Hr2XZHlfEdjUbLc4v
HRx4o6sbnYCYqI8OQAqg+1Bv0RgzP5HO60d36C1pSQSU4iHOjlZkiyknJwOFbSiI
OjmWGmEbSiu3o7X3xFPn4Z6a33uWtiiJpJRfl/ukAPcI7NMfreXP7pzNIhh5Iqkg
w3logdj9iedGm2FR4aDSyX5Z4xefQmQxJDzWuaCffGFbrH8KGppw6sRBwjCoRr/u
sxcxCOKlc/eHpOrXpCuGoJHuqJB59iIeUZC/V6OLGgzQH8fB9T7keXdtvCT8W/pO
2Sy3WGfgVzJMFW/GFICZCsqZJkqIRR0WEHAaCWes4s2eZw+twKO3GZglk2pW9pI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:56 2026 by rpki-client