Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/170fe4ad-835c-4ee1-8209-e96bc14a0be5.roa
File:                     170fe4ad-835c-4ee1-8209-e96bc14a0be5.roa (raw, json)
Hash identifier:          dHnz+OXGvj+FLeSDh6vlBJlLU4QHVUAuWtDQlmiDu7g=
Subject key identifier:   F0:F6:4F:63:81:5C:A1:CA:88:4B:F5:0B:FA:6C:C6:EB:CC:4D:94:48
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E2D9E2292BEF825173D63B247B6566FC305B7C3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/170fe4ad-835c-4ee1-8209-e96bc14a0be5.roa
Signing time:             Fri 13 Feb 2026 05:01:28 +0000
ROA not before:           Fri 13 Feb 2026 05:01:28 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3742::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2d:9e:22:92:be:f8:25:17:3d:63:b2:47:b6:56:6f:c3:05:b7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:01:28 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e0859adb814fb2929730b32f8f913c28fc5943259ccadd6b58022b8c6017106c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:8e:c7:3a:0e:48:22:f3:0f:d9:86:2b:13:
                    30:a0:a9:50:99:fa:bc:2a:50:64:b4:48:eb:49:6b:
                    91:b0:47:49:cf:4e:78:de:6f:f8:80:26:f6:5a:ce:
                    9d:c4:5b:17:b0:74:2f:96:ba:7c:9f:ee:a8:d1:94:
                    e7:2b:42:dc:22:d3:7e:09:c3:de:3f:4b:04:3a:f0:
                    4c:3a:07:52:c6:4a:70:67:5f:52:16:c0:36:78:ca:
                    2d:9f:06:4d:a5:d4:e3:6f:51:59:34:56:fa:44:05:
                    07:40:da:79:35:0a:8d:1a:77:d4:fd:53:04:38:7d:
                    28:e3:88:30:1e:86:20:34:15:76:46:38:2c:b5:31:
                    ac:b0:84:aa:7e:f9:58:00:99:de:32:d0:f0:58:32:
                    34:e0:77:3c:bc:85:25:85:54:fc:69:ee:c4:ae:26:
                    ff:a8:d2:ce:41:11:37:da:e5:b9:f0:91:9a:a3:73:
                    90:5c:1f:2a:ad:03:dd:9a:c3:eb:d6:ae:e6:32:99:
                    2c:42:6f:9b:01:d2:f1:25:3c:a0:74:97:d4:1d:be:
                    1f:35:78:8f:39:b4:56:ef:84:97:70:09:6d:54:fb:
                    81:0b:74:3f:3d:43:28:c1:eb:61:a0:37:13:22:eb:
                    68:cd:d5:2c:ad:2e:4a:31:b1:36:5d:06:6f:b6:75:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F6:4F:63:81:5C:A1:CA:88:4B:F5:0B:FA:6C:C6:EB:CC:4D:94:48
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/170fe4ad-835c-4ee1-8209-e96bc14a0be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3742::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:70:8e:d2:e9:d6:d8:29:28:35:d1:13:de:3e:b4:88:e7:50:
         8f:1c:10:a1:2b:1d:4f:8c:b9:64:8e:fd:bd:df:67:4b:f3:cf:
         ff:82:97:73:ad:f2:bf:8c:7c:7a:70:a1:fa:8d:5c:eb:62:8f:
         54:16:09:0d:be:bd:bb:45:68:3f:80:cd:a3:f4:84:58:8c:f1:
         fe:62:c7:09:10:db:91:92:a7:fb:e1:da:c9:f4:4f:c4:47:23:
         eb:74:87:db:87:2b:a6:2e:77:aa:47:6c:5b:3b:80:c6:a5:c5:
         89:64:3c:50:fb:ea:49:92:9f:4d:67:3a:e2:a5:78:96:0d:5d:
         cc:5f:31:31:11:50:47:0b:98:0a:85:2c:0c:01:2d:e3:ea:74:
         08:1c:1f:74:7f:2e:21:1d:b2:06:c5:3b:1c:8a:fc:34:d8:11:
         2a:0b:2e:ad:82:07:16:e3:48:48:a2:a4:3a:b5:32:b4:6d:3a:
         c3:05:9a:86:54:c0:b3:b4:bf:1f:d7:d7:79:50:cc:f7:7e:d3:
         70:9f:8f:93:b2:e9:e7:bf:96:67:31:ef:0f:88:76:9b:42:c6:
         95:6d:eb:ac:20:75:26:4e:21:19:1e:fa:98:61:1b:0e:a1:0c:
         a3:2a:90:ae:48:6d:a5:03:da:48:2d:ff:0d:08:96:25:b8:6d:
         a7:98:19:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:43:06 2026 by rpki-client