Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a226914-c62f-40e6-8a49-d24b8dbcc01f.roa
File:                     0a226914-c62f-40e6-8a49-d24b8dbcc01f.roa (raw, json)
Hash identifier:          rdkJjyaNlUxO4ato4p3Bw5BsMcDhu59DcrZ/RIYEY1s=
Subject key identifier:   3E:C0:32:F1:AF:F9:67:16:44:7A:2A:7B:26:FE:C1:F5:BE:35:47:40
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79DC6EFDD7EEC3B736344A46C52B3B5BB766181C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a226914-c62f-40e6-8a49-d24b8dbcc01f.roa
Signing time:             Fri 13 Feb 2026 05:40:06 +0000
ROA not before:           Fri 13 Feb 2026 05:40:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34a6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:6e:fd:d7:ee:c3:b7:36:34:4a:46:c5:2b:3b:5b:b7:66:18:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:40:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=5dab186a1aeccc6444aae97cfa6344e49c359d44546efd3c6d4de83d5b327287, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:d7:13:d8:a9:f6:80:b7:35:ed:69:f8:6f:
                    4f:31:bb:c5:13:79:92:1f:4d:7f:7c:16:6e:f2:85:
                    08:b2:86:9e:35:bb:c1:b3:c8:62:03:4e:0a:45:cb:
                    a6:18:e3:ee:91:e7:59:4d:c4:5b:c1:ca:b6:f3:4f:
                    27:cf:f0:ea:9d:f9:78:d1:fe:a1:a9:70:41:31:0a:
                    8c:32:54:be:ea:b9:a1:86:f0:30:59:1c:8d:b6:87:
                    b5:83:02:02:0e:6d:1e:ac:3c:e6:62:7f:44:84:f9:
                    a2:ec:26:9c:21:35:a8:ca:ac:97:ea:01:85:5b:8a:
                    48:55:af:63:56:f5:ae:e4:7e:dc:0c:06:8b:66:0c:
                    25:88:2c:0e:7f:ef:ff:c1:40:d1:d2:d7:64:4f:36:
                    51:25:5e:a2:59:92:9b:5e:19:1d:ec:f8:c9:85:77:
                    68:22:28:a2:0b:6a:f3:14:5e:9d:6c:1c:3c:ff:2a:
                    c5:a0:14:6c:d0:ea:b4:3c:e3:b4:f5:db:0d:5b:0f:
                    f1:2d:6b:d6:02:e8:fc:d8:3f:0c:d0:a1:c9:af:49:
                    e4:69:79:47:f4:bb:14:58:53:ef:65:b6:dd:6d:f0:
                    f0:f1:9b:e1:03:e5:f0:49:d0:ed:44:21:7a:b0:38:
                    89:b7:a0:9e:c7:68:cf:4f:07:1f:fc:47:89:77:86:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:32:F1:AF:F9:67:16:44:7A:2A:7B:26:FE:C1:F5:BE:35:47:40
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a226914-c62f-40e6-8a49-d24b8dbcc01f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34a6::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:88:0d:ea:d5:ce:2e:7b:6d:62:be:58:4e:f9:e8:cd:ea:
         01:56:0a:2b:56:44:85:5c:ad:99:76:a2:f9:4d:42:8c:f3:50:
         3e:ef:e7:8c:d4:6b:a1:d2:36:aa:79:4e:f2:9a:c4:15:30:19:
         a0:4d:68:82:ff:17:65:a0:2f:b7:50:54:39:81:43:45:a1:0c:
         8b:47:ce:6a:b3:8d:ba:2a:9b:c0:80:bc:d5:13:3f:16:4e:8b:
         14:bc:51:56:f8:75:de:d8:e4:a1:c3:4a:88:39:9e:20:04:66:
         75:ff:7d:e2:15:f0:77:bb:69:34:89:21:57:a1:47:e8:10:4a:
         41:d1:53:cd:78:45:dc:d6:fc:71:e9:63:62:d1:da:e5:b8:7a:
         cc:cb:87:7f:c7:25:78:18:79:4b:34:d6:af:29:46:27:48:71:
         c2:94:ae:17:5f:9b:8d:45:e4:8a:9e:a0:16:f9:a2:8c:40:59:
         80:6b:2d:4b:7f:ec:a3:c8:64:c2:d3:64:4a:62:fd:67:fb:7a:
         81:b5:46:ab:ea:19:5b:bf:2b:6e:32:dd:01:e4:e4:f2:9a:6f:
         76:c4:84:f1:f8:cf:49:d8:59:61:97:9a:7f:2e:86:4e:bd:d9:
         39:6e:05:ab:60:d4:7b:9a:2f:5f:f8:9e:ae:5f:86:95:b5:f1:
         58:99:8f:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:40 2026 by rpki-client