Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ecc2e13-13e6-4860-ab82-07f11a45a3af.roa
File:                     0ecc2e13-13e6-4860-ab82-07f11a45a3af.roa (raw, json)
Hash identifier:          93A939P7m/1/DyCOO+awLBvCh7NdWBIGD5C5QLnFDBo=
Subject key identifier:   16:C4:1B:FF:6B:A9:DF:89:53:4F:52:F7:87:6E:EA:3C:37:BC:D0:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A9818BC51305C6AC579152D9CA7BC8BFDBE39
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ecc2e13-13e6-4860-ab82-07f11a45a3af.roa
Signing time:             Fri 13 Feb 2026 12:41:55 +0000
ROA not before:           Fri 13 Feb 2026 12:41:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e7c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:18:bc:51:30:5c:6a:c5:79:15:2d:9c:a7:bc:8b:fd:be:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:41:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0975f2761625f3c56f0d63e6b0854390f7a2f3bdbc5357ab9a8458805635362d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:5b:e5:ae:62:12:13:69:f5:99:54:75:3c:
                    6a:99:96:53:41:d0:5b:76:bd:0c:33:e8:e8:cc:a7:
                    53:5b:8f:73:6d:3f:a3:d8:65:7c:16:df:a7:ac:64:
                    f3:39:b1:ff:bf:25:26:1a:66:85:9e:76:f0:96:8b:
                    30:6c:66:63:9c:02:3b:2b:b2:64:97:e2:3b:0c:ee:
                    76:b1:28:bf:43:df:8e:3f:2d:c2:e1:64:9a:c6:5c:
                    4d:ab:c1:31:34:49:b9:be:67:25:c7:c9:da:2f:e5:
                    bb:45:9b:27:17:e7:d2:7d:d9:51:69:66:68:3e:b4:
                    ec:bc:29:5c:e3:db:10:15:34:61:d4:41:88:ed:ac:
                    fe:48:6b:37:7f:80:9c:31:f3:fb:f3:6e:2d:7c:8b:
                    5d:a9:d9:54:db:e9:8f:ed:67:c5:2e:15:f1:12:06:
                    a3:48:d2:e8:04:bf:3e:10:0a:82:34:dc:22:5a:a4:
                    20:63:35:20:d6:f4:d9:d9:50:90:3b:1c:6b:3d:b9:
                    01:b0:21:cd:f2:ef:b2:1e:66:31:51:10:d7:c6:db:
                    ef:f7:60:f8:a6:f3:f6:3a:20:da:0e:32:b1:fb:4a:
                    e4:f4:49:55:a3:81:80:43:7e:9d:a7:5c:b9:10:04:
                    b4:9f:2d:9e:cd:39:61:0c:c3:16:ff:a1:08:fd:08:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:1B:FF:6B:A9:DF:89:53:4F:52:F7:87:6E:EA:3C:37:BC:D0:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ecc2e13-13e6-4860-ab82-07f11a45a3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e7c::/47

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:07:7e:3f:69:af:0d:25:92:2c:74:3a:15:74:b0:cb:9b:
         01:53:37:3c:07:c1:62:28:cb:87:49:34:a4:e3:7f:51:f9:bf:
         61:52:91:21:d1:ce:bd:f4:4b:06:61:ad:2d:bd:5d:a6:39:7d:
         10:ee:26:ca:97:a4:7c:3e:66:bf:09:46:03:03:16:7f:f8:60:
         55:a7:f2:c1:6b:c6:25:3c:79:09:79:7a:1a:4f:45:c1:b5:c3:
         08:de:98:17:c8:84:e4:1e:d5:d6:cc:d9:48:92:be:dc:ed:1b:
         ec:ad:8e:6f:43:ef:90:e4:40:d8:6a:65:b3:d6:7c:30:f7:58:
         9b:8c:7a:1e:05:d6:30:37:0f:ef:cf:2a:2e:ba:30:99:3f:36:
         8c:89:46:1a:74:9a:56:24:09:c1:c9:1b:8f:ce:ad:0e:a9:25:
         e0:6c:51:cd:4a:0f:73:84:2a:ed:ab:02:cc:82:2e:0a:62:85:
         c0:4d:0a:f1:e9:88:cb:89:c7:bc:12:41:b7:ae:15:77:55:33:
         f2:b0:8e:69:a6:e1:4a:89:28:84:31:b7:ac:66:fd:c1:7d:93:
         00:99:b7:5a:c9:09:82:8b:8e:ea:dd:87:bd:9f:87:04:eb:82:
         f4:1b:28:bb:b2:f6:77:8f:c9:13:d1:6a:bc:d0:5a:fe:1e:05:
         5e:9d:8f:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:37 2026 by rpki-client