Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219fedd2-4235-4934-83cb-26b0797bc960.roa
File:                     219fedd2-4235-4934-83cb-26b0797bc960.roa (raw, json)
Hash identifier:          6qSNX2t4Swbr42FAxwzjVTT63JbpckU5bxCam68qwIc=
Subject key identifier:   48:04:F2:08:9C:C4:83:E6:19:1C:73:C0:5E:2E:FA:8D:0F:F3:24:81
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0B5295A6C30DC0FA0DCB7824CDAFE0F9409557D7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219fedd2-4235-4934-83cb-26b0797bc960.roa
Signing time:             Thu 12 Feb 2026 02:52:02 +0000
ROA not before:           Thu 12 Feb 2026 02:52:02 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d52::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:95:a6:c3:0d:c0:fa:0d:cb:78:24:cd:af:e0:f9:40:95:57:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:52:02 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=c0d7409dfe2c9efcd1e300635228ef760211cdec53d0497ae79a6fe6f7b508e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:76:b9:13:e4:e1:30:0e:10:cf:57:e5:2f:
                    fc:5b:07:48:f6:bf:fb:89:ab:cf:d6:63:1c:3a:21:
                    b7:57:c5:ca:99:41:60:c9:57:2e:21:63:29:40:06:
                    b4:4f:29:eb:2c:c1:b0:78:91:10:d6:fa:c7:ad:ab:
                    a2:22:72:d9:e6:c5:00:cd:81:e4:88:14:f0:1e:3c:
                    58:5b:68:71:4d:b7:bd:e7:0b:89:4b:71:02:97:d9:
                    de:aa:be:10:40:7d:8b:45:f5:cc:43:ce:1b:bd:8d:
                    ed:a3:ba:20:e6:20:97:af:13:6f:83:9d:fa:a0:aa:
                    4f:13:75:15:88:c3:70:6c:e8:df:b5:98:3f:7e:47:
                    41:f0:e7:c3:cb:48:6a:39:a8:67:f2:4f:91:0c:84:
                    a0:d8:83:5b:fe:40:65:60:8e:6e:5e:46:70:bd:d2:
                    b5:8b:59:5d:94:44:8e:e4:f4:0d:1b:a0:4c:a2:1e:
                    dd:76:6e:35:a0:45:9b:87:b5:8b:0f:4e:0e:13:ac:
                    d4:10:57:9c:8d:94:5a:3c:33:83:6d:df:cb:a7:e8:
                    f0:5e:80:de:5a:eb:ef:00:20:bc:21:fe:65:b8:f9:
                    c0:7c:92:d2:8d:37:24:eb:87:88:b5:4b:87:1d:4d:
                    7b:48:55:e4:4a:7b:51:e1:6c:48:d5:5e:24:13:0c:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:F2:08:9C:C4:83:E6:19:1C:73:C0:5E:2E:FA:8D:0F:F3:24:81
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219fedd2-4235-4934-83cb-26b0797bc960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d52::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:93:0d:ec:57:39:57:e6:3f:3b:0e:04:40:83:af:cb:3f:18:
         02:89:e8:b6:aa:27:36:42:de:fc:71:63:26:51:c9:37:ba:49:
         d7:49:41:fb:af:06:33:4a:95:f2:48:0b:31:b1:70:34:c9:0e:
         c6:af:bb:bb:73:4e:64:f1:d6:7b:e6:b7:7b:2e:5f:93:47:57:
         50:1e:8c:6f:72:8a:f0:b8:1e:ab:6d:0d:d2:c6:37:72:a1:bc:
         81:b6:7e:24:87:5a:73:09:64:fe:af:68:70:62:78:ae:22:8a:
         45:5a:ef:b9:c8:c2:a7:53:43:0d:61:bd:c3:e4:94:75:ff:0b:
         90:db:c2:31:6e:d5:f0:57:d0:84:71:b2:7d:84:43:1a:7a:61:
         ba:81:b5:ee:e3:61:37:35:50:4a:77:23:3b:bc:11:e2:9d:82:
         47:96:13:d8:9d:00:53:be:23:4c:9a:15:ba:da:5f:ff:ce:09:
         ee:92:5b:31:50:fe:08:bb:b4:23:16:b9:16:49:09:af:37:17:
         50:38:ac:8b:7f:32:fa:c7:cc:32:a7:10:17:58:ad:a2:49:3a:
         d3:d2:d5:9c:65:7e:60:e5:9a:f2:dc:5e:9f:af:f0:d0:8c:e6:
         23:c0:32:48:2b:32:ff:df:f1:0f:26:17:fe:cb:36:e1:e6:f8:
         73:a0:fc:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:26 2026 by rpki-client