Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b94bb8f-3a39-461e-a28a-9f6927cabf73.roa
File:                     0b94bb8f-3a39-461e-a28a-9f6927cabf73.roa (raw, json)
Hash identifier:          9+0ZjU/DeSI8RWf2CurJqskWvNEf6JjUN1U//w81mik=
Subject key identifier:   FE:37:17:5D:2D:F2:55:36:38:6B:CA:65:2B:23:4B:B8:64:63:27:1C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6043D6464F243A196957CB0654FA206F6CDF4418
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b94bb8f-3a39-461e-a28a-9f6927cabf73.roa
Signing time:             Fri 13 Feb 2026 09:02:13 +0000
ROA not before:           Fri 13 Feb 2026 09:02:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f04::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:43:d6:46:4f:24:3a:19:69:57:cb:06:54:fa:20:6f:6c:df:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:02:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=858e0b09c58adc2e9e8221b4f8949a6584c8ce5152f6ea4edde78b56de741421, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:61:d4:46:38:9c:b9:b4:66:63:69:d1:6b:
                    45:03:4f:03:2d:33:c5:90:df:bf:3b:ec:00:6a:bf:
                    f3:13:82:9c:0e:36:9a:07:93:73:ba:95:fe:48:d4:
                    ee:24:f6:84:cf:66:19:2e:bb:de:b6:7f:26:7a:04:
                    5d:1c:0f:cc:2e:7a:66:0a:bf:a8:4e:d7:6c:d4:3f:
                    88:85:46:9a:1b:fd:9f:68:47:b9:60:e3:4b:61:5e:
                    4c:a3:44:06:b8:bb:5c:13:6e:f8:2e:de:52:5d:ef:
                    b9:45:a2:cc:b8:c9:4b:0d:a4:89:a4:09:06:14:d2:
                    60:2f:e0:db:22:79:b6:c0:b3:3f:08:3b:1e:94:08:
                    1b:c8:55:d2:3f:95:02:92:39:53:44:6f:97:88:db:
                    d3:dc:eb:91:8d:6b:d1:98:6b:38:f1:57:1e:c1:e9:
                    48:55:00:fc:dd:6e:92:80:76:7e:ba:3d:53:74:c2:
                    a1:af:56:6e:a8:80:e0:4a:16:77:61:d2:59:aa:43:
                    22:ba:07:f6:b2:e2:4e:8a:a0:2a:21:cd:0d:6b:40:
                    d9:86:3a:0d:42:eb:60:2b:7e:50:ff:d6:0d:25:b8:
                    b2:93:30:b1:7d:28:3d:bd:b1:4e:ed:97:31:36:6a:
                    72:30:9c:c8:84:9a:d0:0b:8a:b4:6f:97:ad:a9:cb:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:37:17:5D:2D:F2:55:36:38:6B:CA:65:2B:23:4B:B8:64:63:27:1C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b94bb8f-3a39-461e-a28a-9f6927cabf73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f04::/46

    Signature Algorithm: sha256WithRSAEncryption
         40:20:76:7a:fe:1c:07:e0:a4:8b:37:df:17:a5:4d:2a:e4:6e:
         d1:e8:0b:22:36:f4:ba:fc:4f:d4:3e:e7:5b:e3:3f:9e:e7:c1:
         a3:b9:bd:bf:08:16:94:cb:66:c6:b5:73:6e:43:84:d3:a6:b7:
         9c:47:a1:83:37:1c:1e:06:94:04:07:38:e5:10:62:7f:8a:fa:
         63:76:33:fd:3d:28:06:f6:40:a6:eb:73:6e:aa:d0:bd:1c:65:
         61:dd:2e:09:ed:79:45:12:35:55:43:03:ad:54:c0:f7:a6:b7:
         8d:b5:eb:0d:7b:93:78:e1:a5:26:c6:c7:54:04:2c:9d:7d:e4:
         a4:af:bc:17:32:c2:c2:4b:b8:1b:00:4d:29:ea:83:06:28:2b:
         a7:5c:06:47:35:89:53:22:5a:26:9a:d0:39:c6:95:35:1d:6e:
         55:18:3f:3d:9d:c5:c8:cf:43:0c:71:e9:30:5c:98:ae:2a:b8:
         16:74:ad:5f:bd:4d:af:5a:a8:d0:d9:5a:38:93:b6:20:e3:28:
         f2:15:b8:62:19:33:8a:62:d6:2e:7c:d7:e7:0f:7a:61:96:af:
         6a:f4:8b:43:1f:f9:f2:87:92:8c:fc:35:77:96:4e:23:74:da:
         48:f9:cd:df:b3:4a:d0:58:af:da:bb:eb:68:e9:68:91:82:ba:
         db:b4:02:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:53 2026 by rpki-client