Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12e7c37e-e0b0-41a0-b219-cea1f23b58a0.roa
File:                     12e7c37e-e0b0-41a0-b219-cea1f23b58a0.roa (raw, json)
Hash identifier:          LE60dAUYfyQqADN/J9MrCQT/Q2YqWyiM9zsPhXEgfcA=
Subject key identifier:   A3:D8:B1:E0:D2:2E:39:0C:1C:4F:09:C3:6A:C5:28:A8:EF:D9:BA:24
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       10F39AD4659F8A6E43D9122773C754124186989D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12e7c37e-e0b0-41a0-b219-cea1f23b58a0.roa
Signing time:             Fri 13 Feb 2026 11:41:33 +0000
ROA not before:           Fri 13 Feb 2026 11:41:33 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32e0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:9a:d4:65:9f:8a:6e:43:d9:12:27:73:c7:54:12:41:86:98:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:41:33 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=212a539d73f64e9eb3acdb851628709705f41dd1728550bd98d3a8672b83363d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:30:b9:00:31:d5:9c:bb:b1:57:44:3a:ff:
                    ab:7d:16:bc:9d:eb:c2:13:a3:56:34:8c:94:2d:32:
                    b3:58:7d:fa:10:dc:0d:69:9b:1d:63:d0:66:b4:e0:
                    4e:58:4c:97:f5:35:9e:14:04:5f:61:33:5d:cd:1c:
                    0c:3d:10:a1:89:5a:7b:ee:d0:64:0f:a2:9a:81:9f:
                    8c:ce:78:93:c3:8d:74:03:7e:80:49:e4:9a:6e:d6:
                    0b:9a:e0:ab:90:78:ba:2b:53:35:13:58:79:ec:9b:
                    ef:6d:63:2c:14:98:be:bc:41:d7:c7:ab:6c:7f:b8:
                    3f:d8:f9:74:3f:ea:34:4e:47:2b:31:c5:a7:69:88:
                    b0:e6:13:47:8e:2e:bf:15:5d:ac:25:6d:eb:1e:3f:
                    51:6a:bf:56:51:0e:4e:d7:a7:8c:05:a4:88:00:91:
                    63:f3:a5:16:b9:42:33:7a:a1:55:69:df:a3:52:69:
                    96:3a:29:a6:37:14:a1:a2:d2:1f:e3:6b:22:74:fa:
                    b5:67:50:98:37:69:27:ce:4f:3c:ad:f0:b8:cc:3d:
                    df:20:c1:40:81:fa:3b:a0:14:27:00:d6:3a:e3:be:
                    e3:dc:cf:d6:50:b7:69:42:c4:53:74:61:cb:92:b8:
                    f3:33:5a:1b:7e:ba:b3:98:58:97:db:fd:e7:53:2f:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:B1:E0:D2:2E:39:0C:1C:4F:09:C3:6A:C5:28:A8:EF:D9:BA:24
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12e7c37e-e0b0-41a0-b219-cea1f23b58a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32e0::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:28:4f:cf:08:d4:a1:76:b6:7b:c9:f4:3a:be:f0:37:cf:65:
         87:6a:a9:a4:cc:81:54:ce:16:e0:8e:f8:d3:f8:52:fc:4f:4e:
         c3:c2:ae:49:6f:d5:0e:cd:f9:cb:0a:9d:13:08:78:59:b5:f0:
         f9:5a:00:75:44:45:55:3e:2b:fe:1c:9b:ec:23:60:7b:d5:5c:
         59:3f:53:d6:0c:61:80:0a:0c:e8:1e:97:09:3c:68:6c:df:c6:
         86:c9:53:e7:38:82:a5:99:bc:cf:40:2b:5d:d1:74:5d:53:0b:
         2e:0f:7e:4c:f3:37:9f:8f:c3:91:d4:df:8c:93:51:c0:25:5c:
         db:6b:91:14:be:c5:0e:16:14:dd:8b:2d:df:c8:67:ed:18:02:
         ee:51:83:71:28:bb:52:23:a0:8c:37:7d:8b:6d:10:91:24:d2:
         3f:95:12:9f:38:bb:9f:ae:dd:82:21:0c:d4:22:5c:b1:e6:4e:
         01:2c:a9:a1:3d:8c:58:37:51:79:95:66:40:90:46:40:de:1e:
         ad:f5:5b:f1:3a:a1:e8:99:66:32:dd:c2:0b:7f:88:17:4f:ad:
         ed:82:30:2b:5e:24:f1:4b:e1:35:6a:2d:8d:d2:19:d3:e2:ec:
         c2:98:7b:3a:19:c9:6d:03:10:fb:37:e8:0c:73:c9:3c:80:45:
         2d:d5:d0:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:42 2026 by rpki-client