Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/066b1d04-099d-477e-8504-df088d5f3183.roa
File:                     066b1d04-099d-477e-8504-df088d5f3183.roa (raw, json)
Hash identifier:          oSwXFWuGd0I7E7z8e8cHNab9roEtl3WqTlMN52TOWbI=
Subject key identifier:   B1:3C:F8:7F:1D:1E:5E:D6:18:BE:C0:43:05:D9:01:C9:C3:19:4B:0E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C557004EF053C21588363605EC01E3BF6A027E0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/066b1d04-099d-477e-8504-df088d5f3183.roa
Signing time:             Fri 13 Feb 2026 11:51:48 +0000
ROA not before:           Fri 13 Feb 2026 11:51:48 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:55:70:04:ef:05:3c:21:58:83:63:60:5e:c0:1e:3b:f6:a0:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:51:48 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d5d8914c013e53ad609d82b6c7c5a89c8232279924eeefaae9ed24baa9190380, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:e6:85:68:bf:60:5e:36:16:7f:1d:23:ae:
                    b6:95:42:6c:c6:f6:79:bf:ab:89:85:2c:f5:c2:1c:
                    da:7a:07:8e:e7:b8:63:35:32:4c:57:c2:96:56:85:
                    81:b7:c1:50:b9:a2:2d:c6:89:5a:99:e7:db:0b:5f:
                    8c:2e:16:82:0e:ca:6b:79:e6:6a:c1:48:38:32:75:
                    b6:19:ce:4a:96:59:ec:2f:d6:c4:3a:94:87:a7:c0:
                    db:d6:4c:dd:b0:83:99:58:b8:fc:d4:4f:1a:0f:56:
                    69:bc:c4:c8:8c:0b:1b:6d:a2:26:52:fe:3c:02:06:
                    0a:c2:19:43:00:c5:5a:10:c2:d1:2f:a6:0f:75:16:
                    41:aa:40:21:23:0a:73:ad:1e:43:52:57:97:09:13:
                    ca:7a:81:57:e9:fc:37:1a:70:5a:71:ea:ac:ae:1c:
                    bf:64:83:33:fc:9b:64:e4:93:ce:24:96:dc:00:42:
                    9e:8d:64:2a:49:c5:93:da:8c:c1:5e:d3:0a:20:78:
                    37:ff:2a:33:2b:b0:76:b4:e0:84:6a:a5:44:90:23:
                    63:bd:17:1c:e7:b9:a8:94:c0:fe:2d:a7:a9:37:ff:
                    ad:91:9b:ad:28:f9:a6:e0:81:4d:f0:c9:fd:98:c1:
                    fe:60:75:ae:2a:01:6f:ef:8e:ff:0a:fa:fa:77:10:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3C:F8:7F:1D:1E:5E:D6:18:BE:C0:43:05:D9:01:C9:C3:19:4B:0E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/066b1d04-099d-477e-8504-df088d5f3183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:6b:14:fd:cc:00:86:cd:b7:c1:fc:7d:d2:35:4d:09:fc:
         ce:93:54:81:6f:a4:96:24:9c:2c:a3:60:d8:9d:3a:d6:94:17:
         09:72:93:25:e3:38:8a:05:a0:16:bb:43:fe:d8:4a:4f:f3:34:
         d1:f8:a3:46:98:cf:e9:d1:bf:4a:15:dd:de:28:44:1f:cd:97:
         3b:ae:72:a6:ed:7c:9c:db:e5:85:97:0f:41:76:e3:38:d9:9c:
         d0:bb:56:6b:3f:ec:04:d1:3c:43:ac:05:87:ad:dd:9a:bb:8f:
         90:60:12:99:7e:1e:74:40:aa:1a:71:89:c2:2f:49:4a:81:28:
         ef:19:66:1a:cd:28:fb:6f:f0:b3:63:d0:1c:44:a3:59:39:b2:
         e8:e7:75:92:ab:a8:cd:e1:d4:b8:1f:42:2e:0d:a7:56:1d:74:
         c0:8b:ed:ee:a3:e7:2d:8b:75:82:52:98:ea:b6:7c:9c:5f:60:
         2c:60:30:9b:bf:81:fd:02:26:68:be:f4:83:05:4f:f3:7e:46:
         b5:07:db:38:b7:b3:02:5d:8a:a5:c6:12:32:72:35:12:6b:ec:
         c4:be:d0:b3:23:89:9c:6b:be:53:db:dd:c6:21:c4:c5:77:75:
         33:94:3e:cc:e7:52:fd:32:38:ab:63:dd:b8:40:da:c6:d5:35:
         b9:27:3f:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:35 2026 by rpki-client