Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa
File:                     d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (raw, json)
Hash identifier:          khui7TTsYBHufD+isTrVKQGQxGXUnrqcocKx0RCArDM=
Subject key identifier:   28:81:F9:38:F8:67:DE:6C:79:F5:A5:32:49:DE:EA:11:D7:27:C7:92
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       1C87F6DB470511B6E7879FF89B6DC399BBA28FBA
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa
Signing time:             Tue 17 Feb 2026 00:00:06 +0000
ROA not before:           Tue 17 Feb 2026 00:00:06 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:f40::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:f6:db:47:05:11:b6:e7:87:9f:f8:9b:6d:c3:99:bb:a2:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Feb 17 00:00:06 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=70c3e455b7d6a2f8731c3b4c3737fb5154319a4580c776b74f89736300735ea7, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:4a:db:c6:52:06:78:f0:4e:bc:6a:65:97:
                    40:6d:53:44:36:48:9b:4c:67:4b:30:be:e5:e7:cd:
                    2e:05:a7:aa:bf:b0:50:5c:85:7e:92:6a:41:94:75:
                    f5:4c:cb:fb:56:20:5d:b8:56:54:74:35:21:f6:3a:
                    ce:7d:81:65:21:d8:e2:69:a6:9e:e1:64:ec:24:44:
                    eb:1c:28:b2:66:1c:a6:fc:4d:0d:4c:e9:8b:03:3b:
                    0b:88:c4:9f:d1:61:3f:fb:d8:53:fe:b7:95:84:36:
                    b4:58:53:8c:f4:2e:2a:ae:92:ef:ee:2c:05:a8:15:
                    e7:71:6f:24:0c:ae:87:fb:e4:af:20:28:42:88:40:
                    50:a2:04:f6:50:f9:d6:e6:2e:a1:aa:08:a7:d3:fc:
                    f4:c7:6e:7a:df:92:cb:ca:f8:c8:86:e7:b2:9b:80:
                    ef:6f:34:4e:84:45:8d:53:32:d1:f8:54:96:b7:da:
                    3c:7f:5e:04:2c:09:68:4a:f3:bb:04:3a:8f:d4:a1:
                    d4:e9:7d:43:1d:0f:1a:83:f4:71:0f:4d:c3:df:16:
                    80:32:00:90:dc:fd:f2:44:25:ce:ab:b6:13:24:96:
                    11:69:24:de:c5:42:d1:fc:b1:3e:65:e8:95:62:35:
                    b4:2f:6d:51:7c:2f:ab:f0:43:db:ce:4e:cc:3c:1c:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:81:F9:38:F8:67:DE:6C:79:F5:A5:32:49:DE:EA:11:D7:27:C7:92
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/39

    Signature Algorithm: sha256WithRSAEncryption
         62:df:d0:25:f0:3d:a5:be:24:0d:70:af:98:aa:1a:9a:2f:70:
         66:6b:09:be:11:9b:6d:10:1e:d5:5b:2b:11:8c:56:0a:00:cf:
         6c:1d:92:a7:d8:04:60:64:d9:51:8e:d6:ed:13:61:96:20:19:
         d4:36:81:02:e4:cf:ad:4e:11:28:3a:cc:e0:1c:33:bc:b4:9f:
         43:66:7d:ee:1d:d4:86:93:9b:b0:ca:bb:f6:56:b6:65:6c:38:
         9c:ed:98:a2:a8:d5:8c:7b:18:fa:47:e3:2c:5d:42:ad:15:14:
         55:48:e1:0c:ec:1e:f5:5c:92:7d:37:7a:01:a2:d1:68:d9:12:
         1f:4f:ad:f3:f2:3e:00:d0:6a:1c:de:b3:c4:ca:9d:b2:53:81:
         1d:50:26:d6:29:66:d4:69:b5:a8:ee:7a:52:50:f3:e6:ac:5f:
         6d:63:fe:c1:ec:91:90:69:56:b7:ff:63:06:9a:23:2d:a7:90:
         f3:89:e4:8c:cd:11:03:e4:9e:f9:6e:bf:82:59:6f:ab:7c:b7:
         3b:c8:91:19:04:b7:49:a4:dc:d4:a5:54:c6:86:44:99:4e:3e:
         b5:ab:7b:cd:8d:c5:f5:26:09:9f:6c:d5:43:c4:86:f0:9b:65:
         81:32:03:8a:bd:cd:2d:b1:3b:52:f1:cf:73:cc:bf:fb:6a:e9:
         2e:e1:45:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:52 2026 by rpki-client