Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b771578-7684-4128-9eca-4468235bfdf8.roa
File:                     0b771578-7684-4128-9eca-4468235bfdf8.roa (raw, json)
Hash identifier:          GiDA1e3/itf15HzleDjn/ZR2NMvn4cVHH0hSrFwkmy4=
Subject key identifier:   DF:9E:2D:18:5F:8B:0F:F3:78:03:5A:2D:58:97:B7:D3:2B:57:AC:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C98B8556683191FAA5B640BC746E6989D265E14
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b771578-7684-4128-9eca-4468235bfdf8.roa
Signing time:             Fri 13 Feb 2026 03:20:12 +0000
ROA not before:           Fri 13 Feb 2026 03:20:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:98:b8:55:66:83:19:1f:aa:5b:64:0b:c7:46:e6:98:9d:26:5e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:20:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b96e520fd8a22e6192e10b55dab9f73da7d9b2c2756c239856f729a89ad26bab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:49:c5:6e:59:73:8d:2d:74:d1:3a:03:bb:
                    34:58:95:4d:22:fc:ff:85:35:64:61:f4:81:a9:a8:
                    21:1e:0e:19:33:42:66:3e:cc:6f:86:b4:af:45:61:
                    10:4c:f7:b9:a4:79:6c:96:c8:00:c8:60:02:3a:c2:
                    d0:79:07:d7:11:f1:53:94:82:e8:57:30:7a:4a:87:
                    6e:fd:3e:92:ee:e3:7c:af:61:2f:3a:3d:47:c1:af:
                    70:f9:20:c2:4a:09:d2:af:1b:9d:72:de:fa:27:1f:
                    9a:04:32:66:46:22:29:f3:52:85:ba:d4:bf:da:7f:
                    f5:4a:f4:23:5c:fd:64:09:df:99:f5:37:2d:3e:d0:
                    da:d3:ce:9a:aa:99:43:6e:69:39:9f:cd:c2:78:f7:
                    77:06:dd:c2:52:36:18:5f:e1:97:42:ae:01:79:ad:
                    76:47:c2:43:14:94:e1:53:f2:ad:53:42:61:f3:5f:
                    11:70:cc:22:8d:e2:d8:a7:2e:9f:63:d4:8c:53:2b:
                    90:cf:92:cc:a5:5b:73:36:7b:2f:2d:e8:6d:cf:6e:
                    7f:6a:d0:ac:40:7d:c1:9c:6f:45:e3:df:99:db:8d:
                    49:56:81:27:fb:cc:6f:84:7e:4f:2c:f1:38:c2:aa:
                    92:e7:08:82:7f:f1:ee:de:eb:cb:84:ec:3c:66:6e:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9E:2D:18:5F:8B:0F:F3:78:03:5A:2D:58:97:B7:D3:2B:57:AC:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b771578-7684-4128-9eca-4468235bfdf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3570::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:08:b3:5b:ad:48:a5:22:12:32:e5:b3:ed:3a:b1:a9:3e:
         7c:d4:9a:03:e4:c6:1e:8d:73:dd:92:fa:44:4e:01:7d:3d:97:
         f5:a0:ce:a3:9f:b6:42:65:f4:f9:50:11:60:89:e6:70:47:04:
         4b:70:75:95:0b:3b:52:dd:3d:4f:37:47:fc:15:d7:49:3e:65:
         83:27:4d:36:47:ac:6e:aa:24:9d:2c:7b:62:19:d8:1b:76:34:
         b6:74:f5:06:99:6f:90:67:d0:27:42:62:a5:f9:ff:9e:88:e7:
         e4:0b:6c:23:fc:a4:f3:fb:7c:44:ca:65:61:66:81:de:b7:1d:
         fa:78:b2:2a:8c:cb:3b:7a:7e:c5:11:93:fb:7f:63:28:ca:0b:
         a0:68:90:3f:a7:c5:1c:5a:fc:79:a8:b2:47:ce:15:d6:23:6b:
         b4:78:af:96:ff:12:93:17:51:be:3e:12:39:b9:b2:2d:2e:2d:
         7f:ba:30:3b:24:13:5c:c5:7c:ba:9f:2d:8a:63:d4:37:35:3a:
         51:8c:c7:63:8d:4d:57:de:34:2c:ad:83:f8:58:2a:88:72:4b:
         f5:5b:24:f9:87:f7:76:6c:af:77:45:89:86:18:7f:cd:a6:a5:
         34:90:6e:b2:40:97:41:46:4f:45:32:a6:b6:d3:c0:04:b5:b8:
         80:fa:b5:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:52 2026 by rpki-client