Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
File:                     108593c5-6d6d-4e44-b589-cbf5c661a884.roa (raw, json)
Hash identifier:          4EcAqrN02v9t1Bbs7Bj9vHVX15XqE9Z3oI2hHxANd5U=
Subject key identifier:   E5:C4:5D:A7:C1:E4:5C:74:A2:E2:A0:9D:B7:06:6B:66:93:5C:78:97
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       38676530DED5473A2A5ED34CCED78C8CE197659F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
Signing time:             Fri 13 Feb 2026 01:20:59 +0000
ROA not before:           Fri 13 Feb 2026 01:20:59 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d88::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:67:65:30:de:d5:47:3a:2a:5e:d3:4c:ce:d7:8c:8c:e1:97:65:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:20:59 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0774a9b0b491a995e703ce7f8034668b0acf0dfa2a3101d1d4624edcdcbc224e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cc:55:49:cf:72:ae:7f:36:52:1a:49:f2:a2:
                    15:f6:cf:24:5d:ec:08:56:17:f2:d4:f4:a5:a1:05:
                    c2:69:6e:cb:18:ad:f6:fb:be:57:5c:97:af:c4:3c:
                    8a:d1:4f:b1:91:bb:05:0e:72:9d:3c:b5:82:be:60:
                    6f:c1:3e:f3:e8:e1:61:92:8b:5f:b2:01:70:bd:8e:
                    ee:2f:b6:75:0e:c2:f7:99:fd:3d:c0:dc:6c:6b:6d:
                    df:2d:44:15:c0:00:14:8e:bb:10:7d:0a:cf:de:ce:
                    a4:ee:8c:c5:f2:26:f4:b8:e3:84:e3:c9:68:b7:b9:
                    3a:90:fd:16:a5:af:2b:a5:fa:fb:aa:b9:d6:84:fb:
                    72:04:fb:ce:dc:2d:b7:38:43:85:b3:1c:b3:b4:0c:
                    ea:39:1b:a8:04:11:6e:ee:91:7f:f7:a7:15:30:78:
                    5d:40:23:e9:aa:c4:34:7b:1a:de:37:63:78:1a:0e:
                    84:3d:72:54:03:a2:c4:ec:85:0c:cc:ee:0b:ef:88:
                    91:36:c7:ad:e0:54:7b:22:fc:ad:a4:a4:a1:fb:a3:
                    9d:8b:e8:3b:c2:e0:2c:55:8a:cc:4c:8f:65:53:0e:
                    4d:f1:5c:90:da:a8:93:c9:7f:b0:4d:7a:ca:1b:89:
                    cd:34:ae:87:e5:d7:2b:c5:d0:b2:65:ba:b1:39:c4:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C4:5D:A7:C1:E4:5C:74:A2:E2:A0:9D:B7:06:6B:66:93:5C:78:97
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d88::/45

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:c3:6b:9c:d4:aa:f8:16:bd:3f:b3:94:71:e1:c6:5d:fd:
         76:7c:2c:b6:60:cb:ca:df:41:c5:37:37:4e:c5:fd:4e:33:03:
         84:50:94:be:46:e2:8a:59:66:b9:35:96:81:17:9d:f4:f6:75:
         6b:84:80:a9:bc:47:37:46:e6:73:25:26:c9:0f:06:f1:6e:f3:
         33:af:39:db:3f:a8:fd:e3:aa:4c:5f:a5:99:a0:ad:5c:1f:de:
         e9:81:88:84:eb:ed:48:b1:a0:88:ef:c3:a6:b2:27:10:3a:e0:
         ad:a9:98:af:d0:30:25:92:18:90:b8:6d:c1:83:83:85:40:73:
         ce:a2:e0:9c:5a:30:c2:aa:d8:6d:74:71:01:f1:a5:a9:1c:ff:
         25:59:ec:6c:9d:47:5c:e4:55:d0:71:18:2d:51:28:2a:59:a7:
         6f:f7:d6:0c:48:15:bc:27:b3:15:fa:66:e7:5d:ca:4d:a7:98:
         18:b3:97:49:e1:3d:ae:a1:9f:72:eb:bc:80:2d:98:9e:b7:07:
         a2:a3:86:c0:30:57:55:1d:ca:ca:2a:74:f4:be:d8:0f:4e:bf:
         5c:40:ea:fa:4e:f8:ff:f6:fd:0e:b0:6e:df:90:16:11:d3:31:
         cb:52:f0:1d:ca:10:2f:89:d9:34:52:b8:0c:e8:ec:7e:7d:02:
         58:75:aa:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:06 2026 by rpki-client