Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa
File:                     06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa (raw, json)
Hash identifier:          rgfIiONjpyCzUofnhz+ubpY6i/5dusvQOz6EaOV3hSo=
Subject key identifier:   2F:D6:7A:E8:39:8E:A0:CC:4C:D0:32:CA:E2:B4:44:E2:BE:DC:AE:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73AC72C1CADFD93A06E1C211B98503C83E1D64C6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa
Signing time:             Fri 13 Feb 2026 02:20:08 +0000
ROA not before:           Fri 13 Feb 2026 02:20:08 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ac:72:c1:ca:df:d9:3a:06:e1:c2:11:b9:85:03:c8:3e:1d:64:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:20:08 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fec07294e55c40bb76c4da86907376802891ad9973d7a3dfd329372c615cd4f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:05:73:ef:fc:66:48:9e:bc:17:11:ad:b9:
                    63:5e:54:ec:14:7d:ab:7f:0c:16:1e:3a:ac:75:35:
                    a3:59:c1:d9:4f:d4:f0:e9:10:1d:88:4c:f4:62:40:
                    64:02:6b:82:93:59:42:3b:d2:68:9d:4e:1b:c2:49:
                    c2:00:c2:cc:87:87:88:0f:03:1e:a3:b4:70:5e:ba:
                    98:69:47:77:9d:5b:9a:a3:af:f1:16:21:b9:9e:b4:
                    27:6d:0c:56:35:46:f1:3f:35:ac:de:f6:05:6c:49:
                    01:4b:50:69:d2:65:66:0b:2c:64:ab:86:e2:ac:55:
                    a8:5d:21:6e:00:9c:84:8b:e7:b6:a1:f4:29:a4:03:
                    17:18:06:1c:72:21:24:e6:31:3f:34:e1:96:86:ac:
                    ca:c9:b4:5c:92:79:6a:45:f0:55:78:3c:c8:8d:6a:
                    7d:93:27:10:34:57:60:d9:50:23:14:1c:eb:ed:53:
                    5b:83:be:50:cd:a8:2e:b3:a0:fe:14:90:c2:3f:cb:
                    79:3a:0b:f5:34:4a:c6:21:26:3d:ab:13:ba:6c:7c:
                    00:36:09:e1:6a:92:18:24:bc:9f:04:fb:fe:b1:57:
                    4c:c0:24:89:75:c0:5d:e3:f1:59:61:05:77:ba:eb:
                    58:d0:bd:bd:ab:49:a7:2b:10:2d:3b:78:c1:a7:8d:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:7A:E8:39:8E:A0:CC:4C:D0:32:CA:E2:B4:44:E2:BE:DC:AE:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/06d5c532-9ead-44f3-8ca8-e9ac223e8bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3240::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:20:8f:22:23:03:6c:e1:ef:9f:60:46:a7:cd:a4:aa:fc:b7:
         aa:4b:71:e5:29:02:cc:67:99:f0:e3:2d:84:92:bc:c0:05:6c:
         17:07:a3:2b:17:da:a6:83:c1:9a:82:cf:ac:3e:0d:d9:97:77:
         f7:4d:68:0c:ec:16:47:5f:b5:01:8c:09:85:9d:8e:6a:1c:f7:
         9e:76:12:03:93:74:fc:c9:8f:ff:70:54:e5:b9:35:01:4c:ce:
         38:ad:4f:f6:33:73:45:3a:bb:3d:e3:9e:e8:ba:89:ec:19:68:
         c4:1b:75:d8:2d:1c:eb:b8:e4:08:db:c9:9d:17:f4:a0:22:92:
         ac:db:91:56:29:55:fc:2b:23:6c:09:3b:94:ed:8e:04:84:21:
         a3:68:3c:22:b1:a2:25:5d:83:30:51:64:c8:55:ba:93:41:2e:
         86:57:70:35:a7:a0:e8:b6:ec:b6:3a:81:cb:69:2e:4d:fd:a3:
         4b:6a:72:c7:3b:24:5d:dc:07:0e:53:37:73:2c:6b:83:02:7c:
         18:c1:a7:cd:7c:9d:35:25:d2:e2:10:98:0e:ac:23:13:3a:2a:
         36:55:61:c4:c2:66:db:11:ad:e4:4f:2d:24:3d:a2:47:9d:94:
         c1:53:f1:92:5f:50:8e:33:2f:60:73:3b:7f:c0:00:33:07:6f:
         1b:ca:77:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:16:23 2026 by rpki-client