Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0eb3e9b9-3d71-42b4-ad68-724d6a55f56a.roa
File:                     0eb3e9b9-3d71-42b4-ad68-724d6a55f56a.roa (raw, json)
Hash identifier:          xKIyHHABt6ULbH7nQj7joK4atbWvgC/AQcmR7AlHo3w=
Subject key identifier:   43:0C:BA:25:FB:8C:52:CF:5B:F0:F4:89:38:97:1F:04:1C:17:55:05
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2FA7AB572D1C9F1F3CB49FC328DE656DE9954BF2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0eb3e9b9-3d71-42b4-ad68-724d6a55f56a.roa
Signing time:             Fri 13 Feb 2026 12:40:55 +0000
ROA not before:           Fri 13 Feb 2026 12:40:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2db8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a7:ab:57:2d:1c:9f:1f:3c:b4:9f:c3:28:de:65:6d:e9:95:4b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:40:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=6a07540cd80e0688f102c9767f4eebe5d2a23590931bd52ba43d3558012d6402, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:f6:40:7d:4f:e9:0d:e7:03:19:32:28:94:
                    6c:aa:2c:b1:ad:17:e8:a6:9a:af:df:50:7b:95:5b:
                    f0:35:b7:05:af:39:83:63:d9:9b:f9:59:e3:9e:2c:
                    c4:de:c9:ff:fc:74:93:a1:52:0d:4f:85:f4:1c:e2:
                    45:14:1e:c8:1b:c6:69:07:dd:01:2e:50:e7:3e:78:
                    23:89:d4:79:6d:e2:6e:80:a3:d6:21:ab:bf:21:06:
                    ab:92:97:c6:69:b2:29:3a:7d:2e:94:e3:18:02:50:
                    88:d0:b2:57:91:ea:00:42:50:81:b8:42:05:b0:1b:
                    93:37:ae:cf:2d:92:cf:07:a7:80:fe:a8:9e:c1:07:
                    74:95:d8:dc:c5:8f:0a:92:51:1e:3d:c0:4e:76:3a:
                    4d:af:ee:42:e7:7c:c1:95:f1:41:a0:4f:b0:86:ae:
                    c4:30:06:17:c2:e7:6d:28:72:c8:0f:4f:0f:f7:37:
                    c8:6a:24:f0:c4:68:ac:3c:c3:73:d8:de:62:b8:2c:
                    67:55:10:24:87:4e:49:13:0f:b3:84:b2:05:c1:58:
                    3a:91:77:7f:d3:87:38:6b:44:dc:6c:26:8f:b9:a8:
                    9a:d8:4f:d7:b5:6e:ce:43:4f:1c:f8:84:a9:82:92:
                    a6:25:81:86:ca:6a:cb:52:21:f5:4e:01:65:73:99:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0C:BA:25:FB:8C:52:CF:5B:F0:F4:89:38:97:1F:04:1C:17:55:05
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0eb3e9b9-3d71-42b4-ad68-724d6a55f56a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2db8::/46

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:8c:7e:09:8f:93:28:2e:9c:e4:dd:84:3a:e3:e4:03:95:
         73:c5:be:3c:dc:36:d7:c6:36:f4:0f:12:7e:17:d9:0f:07:93:
         31:61:e0:b1:1d:ab:10:47:27:3d:bc:9b:fd:fa:8d:40:d3:65:
         4f:f2:25:1d:45:7a:bb:2c:7e:4d:4c:77:01:22:84:13:d1:a2:
         d9:c1:2a:d7:f5:ba:1a:a8:32:8c:25:af:f6:6e:3d:45:e9:16:
         0c:5c:a0:f7:2c:4e:56:25:24:fc:76:83:fc:4e:41:df:5b:92:
         9b:1b:35:a8:ea:15:05:55:eb:68:03:e3:02:13:64:52:5c:3e:
         9c:ce:66:80:a2:0e:e9:30:0b:a1:52:ed:a9:5f:6e:9f:06:32:
         3e:9c:66:c1:e4:d0:ef:79:9c:11:e2:10:de:d3:26:c4:b1:54:
         87:05:92:01:67:b1:6a:c9:af:07:80:e7:1c:19:38:72:2b:0f:
         f0:24:07:11:40:49:df:51:97:cd:99:5d:1b:a4:55:04:c1:13:
         05:47:21:52:e2:6c:1b:90:f4:78:a9:80:c6:e9:58:f1:bc:44:
         e7:21:e9:72:86:e2:fa:44:8c:72:9d:34:13:69:d5:bc:9e:0c:
         fa:d5:85:09:27:2e:12:97:24:47:d6:f5:08:38:3d:dc:a0:20:
         09:69:5a:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:00 2026 by rpki-client