Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23560678-f70b-4186-b491-14428cfb5852.roa
File:                     23560678-f70b-4186-b491-14428cfb5852.roa (raw, json)
Hash identifier:          CPUYdzNHHSuBGCcGJdO7H5VubljdBIIEOCcXT/rjTRA=
Subject key identifier:   0D:16:FF:E9:64:79:A5:B2:F7:DD:32:D7:14:6D:5E:F6:C0:F1:B0:18
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0223630B0F26149C9CBAAD473E8128877D19DA40
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23560678-f70b-4186-b491-14428cfb5852.roa
Signing time:             Fri 13 Feb 2026 06:31:22 +0000
ROA not before:           Fri 13 Feb 2026 06:31:22 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:29b0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:23:63:0b:0f:26:14:9c:9c:ba:ad:47:3e:81:28:87:7d:19:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:31:22 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b34e0cc7b613fdf210019d739d96e6b78fb2f00315af239d5cd6942283df486e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:6b:ef:df:50:03:67:54:ff:05:08:21:6f:
                    83:2d:46:a2:5a:62:98:1f:71:12:37:11:00:59:c2:
                    06:bc:07:20:d0:50:6e:06:02:a7:00:5b:44:14:6c:
                    0a:61:af:fc:b3:0d:b7:32:00:1b:be:15:e9:e8:f0:
                    35:75:98:0e:d8:42:9d:4c:2f:34:dd:a0:7b:84:04:
                    13:65:10:cf:98:a8:f8:5a:0b:7b:18:ad:d0:8e:23:
                    8d:3a:39:73:d7:f9:fc:66:fe:dd:2d:48:11:18:be:
                    02:f1:06:ae:1e:e6:74:68:64:b7:6a:fe:81:de:f5:
                    fd:75:1c:fd:78:52:ec:90:20:7b:09:5f:ae:61:d2:
                    7a:7a:f7:9c:5b:a2:10:cd:fb:f7:4e:68:88:03:9d:
                    34:9c:ba:ef:ea:0d:34:b6:97:85:a5:e9:ae:7b:89:
                    a3:bf:a1:2c:5d:e2:1c:b5:e4:25:c7:2b:85:99:bd:
                    c8:9c:2f:84:f3:c3:a8:66:fe:55:e0:5f:3a:96:ef:
                    42:c4:6d:1d:91:a9:c8:58:cb:09:66:8d:cc:45:be:
                    39:2b:be:b2:30:a2:31:07:34:e1:7a:c7:fb:0c:57:
                    72:8b:dc:2b:a6:6f:9b:12:03:3c:08:34:3e:32:77:
                    06:a4:6b:26:74:4f:8b:a4:c4:13:d3:f5:ec:a7:b7:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:FF:E9:64:79:A5:B2:F7:DD:32:D7:14:6D:5E:F6:C0:F1:B0:18
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23560678-f70b-4186-b491-14428cfb5852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:29b0::/45

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:32:2a:3e:96:df:b2:78:e8:6f:d7:d1:19:94:ce:d3:b7:
         df:bb:0f:be:81:0f:96:6f:5e:9b:f8:cd:dd:8b:be:77:59:14:
         89:1e:11:4d:35:b1:ba:9d:4f:8e:7c:2d:36:63:42:9b:39:79:
         a8:a6:d3:46:ac:0d:80:0c:c3:9a:6c:5a:86:7c:0d:13:b3:df:
         d8:78:ab:32:60:ab:17:81:9e:1a:20:7b:70:26:b1:65:b1:b9:
         a5:b1:d8:8e:44:6c:25:49:2b:ba:0a:69:b9:08:bc:bd:29:b9:
         2c:fb:82:ed:66:f5:a3:1a:53:9e:13:02:cc:7c:69:29:3f:ab:
         92:65:71:5c:5b:d4:53:b3:f1:29:6f:f1:e8:00:2b:d4:e0:05:
         ff:93:b7:1f:de:65:4e:34:e5:4a:f5:97:48:83:c0:a8:91:14:
         32:7a:42:7a:b6:ea:83:d9:11:41:ef:48:cd:30:eb:1e:de:1c:
         9c:8f:e6:a7:73:77:46:7a:92:a4:a1:60:4d:84:d6:55:ba:59:
         e0:b0:c8:6d:9c:d3:cc:0a:ed:5c:a0:0d:9b:83:0b:ab:d5:bf:
         27:06:64:9b:8d:59:5e:e1:f3:8c:56:b1:8b:08:af:22:c0:b3:
         1b:ed:77:ad:7d:45:72:12:98:09:33:17:32:f6:36:9e:d4:bd:
         d7:00:89:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:56 2026 by rpki-client