Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/174b62d6-30e2-4bff-9b35-6a16f7da8ca1.roa
File:                     174b62d6-30e2-4bff-9b35-6a16f7da8ca1.roa (raw, json)
Hash identifier:          xxikcZbzOhyxTYA5kHRlbmhRHfeITmEZZA/Z/FmxG7M=
Subject key identifier:   06:D7:4E:7F:36:17:C4:53:0C:65:11:41:DB:43:E3:E7:9C:54:7C:A2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       08C10F694D3C53EFBBF325CFA3B410ECFCE86ADA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/174b62d6-30e2-4bff-9b35-6a16f7da8ca1.roa
Signing time:             Fri 13 Feb 2026 12:32:14 +0000
ROA not before:           Fri 13 Feb 2026 12:32:14 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f94::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:0f:69:4d:3c:53:ef:bb:f3:25:cf:a3:b4:10:ec:fc:e8:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:32:14 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=799d23528c76cc594701abf094718f175f884bb6a03fe07850f1ca3eed6b3907, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:14:76:6d:33:df:72:bf:60:10:18:fe:f9:
                    d6:f4:5b:3f:e3:60:9e:fb:e9:cf:b2:db:9b:76:79:
                    19:ee:6b:fd:03:96:b8:e6:6a:b2:a2:2e:a2:5d:23:
                    ea:e1:fd:31:57:39:28:d5:ad:2d:ea:c7:bf:e7:26:
                    95:73:9d:00:03:9a:ac:5c:62:33:21:72:46:2b:0f:
                    c0:a8:80:78:f1:0a:f5:73:0f:26:c9:f7:bf:a2:0d:
                    f2:7b:33:da:b0:22:57:b2:44:36:e9:9c:cc:7e:cd:
                    1e:a0:7a:43:1f:e8:65:7d:29:17:20:cc:ef:51:99:
                    e5:e8:9c:84:48:71:5f:a2:7f:58:15:69:5d:a1:7d:
                    33:95:e0:4d:36:6d:c1:cd:de:f6:ff:a8:64:43:0f:
                    1f:a0:4d:68:25:ab:0c:a7:85:37:88:d5:61:9b:f0:
                    2d:87:15:b2:21:8e:4c:8f:8b:44:d2:c5:a1:f4:ef:
                    68:d4:14:89:02:bc:e5:9e:1b:ef:39:5c:0b:9c:1b:
                    dd:ea:6e:f5:00:aa:14:50:ac:90:41:24:9c:79:74:
                    b5:8b:7d:58:fc:03:e6:14:b7:ef:1a:35:bb:0b:6c:
                    19:91:5c:0e:47:41:21:7e:96:f5:3e:2c:d6:18:bb:
                    4c:27:d1:3e:44:c1:eb:7a:dd:96:aa:59:64:b1:f1:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:4E:7F:36:17:C4:53:0C:65:11:41:DB:43:E3:E7:9C:54:7C:A2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/174b62d6-30e2-4bff-9b35-6a16f7da8ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f94::/47

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:b3:c0:66:b8:94:db:76:da:7d:a9:c5:ce:b6:0a:9a:20:
         b5:20:66:48:7e:b0:7e:a5:d4:3a:a2:25:61:a8:8d:ac:0e:12:
         bb:ce:e6:8f:6f:03:59:bb:64:ef:42:6e:4c:0e:9a:40:ef:6b:
         75:44:59:57:b6:6c:98:17:83:5c:93:c8:73:e8:ef:86:e0:c6:
         8f:ff:14:d7:11:15:a4:14:42:b3:27:af:9b:ab:a1:10:46:2a:
         fe:0d:7b:91:e7:e6:36:b1:f5:3a:2b:1e:7f:7f:00:44:19:52:
         9d:46:fe:cb:f4:9d:73:c0:a1:a8:06:e7:c1:42:f7:2a:27:3a:
         46:74:5e:8b:1f:7f:3d:87:8e:2f:0d:57:be:1f:3c:43:06:5b:
         79:a1:aa:bd:07:29:eb:76:4a:14:e7:30:4e:b6:49:3b:ac:75:
         8c:01:a1:b8:36:8b:7b:b3:59:83:3f:47:5f:a7:75:58:42:70:
         fb:62:ed:bd:b3:82:7a:c1:ab:17:5b:7e:f0:53:c9:bc:2b:b2:
         a1:2e:d3:8a:1a:4d:d8:d5:30:40:73:55:71:40:44:cf:d6:9f:
         3b:e1:8a:b4:de:dd:c1:21:0c:e6:a3:f2:e4:ae:74:98:7c:a0:
         b2:ee:fd:40:a2:74:c1:bc:93:32:e7:a2:77:4f:f2:e3:dd:fb:
         64:07:b1:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:27 2026 by rpki-client