Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04e29e1e-1c43-4e93-8c81-2eec3cc08eb5.roa
File:                     04e29e1e-1c43-4e93-8c81-2eec3cc08eb5.roa (raw, json)
Hash identifier:          4Gm4yQc6Bl1bF9Ir0SFxTHUuauJ3g8VW2I2OzkN2PAk=
Subject key identifier:   FF:AC:DB:9F:FC:C5:24:82:98:DA:88:80:66:1E:BA:FF:27:8F:22:10
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       35C31F48E9DD9924198E6EFF8ED852C29FC643B6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04e29e1e-1c43-4e93-8c81-2eec3cc08eb5.roa
Signing time:             Thu 12 Feb 2026 02:20:06 +0000
ROA not before:           Thu 12 Feb 2026 02:20:06 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2460::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c3:1f:48:e9:dd:99:24:19:8e:6e:ff:8e:d8:52:c2:9f:c6:43:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:20:06 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=d4ac18923d124d2b3f7606dee2b68c4d17666f3619695e7e34f2f639e166b850, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:48:c6:73:52:6b:08:e2:c8:c5:09:fe:6f:
                    61:79:ee:63:5a:3a:5a:b8:80:68:71:4a:15:75:ed:
                    21:c8:61:f3:1e:8b:cf:a7:0e:cd:06:4f:03:3d:be:
                    64:1e:0d:4f:21:77:46:4c:0b:42:97:6b:38:51:55:
                    ed:70:e2:12:6c:ef:e9:74:cb:33:ec:8f:fb:6e:bc:
                    e0:8e:f3:47:88:00:81:53:a5:59:15:74:fd:0d:6e:
                    67:f1:cd:eb:48:bd:fc:2b:f4:64:da:68:3c:39:7c:
                    3b:11:54:aa:a0:79:c3:6f:b5:56:fd:83:1c:cc:be:
                    9f:e3:61:38:76:b2:fd:99:2a:cd:af:45:48:b4:29:
                    a8:07:7f:35:67:a7:9f:0e:24:32:82:fb:c1:fd:f9:
                    4a:8b:98:a0:46:30:d0:63:cc:dd:ec:5f:cb:ee:e7:
                    2c:cb:1e:bb:a3:37:9b:63:8f:3a:b3:88:45:45:72:
                    fe:39:a2:01:fb:fa:68:bf:2a:50:c7:fa:e4:6e:2f:
                    35:e1:6b:46:88:3a:30:ad:5b:bf:68:e8:f2:1c:c7:
                    69:56:c2:06:8d:7a:04:09:a5:61:0b:b5:eb:93:10:
                    f9:60:8e:26:c8:58:65:ba:5e:06:69:b9:fd:a6:36:
                    6f:20:df:06:79:95:30:d4:07:4e:b8:0a:0e:51:79:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AC:DB:9F:FC:C5:24:82:98:DA:88:80:66:1E:BA:FF:27:8F:22:10
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04e29e1e-1c43-4e93-8c81-2eec3cc08eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2460::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:62:bf:be:08:2b:09:30:2a:47:9d:6e:25:70:0a:3e:cc:2c:
         3b:b2:62:d5:47:17:4d:87:c6:6e:a8:91:d9:a7:18:cd:97:ff:
         be:73:98:15:60:e8:bb:70:da:19:f5:57:95:b7:f8:88:a0:53:
         42:bd:26:61:c2:c3:ec:90:b0:98:b2:7e:c4:e0:9a:6d:74:65:
         31:f2:cc:9b:98:91:09:d5:ae:35:d3:99:15:0f:32:96:e9:cd:
         20:ec:ee:6a:89:61:86:9c:c2:18:c6:7f:0f:d2:a6:21:fe:42:
         27:15:8b:a8:80:8b:53:7c:e4:09:03:13:c1:f8:df:d8:39:28:
         45:67:7b:2c:7a:ef:81:88:dd:1a:5c:75:3f:a9:d1:29:2a:b5:
         64:ef:cf:09:b2:06:e9:c7:c6:3e:f1:6d:09:68:b1:a5:da:2f:
         ed:39:e2:09:78:f4:ba:18:da:32:50:8a:33:a4:b3:bb:82:73:
         90:fb:4a:d2:57:ec:97:4d:94:64:76:90:e7:5f:d6:57:aa:8e:
         d5:3e:d3:49:02:e8:8d:5a:02:ac:b7:2e:70:2a:cb:bb:6f:90:
         6a:41:99:7f:c6:0f:4c:d0:cf:11:2c:26:39:1b:b4:90:77:17:
         50:89:4e:f7:70:8d:7b:be:c0:4a:8b:ec:e8:71:98:fa:d0:0b:
         0a:e7:70:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:12 2026 by rpki-client