Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f51b17d-66d6-4696-94ae-158b44113bd5.roa
File:                     9f51b17d-66d6-4696-94ae-158b44113bd5.roa (raw, json)
Hash identifier:          +pnWWBb6sgcJFvn2gJqefwpwuaV+PQMongjJ9uyRkM4=
Subject key identifier:   97:43:F0:E2:CD:F0:91:1A:E7:57:D4:72:98:D8:28:E9:8A:30:9A:35
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       27012FD3AC6C6AE5076DF22EB07F7F5B516EC58B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f51b17d-66d6-4696-94ae-158b44113bd5.roa
Signing time:             Fri 27 Feb 2026 00:20:47 +0000
ROA not before:           Fri 27 Feb 2026 00:20:47 +0000
ROA not after:            Thu 28 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:2f:d3:ac:6c:6a:e5:07:6d:f2:2e:b0:7f:7f:5b:51:6e:c5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 27 00:20:47 2026 GMT
            Not After : May 28 23:59:59 2026 GMT
        Subject: serialNumber=e5040859b4cc2a2429f62eaf4714833ce9d554808a2ca38ba75427fd03cd2cd1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:8e:d2:9f:4d:dc:ef:f3:68:27:83:6a:28:
                    0d:1f:77:0c:bf:c6:fd:5b:c0:92:50:1e:cb:59:9f:
                    34:b6:27:09:5e:cc:e2:61:9a:ee:c6:3d:05:ba:13:
                    1b:db:20:57:84:5a:fc:0e:9f:f6:c3:d0:d0:4f:1c:
                    75:b3:87:29:bb:69:97:f0:41:d3:0f:fe:02:8b:8b:
                    c6:d2:4e:2c:15:ca:f9:a7:e7:88:ea:77:7b:65:6a:
                    30:15:31:d0:6f:ba:2a:7b:f6:f0:20:d1:91:25:7c:
                    92:06:9f:d9:f4:6b:98:56:92:b1:97:3a:a2:74:69:
                    76:80:fb:d6:e5:d3:dc:ef:18:d4:52:95:55:45:0e:
                    d8:2e:f3:d8:63:b2:0a:11:78:a9:57:84:f6:02:ca:
                    22:fd:6a:29:33:90:7f:af:d2:07:23:f1:1d:43:33:
                    a1:78:d6:99:04:df:b3:90:a3:10:9c:94:2b:9c:38:
                    e9:d5:d9:0d:a9:6a:d4:2b:e5:9c:0c:3d:17:2c:35:
                    66:80:cd:10:7e:2e:6d:bc:bd:0e:02:0a:57:af:55:
                    b6:5c:3e:90:d8:ed:a7:6f:6a:54:00:69:aa:0f:6c:
                    97:39:41:0a:30:94:18:d7:ec:b0:b0:ae:c3:5d:21:
                    a2:b3:17:3e:dc:2e:36:ac:ea:31:4a:01:4f:1a:a7:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:F0:E2:CD:F0:91:1A:E7:57:D4:72:98:D8:28:E9:8A:30:9A:35
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f51b17d-66d6-4696-94ae-158b44113bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:ab:3f:64:48:56:d7:c4:3a:cb:bf:ca:d0:b4:0a:b8:e9:
         4e:a6:e2:eb:59:38:d2:de:a4:0a:a7:83:b9:2d:b2:08:fd:b1:
         9a:1b:c2:25:54:52:eb:2d:5d:e0:0f:fa:0e:2b:e4:05:7b:ab:
         65:82:e2:b2:95:ad:b2:0d:b2:28:1b:eb:9e:03:43:be:7b:8f:
         41:55:8c:4e:14:60:47:27:45:63:ab:8d:0c:be:2c:7e:79:b2:
         92:e3:97:88:78:d2:a3:0d:84:1a:26:c7:98:2e:99:71:ed:4b:
         b1:51:42:de:73:09:55:14:bc:4e:7e:40:93:d6:46:90:f4:d8:
         2c:4d:c9:c9:5e:9d:0d:f4:33:c0:63:70:62:de:97:38:e8:8b:
         2f:75:5b:5a:04:0f:6e:8d:1d:8e:42:f2:d3:f0:e5:f0:c6:60:
         40:9f:62:ff:b5:2e:68:e0:30:46:3e:ff:a2:7b:8e:4c:30:03:
         78:29:da:92:da:32:6e:a9:b0:82:33:83:8c:fb:3d:56:ec:96:
         16:b3:01:93:d7:48:2a:54:5a:cd:b1:1a:7b:2b:5e:40:9f:3b:
         f2:99:95:5f:f5:74:4e:18:53:46:b1:08:e0:f6:48:06:32:bf:
         04:52:8c:f7:78:38:bf:12:82:80:0d:78:4c:42:f0:72:d2:d7:
         0e:70:f5:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJwEv06xsauUHbfIusH9/W1FuxYswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI3MDAyMDQ3WhcNMjYwNTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTA0MDg1OWI0Y2MyYTI0MjlmNjJlYWY0NzE0ODMzY2U5
ZDU1NDgwOGEyY2EzOGJhNzU0MjdmZDAzY2QyY2QxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaGI7Sn03c7/NoJ4NqKA0fdwy/xv1bwJJQHstZnzS2Jwle
zOJhmu7GPQW6ExvbIFeEWvwOn/bD0NBPHHWzhym7aZfwQdMP/gKLi8bSTiwVyvmn
54jqd3tlajAVMdBvuip79vAg0ZElfJIGn9n0a5hWkrGXOqJ0aXaA+9bl09zvGNRS
lVVFDtgu89hjsgoReKlXhPYCyiL9aikzkH+v0gcj8R1DM6F41pkE37OQoxCclCuc
OOnV2Q2patQr5ZwMPRcsNWaAzRB+Lm28vQ4CClevVbZcPpDY7advalQAaaoPbJc5
QQowlBjX7LCwrsNdIaKzFz7cLjas6jFKAU8ap1vRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl0Pw4s3wkRrnV9RymNgo6YowmjUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlmNTFiMTdkLTY2ZDYtNDY5Ni05NGFlLTE1OGI0NDExM2JkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDqr4wDQYJKoZIhvcNAQELBQADggEBADrnqz9kSFbXxDrLv8rQtAq46U6m
4utZONLepAqng7ktsgj9sZobwiVUUustXeAP+g4r5AV7q2WC4rKVrbINsigb654D
Q757j0FVjE4UYEcnRWOrjQy+LH55spLjl4h40qMNhBomx5gumXHtS7FRQt5zCVUU
vE5+QJPWRpD02CxNyclenQ30M8BjcGLelzjoiy91W1oED26NHY5C8tPw5fDGYECf
Yv+1LmjgMEY+/6J7jkwwA3gp2pLaMm6psIIzg4z7PVbslhazAZPXSCpUWs2xGnsr
XkCfO/KZlV/1dE4YU0axCOD2SAYyvwRSjPd4OL8SgoANeExC8HLS1w5w9Ww=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:05 2026 by rpki-client