Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01ece8f6-c850-45b9-a870-8bf3911888c8.roa
File:                     01ece8f6-c850-45b9-a870-8bf3911888c8.roa (raw, json)
Hash identifier:          pzHrer/xLW6VPnnN2uzSoBzU6PBYc6UsBcfOZCFkER8=
Subject key identifier:   59:75:A3:FF:AE:F5:1E:F8:74:DD:9B:63:72:75:C6:CB:28:D7:B9:09
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6458AC513338D0A846B712924E374A3B75DD8E1A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01ece8f6-c850-45b9-a870-8bf3911888c8.roa
Signing time:             Fri 13 Feb 2026 05:11:33 +0000
ROA not before:           Fri 13 Feb 2026 05:11:33 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b0a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:58:ac:51:33:38:d0:a8:46:b7:12:92:4e:37:4a:3b:75:dd:8e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:11:33 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0bd86e4a5b32f281fcdb68000f40c8d4d6031fcbf265467dc08317d64102fbb9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:57:f1:5e:0e:d6:75:0b:ce:47:7a:b6:b6:
                    4b:bc:6b:10:96:df:98:44:ca:bb:ca:ee:0e:3b:82:
                    2b:a8:c7:90:0b:a7:ea:d4:8c:4c:a1:ed:be:31:0a:
                    b5:9d:0e:83:2d:fa:44:c9:4d:97:c4:c5:1d:46:6c:
                    7c:c2:b2:93:7c:5b:32:22:04:26:c4:6e:4d:fb:79:
                    1f:5a:6d:05:3a:53:af:c1:32:63:4c:6d:a5:06:01:
                    a6:b5:0d:fa:4c:fc:d8:90:01:88:52:01:39:08:10:
                    7b:d1:67:c0:fe:69:96:bb:6b:1c:fe:9d:9e:0f:48:
                    60:a2:6a:17:ea:99:3b:5c:e0:3f:83:e4:c4:9f:2b:
                    6e:1e:b6:de:72:9f:1f:42:26:2d:86:2b:68:76:d6:
                    88:55:79:d2:bb:4c:56:29:3b:54:bc:66:dc:79:48:
                    11:b8:96:6e:2a:70:26:b0:0d:e4:60:10:c5:9c:f8:
                    5c:c3:eb:12:1e:cb:2b:1b:26:54:9b:48:da:bf:b0:
                    87:9b:18:f8:69:38:78:63:55:3c:9c:ea:c7:73:0d:
                    4e:34:36:a9:f2:be:ee:6d:59:4d:0c:18:7b:8a:43:
                    d1:9e:ee:d4:9a:75:21:92:0f:95:28:f5:fe:c4:fa:
                    4b:11:54:39:b6:09:f6:cd:bc:13:2e:d3:0d:34:df:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:75:A3:FF:AE:F5:1E:F8:74:DD:9B:63:72:75:C6:CB:28:D7:B9:09
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01ece8f6-c850-45b9-a870-8bf3911888c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b0a::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:09:51:c0:f1:67:af:f3:49:9d:fd:42:4a:e0:94:fd:12:85:
         2b:d6:ae:29:33:34:c7:65:95:0a:57:b4:a5:2f:d7:03:0b:ab:
         76:1c:14:e8:96:88:bd:91:6a:bc:65:20:06:3a:8e:b6:0c:86:
         74:4b:82:2c:e2:ff:f5:70:82:23:7d:09:8d:44:69:06:64:1a:
         ad:81:f0:22:6f:88:80:e2:56:33:36:5d:50:8a:8e:4b:65:3c:
         ff:b9:9a:fb:8c:62:80:bc:e3:ac:85:c7:a5:61:88:23:59:31:
         ca:71:71:dc:7c:7c:2f:a5:35:49:e3:d4:2e:2d:ec:92:2c:39:
         05:ef:36:95:dd:b8:3a:bc:10:ac:8a:07:73:22:63:db:4c:e1:
         19:7c:d5:54:a0:b8:e2:ac:a3:80:77:16:80:c2:4b:89:da:79:
         e9:d8:76:e9:7f:f3:25:5e:ea:da:e2:e1:22:54:9b:62:4e:49:
         81:8d:20:ce:b1:32:5c:03:73:0a:d6:57:8a:bd:88:98:7d:1e:
         89:a6:69:2f:04:83:3b:d6:aa:4b:1f:48:a6:fa:39:a7:88:5f:
         5f:19:06:df:1b:d4:a6:d7:22:dd:c6:2f:d2:04:24:ff:ce:07:
         0c:9a:4f:39:0b:7d:c9:c7:f6:f1:45:4f:9c:b7:6a:20:e1:3a:
         27:57:a0:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:25 2026 by rpki-client